Run salt.minion after salt.minion.cert

Several configs require resfersh - for example
/etc/salt/minion.d/_keystone.conf file needs to be updated
in case of Openstack release update - to form proper auth url.

Change-Id: Idc48547880a9226aec3ef4b4deea6279b6e16aa3
Related-PROD: PROD-29843
(cherry picked from commit e2531ba47f829e17e1567b6a3ff223d9294cdf63)
diff --git a/upgrade-mcp-release.groovy b/upgrade-mcp-release.groovy
index c34215d..b0d2507 100644
--- a/upgrade-mcp-release.groovy
+++ b/upgrade-mcp-release.groovy
@@ -481,6 +481,8 @@
                 // update minions certs
                 salt.enforceState(venvPepper, "I@salt:minion", 'salt.minion.cert', true)
 
+                // run `salt.minion` to refresh all minion configs (for example _keystone.conf)
+                salt.enforceState([saltId: venvPepper, target: "I@salt:minion ${extra_tgt}", state: ['salt.minion'], read_timeout: 60, retries: 2])
                 // Retry needed only for rare race-condition in user appearance
                 common.infoMsg('Perform: updating users and keys')
                 salt.enforceState(venvPepper, "I@linux:system", 'linux.system.user', true)