How do I properly use x509_v2 modules on 3006.8?

7 views
Skip to first unread message

Callum

unread,
Sep 23, 2025, 1:20:05 AM (4 days ago) Sep 23
to Salt-users
/etc/salt/minion.d/features.conf 
features:
  x509_v2: true

salt --versions-report
Salt Version:
          Salt: 3006.8
 
Python Version:
        Python: 3.10.14 (main, Apr  3 2024, 21:30:09) [GCC 11.2.0]
 
Dependency Versions:
          cffi: 1.14.6
      cherrypy: unknown
      dateutil: 2.8.1
     docker-py: Not Installed
         gitdb: Not Installed
     gitpython: Not Installed
        Jinja2: 3.1.3
       libgit2: 1.6.3
  looseversion: 1.0.2
      M2Crypto: 0.39.0
          Mako: Not Installed
       msgpack: 1.0.2
  msgpack-pure: Not Installed
  mysql-python: Not Installed
     packaging: 22.0
     pycparser: 2.21
      pycrypto: Not Installed
  pycryptodome: 3.19.1
        pygit2: 1.12.0
  python-gnupg: 0.4.8
        PyYAML: 6.0.1
         PyZMQ: 23.2.0
        relenv: 0.16.0
         smmap: Not Installed
       timelib: 0.2.4
       Tornado: 4.5.3
           ZMQ: 4.3.4
 
System Versions:
          dist: amzn 2
        locale: utf-8
       machine: x86_64
       release: 5.10.237-230.949.amzn2.x86_64
        system: Linux
       version: Amazon Linux 2 

I am getting the following error:
'x509_v2.private_key_managed' was not found in SLS

The state is there 
ls -l /opt/saltstack/salt/lib/python3.10/site-packages/salt/states/ | grep 509
-rw-r--r-- 1 root root  28458 Apr 29  2024 x509.py
-rw-r--r-- 1 root root  66320 Apr 29  2024 x509_v2.py

But only the 509 and not 509_v2 is usable it seems:
salt 'xyz' sys.list_state_modules | grep 509
    - x509

I have cleared cache after adding the features. 

Any help appreciated.

Phipps, Thomas

unread,
Sep 23, 2025, 1:28:29 AM (4 days ago) Sep 23
to salt-...@googlegroups.com
x509_v2 is meant to take the place of the old x509 as such it used the same virtual name which is x509 not x509_v2

```
features:
  x509_v2: true
```
is what tells salt to use x509_v2 instead of the original x509

--
You received this message because you are subscribed to the Google Groups "Salt-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to salt-users+...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/salt-users/9825e7bc-26fa-4f8e-87c5-ae0724a01e50n%40googlegroups.com.

Callum

unread,
Sep 23, 2025, 2:36:57 AM (4 days ago) Sep 23
to Salt-users
Thanks!
Reply all
Reply to author
Forward
0 new messages