Driving with RAET

We've talked about the concepts behind RAET, but now it's time to get down to business. Let's go ahead and enable it; we can then get started.

Configuring RAET

Setting up Salt to use RAET is actually not a big deal. In the master and the minion configuration files, set transport to raet:

transport: raet 

As of version 2016.3, this is still set to zeromq by default, but this may change in future releases.

There are some other changes that come with RAET. As RAET uses a different encryption scheme, it also has its own set of keys. The master used to store its minions' public keys in the following directories (inside /etc/salt/pki/master/):

• minions_pre/: This specifies the minions that have identified themselves to the master but whom the master has not yet accepted

• minions/: This denotes the minions that have been identified to and accepted by the master

• minions_rejected/: This specifies the minions that have identified themselves to the master but with whom the master has explicitly...