Run salt-ca state on master before update salt certs on minions
Change-Id: I8aef88e008a6f926bdbf394e8e80dcde1ab02a80
Related-Prod: PROD-29824 (PROD:29824)
diff --git a/upgrade-mcp-release.groovy b/upgrade-mcp-release.groovy
index 1f4aefb..e389937 100644
--- a/upgrade-mcp-release.groovy
+++ b/upgrade-mcp-release.groovy
@@ -451,6 +451,9 @@
}
// update minions certs
+ // call for `salt.minion.ca` state on related nodes to make sure
+ // mine was updated with required data after salt-minion/salt-master restart salt:minion:ca
+ salt.enforceState(venvPepper, "I@salt:minion:ca", 'salt.minion.ca', true)
salt.enforceState(venvPepper, "I@salt:minion", 'salt.minion.cert', true)
// updating users and keys
salt.enforceState(venvPepper, "I@linux:system", 'linux.system.user', true)