Troubleshooting

Overview

The following topic includes some of the common errors that users experience during the SaltStack Enterprise installation process and how to fix them.

Salt installation problems

The following section addresses issues you might encounter when installing Salt.

yum install returns error due to DNS or transparent proxy

When installing Salt as a pre-installation step (see Install or upgrade Salt), yum might return the following error:

..code-block::
[Error 14] curl#60 – “Peer’s Certificate issuer is not recognized.

In this case, it is likely that you are either experiencing DNS issues or you have a transparent TLS/https proxy in your environment.

To resolve DNS issues, ensure that repo.saltstack.com resolves on your machine or that you can reach that server.

If you have a transparent proxy, add sslverify=0 to the SaltStack yum repo configuration and then retry the installation of the packages. This will workaround the fact that your transparent proxy is interfering with connection certificates and TLS signatures.

Single-node installation problems

The following section explains how to resolve issues that users experience when running a Single-node installation scenario.

Single-node installation script terminates

If both the Salt Master and Salt Minion are installed, the script skips this step and proceeds with the setup of SaltStack Enterprise.

If either the Salt Master or the Salt Minion packages are installed, but not both, the script will terminate. The script terminates as a safeguard to prevent the user from accidentally disrupting an existing installation.

The solution is to ensure that both the Salt Master and Salt Minion are installed on the node before running the installation script.

Multi-node installation problems

The following section explains how to resolve issues that users experience when running a Multi-node installation scenario.

Salt Master is not showing the keys for the Salt Minion

Sometimes users experience a problem where minion IDs don’t appear when trying to get the Salt Master to accept minion keys. To fix this problem, you can specify the IP address of the master in each Minion’s etc/salt/minion.d/id.conf file. Edit this file and change the master setting to show the master’s IP address. For example, master: 127.0.0.0. For additional methods of connecting the Salt Minion to the Salt Master, see Configuring the Salt Minion.

Authentication error occurs when applying highstate

During the initial application of the highstate to the first Salt Master, you may see the following error message: Authentication error occurred.

This error displays because the Salt Master has not yet authenticated to the Enterprise API (RaaS) server, but the Master Plugin installation state will restart the Salt Master process and the issue will be resolved automatically.