ArielGlenn has submitted this change and it was merged. Change subject: salt master: wake up minions after master key rotation ......................................................................
salt master: wake up minions after master key rotation Change-Id: I06e8264a3c8f88080b5cb77897344687b97841e1 --- M modules/salt/templates/master.erb 1 file changed, 16 insertions(+), 0 deletions(-) Approvals: ArielGlenn: Looks good to me, approved jenkins-bot: Verified diff --git a/modules/salt/templates/master.erb b/modules/salt/templates/master.erb index a7d781c..9ff5dec 100644 --- a/modules/salt/templates/master.erb +++ b/modules/salt/templates/master.erb @@ -93,6 +93,22 @@ # #job_cache: True +# By default, the master AES key rotates every 24 hours. The next command +# following a key rotation will trigger a key refresh from the minion which may +# result in minions which do not respond to the first command after a key refresh. +# +# To tell the master to ping all minions immediately after an AES key refresh, set +# ping_on_rotate to True. This should mitigate the issue where a minion does not +# appear to initially respond after a key is rotated. +# +# Note that ping_on_rotate may cause high load on the master immediately after +# the key rotation event as minions reconnect. Consider this carefully if this +# salt master is managing a large number of minions. +# +# If disabled, it is recommended to handle this event by listening for the +# 'aes_key_rotate' event with the 'key' tag and acting appropriately. +ping_on_rotate: True + # Cache minion grains and pillar data in the cachedir. #minion_data_cache: True -- To view, visit https://gerrit.wikimedia.org/r/214314 To unsubscribe, visit https://gerrit.wikimedia.org/r/settings Gerrit-MessageType: merged Gerrit-Change-Id: I06e8264a3c8f88080b5cb77897344687b97841e1 Gerrit-PatchSet: 1 Gerrit-Project: operations/puppet Gerrit-Branch: production Gerrit-Owner: ArielGlenn <[email protected]> Gerrit-Reviewer: ArielGlenn <[email protected]> Gerrit-Reviewer: jenkins-bot <> _______________________________________________ MediaWiki-commits mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
