Vault configuration isn't accessible to the current minion process when we provision certificate information.
Salt doesn't seem to offer a way to reload configuration, but we can restart the process
roles/core/salt/init.sls
# ------------------------------------------------------------- # Vault # # For shellserver, set in roles/shellserver/vault unit instead. # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - {% if not salt["node.has_role"]("shellserver") %} {{ dirs.etc }}/salt/minion.d/vault.conf: file.managed: - source: salt://roles/core/salt/files/vault.conf - template: jinja - context: certificate: {{ certificates.dir }}/nasqueron-vault-ca.crt {% endif %}