salt.runners.pki

Salt runner for PKI key management utilities.

New in version 3009.0.

salt.runners.pki.migrate_to_mmap(dry_run=False)

Migrate PKI keys from the legacy filesystem layout into the mmap_key backend.

Scans pki_dir for existing accepted/pending/rejected/denied keys and loads them into the mmap_key index+heap files. Safe to run repeatedly — already-present keys are overwritten in-place.

With dry_run=True, counts the keys that would be migrated without writing anything.

CLI Examples:

# Preview what would be migrated
salt-run pki.migrate_to_mmap dry_run=True

# Perform the migration
salt-run pki.migrate_to_mmap

salt.runners.pki.status()

Show PKI key counts from the filesystem layout.

CLI Example:

salt-run pki.status