[Bug]: state.event stream exits when running x509.create_certificate

[supfors]

What happened?

Listening to the eventbus (salt-run state.event pretty=True) results in an error when I request a certificate as described in https://docs.saltproject.io/en/3006/ref/states/all/salt.states.x509_v2.html

Exception occurred in runner state.event: Traceback (most recent call last):
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/client/mixins.py", line 388, in low
    data["return"] = func(*args, **kwargs)
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/loader/lazy.py", line 162, in __call__
    ret = self.loader.run(run_func, *args, **kwargs)
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/loader/lazy.py", line 1248, in run
    return self._last_context.run(self._run_as, _func_or_method, *args, **kwargs)
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/loader/lazy.py", line 1263, in _run_as
    ret = _func_or_method(*args, **kwargs)
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/runners/state.py", line 312, in event
    return statemod["state.event"](
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/loader/lazy.py", line 162, in __call__
    ret = self.loader.run(run_func, *args, **kwargs)
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/loader/lazy.py", line 1248, in run
    return self._last_context.run(self._run_as, _func_or_method, *args, **kwargs)
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/loader/lazy.py", line 1263, in _run_as
    ret = _func_or_method(*args, **kwargs)
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/state.py", line 2594, in event
    salt.utils.data.decode(ret["data"]),
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/utils/data.py", line 252, in decode
    return decode_dict(
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/utils/data.py", line 365, in decode_dict
    value = decode_list(
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/utils/data.py", line 482, in decode_list
    item = decode_dict(
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/utils/data.py", line 411, in decode_dict
    value = decode(
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/utils/data.py", line 293, in decode
    data = _decode_func(data, encoding, errors, normalize)
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/utils/stringutils.py", line 113, in to_unicode
    return _normalize(to_str(s, encoding, errors))
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/utils/stringutils.py", line 89, in to_str
    raise exc  # pylint: disable=raising-bad-type
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/utils/stringutils.py", line 82, in to_str
    return _normalize(s.decode(enc, errors))
UnicodeDecodeError: 'utf-8' codec can't decode byte 0x82 in position 1: invalid start byte

Seems like the same issue reported in #68076

Testcase:

/etc/salt/minion

features:
  x509_v2: true

x509_signing_policies:
  test:
    - minions: '*'
    - signing_private_key: /tmp/MyCa.key
    - signing_cert: /tmp/MyCa.crt

x509_setup.sls

Manage key:
  x509.private_key_managed:
    - name: /tmp/MyCa.key
    - algo: rsa
    - keysize: 4096
    - mode: 400

Manage MyCa:
  x509.certificate_managed:
    - name: /tmp/MyCa.crt
    - signing_private_key: /tmp/MyCa.key
    - require:
      - x509: /tmp/MyCa.key

x509_req.sls:

Manage private key:
  x509.private_key_managed:
    - name: /tmp/{{ grains.id }}.key
    - algo: rsa
    - keysize: 2048
    - mode: 400

Manage CSR:
  x509.csr_managed:
    - name: /tmp/{{ grains.id }}.csr
    - private_key: /tmp/{{ grains.id }}.key
    - mode: 444
    - require:
      - Manage private key

Request signed certificate:
  x509.certificate_managed:
    - name: /tmp/{{ grains.id }}.crt
    - ca_server: localhost
    - signing_policy: test
    - csr: /tmp/{{ grains.id }}.csr
    - require:
      - Manage private key
      - Manage CSR

Debug from the minion:

[DEBUG   ] PubChannel received: {'enc': 'aes', 'load': {'fun': 'state.apply', 'arg': ['test.x509_req'], 'tgt': 'localhost', 'jid': '20251020115212169424', 'ret': '', 'master_id': 'localhost_master', 'tgt_type': 'glob', 'user': 'root'}, 'sig_algo': 'PKCS1v15-SHA1', 'sig': b"\x82*P\xf8\x93f\xf8\xe4C\xae(\xb7\xbex}\x8a\x1bM`\xb7w\xc4\xde\x99H\xb4\xe8^iF\xf8\xcf\x8em\x99\xa6Pz:\xf6\xf1\xd6\x03\xf3o\x1d\x7f.\x8f\x14q\xe4R\x13\xa4M\x12\x8bLR?|\xb8\xf8\x00xl\xca\xb3C\x05\x9f*\xb9\xc2gQ)\xbd\x1c\xed\x1e~\xcdeIz\xd9-!\xd2n\xb4#\xf3\x86\xac1U&\xf9\x98\xe69\xfdJ\xec\xb4\xb0\x8cS\xca\x8e\x1d&\xd7%|\xb8\xa0\xcdx\x92?9\xd9\xc9\x7f\xd7\xd2H\xd2\x96\x03\xaf\xe4R\xdf\xee\xc5_I\x06\xd4B\x1b\xfc\xe3\x05\xa8\x99`\xfe\x9f\x1d\x86\xc44IX\x99\xe8\xb7\xd2`#\x98X\xf6\xd0\x9b\xd5\x87|\xe4\x9a\xad\xe7P\x06tM\x92y\xe6\xae\x15\xccp\xa0\xa2\xc3R\xd8+\xcb\xcf\x90E\x14\x1c\x87\xc7L\x13R\xfe\xee\xa42\xecg\xf7\xd9\xb0MoKj+\xfe\x81\xeaM\xc0*[\xfb\xea\x0f\xe1\xacX\x04\xd8\x96\xf6a$u\xfb\x07\xb3^\xfa'C\t\x81\xb2;\xee\xa8\x9c\xd7\xed"}
[DEBUG   ] The functions from module 'glob_match' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded glob_match.match
[INFO    ] User root Executing command state.apply with jid 20251020115212169424
[DEBUG   ] Command details {'fun': 'state.apply', 'arg': ['test.x509_req'], 'tgt': 'localhost', 'jid': '20251020115212169424', 'ret': '', 'master_id': 'localhost_master', 'tgt_type': 'glob', 'user': 'root'}
[DEBUG   ] Subprocess ProcessPayload(jid=20251020115212169424) added
[DEBUG   ] The functions from module 'jinja' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded jinja.render
[DEBUG   ] The functions from module 'yaml' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded yaml.render
[INFO    ] Starting a new job 20251020115212169424 with PID 103577
[DEBUG   ] The functions from module 'direct_call' are being loaded by dir() on the loaded module
[DEBUG   ] The functions from module 'splay' are being loaded by dir() on the loaded module
[DEBUG   ] Could not LazyLoad direct_call.allow_missing_func: 'direct_call.allow_missing_func' is not available.
[DEBUG   ] The functions from module 'state' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded state.apply
[DEBUG   ] The functions from module 'config' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded config.option
[DEBUG   ] The functions from module 'saltutil' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded saltutil.is_running
[DEBUG   ] Override  __grains__: <module 'salt.loaded.int.module.grains' from '/opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/grains.py'>
[DEBUG   ] The functions from module 'grains' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded grains.get
[DEBUG   ] Initializing new AsyncAuth for ('/etc/salt/pki/minion', 'localhost', 'tcp://127.0.0.1:4506', '1731569926.8358774')
[DEBUG   ] salt.crypt.get_rsa_key: Loading private key
[DEBUG   ] Gathering pillar data for state run
[DEBUG   ] Determining pillar cache
[DEBUG   ] Initializing new AsyncAuth for ('/etc/salt/pki/minion', 'localhost', 'tcp://127.0.0.1:4506', '1731569926.8358774')
[DEBUG   ] salt.crypt.get_rsa_key: Loading private key
[DEBUG   ] Closing AsyncReqChannel instance
[DEBUG   ] Finished gathering pillar data for state run
[INFO    ] Loading fresh modules for state activity
[DEBUG   ] The functions from module 'jinja' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded jinja.render
[DEBUG   ] The functions from module 'yaml' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded yaml.render
[DEBUG   ] PubChannel received: {'enc': 'aes', 'load': {'fun': 'saltutil.find_job', 'arg': ['20251020115212169424'], 'tgt': ['localhost'], 'jid': '20251020115217321130', 'ret': '', 'master_id': 'localhost_master', 'tgt_type': 'list', 'user': 'root'}, 'sig_algo': 'PKCS1v15-SHA1', 'sig': b'HS\xf2&G\xf1+>(\xec\x89\x12,\xc7\x9bVl\x96\x8bc6\xaf#\xf4\xbdr\xc9\x00`A\xef37\xe4\xeb\x03I\xc9\xd8A\xbd\xb6.\xd0T9&\xdcu/w1\xc1\x82\x10\x98\x88\xed\x8asX\xc0>z\xcaT\xff\xa1\xb9\x84\xd0\xb9\x03\xb4m\xe7\xcd>fz\x0e\xcb\xe4\x16\x0f\xd8\xc24\x02c\xceR\x03\xfe\\EY&\xd0sJ}=Y\xa9\xc2\x9c\xa1\x93\x1b,\xb5\xb1\xa6\x86\x86\xa1\x05\x16\xb48-n5\xce\xbc\xbe\xb8\x88\xd5\x0e\xaf\xc3\xfe\xdc\x00\xf2\xabh\xe5A\x85x\x16\x979\xddr\xaf\x0e\xc8\x87-\x1dVb\xb2\x85\xa8\x0ex\xef\xac\\\xc9\xd4~\\\x13H\x85\x0f\x19\xd0\t\x15\xf3y\xd9\xd3\x98b\x94u\xc7#\xd1Q}?FW\xa4\x92\xec\xe4)\xd8\x06\xcd7\xf9>,[\xe2\x91\xb8ju\xae\xe6,\x8dW\x1f\x0c\xaekd\xa32\xae\x7f\xab\x8f\xc1\xfe\xf5MW\xf0]\xe4Bz\xb3\xb7\x1eW\xed\x80\xb6b\x7f<C`\xe3\x8bv\xd5\x87W%\xd8'}
[DEBUG   ] The functions from module 'list_match' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded list_match.match
[INFO    ] User root Executing command saltutil.find_job with jid 20251020115217321130
[DEBUG   ] Command details {'fun': 'saltutil.find_job', 'arg': ['20251020115212169424'], 'tgt': ['localhost'], 'jid': '20251020115217321130', 'ret': '', 'master_id': 'localhost_master', 'tgt_type': 'list', 'user': 'root'}
[DEBUG   ] Subprocess ProcessPayload(jid=20251020115217321130) added
[DEBUG   ] The functions from module 'jinja' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded jinja.render
[DEBUG   ] The functions from module 'yaml' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded yaml.render
[INFO    ] Starting a new job 20251020115217321130 with PID 103653
[DEBUG   ] The functions from module 'direct_call' are being loaded by dir() on the loaded module
[DEBUG   ] The functions from module 'splay' are being loaded by dir() on the loaded module
[DEBUG   ] Could not LazyLoad direct_call.allow_missing_func: 'direct_call.allow_missing_func' is not available.
[DEBUG   ] The functions from module 'saltutil' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded saltutil.find_job
[INFO    ] Returning information for job: 20251020115217321130
[DEBUG   ] SaltEvent PUB socket URI: /var/run/salt/minion/minion_event_49960de588_pub.ipc
[DEBUG   ] SaltEvent PULL socket URI: /var/run/salt/minion/minion_event_49960de588_pull.ipc
[DEBUG   ] Sending event: tag = __master_req_channel_payload/4dd17706-f9a9-4fb2-8035-ea0c227f0dc0/localhost; data = {'cmd': '_return', 'id': 'localhost', 'success': True, 'return': {'pid': 103577, 'fun': 'state.apply', 'arg': ['test.x509_req'], 'tgt': 'localhost', 'jid': '20251020115212169424', 'ret': '', 'master_id': 'localhost_master', 'tgt_type': 'glob', 'user': 'root'}, 'retcode': 0, 'jid': '20251020115217321130', 'fun': 'saltutil.find_job', 'fun_args': ['20251020115212169424'], 'user': 'root', 'master_id': 'localhost_master', '_stamp': '2025-10-20T11:52:17.430105'}
[DEBUG   ] Minion of 'localhost' is handling event tag '__master_req_channel_payload/4dd17706-f9a9-4fb2-8035-ea0c227f0dc0/localhost'
[DEBUG   ] Minion return retry timer set to 7 seconds (randomized)
[DEBUG   ] SaltEvent PUB socket URI: /var/run/salt/minion/minion_event_49960de588_pub.ipc
[DEBUG   ] SaltEvent PULL socket URI: /var/run/salt/minion/minion_event_49960de588_pull.ipc
[DEBUG   ] Sending event: tag = __master_req_channel_return/4dd17706-f9a9-4fb2-8035-ea0c227f0dc0; data = {'ret': None, '_stamp': '2025-10-20T11:52:17.444557'}
[DEBUG   ] Closing IPCMessageClient instance
[DEBUG   ] Minion of 'localhost' is handling event tag '__master_req_channel_return/4dd17706-f9a9-4fb2-8035-ea0c227f0dc0'
[DEBUG   ] Closing IPCMessageSubscriber instance
[DEBUG   ] Closing IPCMessageClient instance
[DEBUG   ] minion return: {'success': True, 'return': {'pid': 103577, 'fun': 'state.apply', 'arg': ['test.x509_req'], 'tgt': 'localhost', 'jid': '20251020115212169424', 'ret': '', 'master_id': 'localhost_master', 'tgt_type': 'glob', 'user': 'root'}, 'retcode': 0, 'jid': '20251020115217321130', 'fun': 'saltutil.find_job', 'fun_args': ['20251020115212169424'], 'user': 'root', 'master_id': 'localhost_master'}
[DEBUG   ] Subprocess ProcessPayload(jid=20251020115217321130) cleaned up
[DEBUG   ] In saltenv 'base', looking at rel_path 'test/x509_req.sls' to resolve 'salt://test/x509_req.sls'
[DEBUG   ] In saltenv 'base', ** considering ** path '/var/cache/salt/minion/files/base/test/x509_req.sls' to resolve 'salt://test/x509_req.sls'
[DEBUG   ] compile template: /var/cache/salt/minion/files/base/test/x509_req.sls
[DEBUG   ] Jinja search path: ['/var/cache/salt/minion/files/base']
[PROFILE ] Time (in seconds) to render '/var/cache/salt/minion/files/base/test/x509_req.sls' using 'jinja' renderer: 0.004020214080810547
[PROFILE ] Time (in seconds) to render '/var/cache/salt/minion/files/base/test/x509_req.sls' using 'yaml' renderer: 0.004274129867553711
[DEBUG   ] The functions from module 'config' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded config.option
[DEBUG   ] The functions from module 'x509' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded x509.private_key_managed
[INFO    ] Running state [/tmp/localhost.key] at time 13:52:21.214778
[INFO    ] Executing state x509.private_key_managed for [/tmp/localhost.key]
[DEBUG   ] The functions from module 'state' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded state.single
[DEBUG   ] The functions from module 'saltutil' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded saltutil.is_running
[DEBUG   ] Initializing new AsyncAuth for ('/etc/salt/pki/minion', 'localhost', 'tcp://127.0.0.1:4506', '1731569926.8358774')
[DEBUG   ] Gathering pillar data for state run
[DEBUG   ] Determining pillar cache
[DEBUG   ] Initializing new AsyncAuth for ('/etc/salt/pki/minion', 'localhost', 'tcp://127.0.0.1:4506', '1731569926.8358774')
[DEBUG   ] salt.crypt.get_rsa_key: Loading private key
[DEBUG   ] Closing AsyncReqChannel instance
[DEBUG   ] Finished gathering pillar data for state run
[INFO    ] Loading fresh modules for state activity
[DEBUG   ] The functions from module 'jinja' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded jinja.render
[DEBUG   ] The functions from module 'yaml' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded yaml.render
[DEBUG   ] The functions from module 'file' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded file.managed
[INFO    ] Running state [/tmp/localhost.key] at time 13:52:21.389922
[INFO    ] Executing state file.managed for [/tmp/localhost.key]
[DEBUG   ] The functions from module 'config' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded config.option
[DEBUG   ] The functions from module 'file' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded file.check_perms
[INFO    ] File /tmp/localhost.key not updated
[INFO    ] Completed state [/tmp/localhost.key] at time 13:52:21.395628 (duration_in_ms=5.706)
[DEBUG   ] The functions from module 'state' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded state.check_result
[DEBUG   ] The functions from module 'file' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded file.is_link
[INFO    ] The private key is in the correct state
[INFO    ] Completed state [/tmp/localhost.key] at time 13:52:21.435521 (duration_in_ms=220.743)
[INFO    ] Running state [/tmp/localhost.csr] at time 13:52:21.436033
[INFO    ] Executing state x509.csr_managed for [/tmp/localhost.csr]
[DEBUG   ] Initializing new AsyncAuth for ('/etc/salt/pki/minion', 'localhost', 'tcp://127.0.0.1:4506', '1731569926.8358774')
[DEBUG   ] Gathering pillar data for state run
[DEBUG   ] Determining pillar cache
[DEBUG   ] Initializing new AsyncAuth for ('/etc/salt/pki/minion', 'localhost', 'tcp://127.0.0.1:4506', '1731569926.8358774')
[DEBUG   ] salt.crypt.get_rsa_key: Loading private key
[DEBUG   ] Closing AsyncReqChannel instance
[DEBUG   ] Finished gathering pillar data for state run
[INFO    ] Loading fresh modules for state activity
[DEBUG   ] The functions from module 'jinja' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded jinja.render
[DEBUG   ] The functions from module 'yaml' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded yaml.render
[DEBUG   ] The functions from module 'file' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded file.managed
[INFO    ] Running state [/tmp/localhost.csr] at time 13:52:21.606526
[INFO    ] Executing state file.managed for [/tmp/localhost.csr]
[DEBUG   ] The functions from module 'config' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded config.option
[DEBUG   ] The functions from module 'file' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded file.check_perms
[INFO    ] File /tmp/localhost.csr not updated
[INFO    ] Completed state [/tmp/localhost.csr] at time 13:52:21.609357 (duration_in_ms=2.831)
[INFO    ] The certificate signing request is in the correct state
[INFO    ] Completed state [/tmp/localhost.csr] at time 13:52:21.648079 (duration_in_ms=212.046)
[INFO    ] Running state [/tmp/localhost.crt] at time 13:52:21.648428
[INFO    ] Executing state x509.certificate_managed for [/tmp/localhost.crt]
/opt/saltstack/salt/lib/python3.10/site-packages/salt/states/x509_v2.py:392: DeprecationWarning: The default value for `days_valid` will change to 30. Please adapt your code accordingly.
  salt.utils.versions.warn_until(
/opt/saltstack/salt/lib/python3.10/site-packages/salt/states/x509_v2.py:402: DeprecationWarning: The default value for `days_remaining` will change to 7. Please adapt your code accordingly.
  salt.utils.versions.warn_until(
[DEBUG   ] Initializing new AsyncAuth for ('/etc/salt/pki/minion', 'localhost', 'tcp://127.0.0.1:4506', '1731569926.8358774')
[DEBUG   ] Gathering pillar data for state run
[DEBUG   ] Determining pillar cache
[DEBUG   ] Initializing new AsyncAuth for ('/etc/salt/pki/minion', 'localhost', 'tcp://127.0.0.1:4506', '1731569926.8358774')
[DEBUG   ] salt.crypt.get_rsa_key: Loading private key
[DEBUG   ] Closing AsyncReqChannel instance
[DEBUG   ] Finished gathering pillar data for state run
[INFO    ] Loading fresh modules for state activity
[DEBUG   ] The functions from module 'jinja' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded jinja.render
[DEBUG   ] The functions from module 'yaml' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded yaml.render
[DEBUG   ] The functions from module 'file' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded file.managed
[INFO    ] Running state [/tmp/localhost.crt] at time 13:52:21.824952
[INFO    ] Executing state file.managed for [/tmp/localhost.crt]
[DEBUG   ] The functions from module 'config' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded config.option
[DEBUG   ] The functions from module 'file' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded file.check_perms
[INFO    ] File /tmp/localhost.crt not updated
[INFO    ] Completed state [/tmp/localhost.crt] at time 13:52:21.827739 (duration_in_ms=2.786)
[DEBUG   ] The functions from module 'x509' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded x509.get_signing_policy
[DEBUG   ] The functions from module 'publish' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded publish.publish
[INFO    ] Publishing 'x509.sign_remote_certificate' to tcp://127.0.0.1:4506
[DEBUG   ] Initializing new AsyncAuth for ('/etc/salt/pki/minion', 'localhost', 'tcp://127.0.0.1:4506', '1731569926.8358774')
[DEBUG   ] salt.crypt.get_rsa_key: Loading private key
[DEBUG   ] PubChannel received: {'enc': 'aes', 'load': {'fun': 'x509.sign_remote_certificate', 'arg': ['test', {}, True], 'tgt': 'localhost', 'jid': '20251020115221844441', 'ret': '', 'master_id': 'localhost_master', 'id': 'localhost', 'tgt_type': 'glob', 'user': 'root'}, 'sig_algo': 'PKCS1v15-SHA1', 'sig': b"\x14\x845s>p\xa9\x18\xbc\xc0x\x1a9\xb5H\x00\xba\xe3l\xe88O>\xe7\xa1\xf7*YI\x1c\xd74KLJQ\xf8]\xf7\x19\xc9\x10u\xda\xc0\x8fi\x88\x8b\x1ctf\xfal\x96\x93\xeb\xd3\xb2\xaf\xef\t\xf4\xd9\x0c\xddR\xb8\xd5\xe7\xabs\xf8\xee\xca\x1dU\xee`\xbe\xd0J\xef\\h\xe2R_U\xf9}Y\rO\x8d\xad\xfec\xe0\xa9ib\x1a\xe8{,\xf5\xcax\x0f\xedy\xd13\xe8E\x8f7C\\c\x82\x0b/P\xb2\xf1\x84\xeb?\x8e\x03\xd7\x03\x9eo\x07\xd2\xdeR\xf4)bls)\xc1\xce\x19#\xc4L\xba{*\x80\t\x08\xc2\xb71$g\xfa\x9bLO\xe3\xa6\xdf\xa0>\xebh\xb7|\x99\nGc\xb6\xaeV\xb4)\x82\xd1\x8euv9\xd5\x07s'S\x8b\x11\xa0\x85\xad\xae\x80\xca\\\xce;\x97\xb4\xfe\xdcp\xca*\xce\xcaRQvR\x84c^sB\x1c\xd5\tu\xfd0/\x1bQ\xa1\xc2\xfd\xc8\x10\x952YG\xc0\x00\x0c\x9d\xca\x01\xe1R\xd9\xe1\xf57I"}
[INFO    ] User root Executing command x509.sign_remote_certificate with jid 20251020115221844441
[DEBUG   ] Command details {'fun': 'x509.sign_remote_certificate', 'arg': ['test', {}, True], 'tgt': 'localhost', 'jid': '20251020115221844441', 'ret': '', 'master_id': 'localhost_master', 'id': 'localhost', 'tgt_type': 'glob', 'user': 'root'}
[DEBUG   ] Subprocess ProcessPayload(jid=20251020115221844441) added
[DEBUG   ] The functions from module 'jinja' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded jinja.render
[DEBUG   ] The functions from module 'yaml' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded yaml.render
[INFO    ] Starting a new job 20251020115221844441 with PID 103763
[DEBUG   ] The functions from module 'direct_call' are being loaded by dir() on the loaded module
[DEBUG   ] The functions from module 'splay' are being loaded by dir() on the loaded module
[DEBUG   ] Could not LazyLoad direct_call.allow_missing_func: 'direct_call.allow_missing_func' is not available.
[DEBUG   ] The functions from module 'x509' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded x509.sign_remote_certificate
[DEBUG   ] The functions from module 'pillar' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded pillar.get
[DEBUG   ] The functions from module 'config' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded config.get
[DEBUG   ] The functions from module 'match' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded match.glob
[DEBUG   ] The functions from module 'glob_match' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded glob_match.match
[INFO    ] Returning information for job: 20251020115221844441
[DEBUG   ] SaltEvent PUB socket URI: /var/run/salt/minion/minion_event_49960de588_pub.ipc
[DEBUG   ] SaltEvent PULL socket URI: /var/run/salt/minion/minion_event_49960de588_pull.ipc
[DEBUG   ] Sending event: tag = __master_req_channel_payload/c058dec3-917f-43e2-867c-8dc4965380c9/localhost; data = {'cmd': '_return', 'id': 'localhost', 'success': True, 'return': {'data': {'signing_cert': b'0\x82\x04\x8c0\x82\x02t\xa0\x03\x02\x01\x02\x02\x14O\x84\xcb\x0f\x08\x84>\xbcr\xfa\x11\xf1\xef\x80\xf3\x90&\xdf\x10\xdd0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x000\x000\x1e\x17\r251020114938Z\x17\r261020114938Z0\x000\x82\x02"0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x01\x05\x00\x03\x82\x02\x0f\x000\x82\x02\n\x02\x82\x02\x01\x00\xb6b\xf6\x90)R\xdd%O \x00\x8b\x8a\xe7\xae\xe1F`k\xb2E!\xe4<\xd5\xd1\xd5\xce\xd9\r\x1a\x7f\x12\xbc\xfd!\xfd\x89\xfe3\xb4\xd7\xb9^h\x80"\x10\x07@um\xb2o\x89\xa9\x9f\x05*\xf6\xf8o\xb0\x13k\x89\xf4\xf2c\xd6\xf2\xf9H\xb5\xa3<}\x1c\x9b\xe8<\x0ce\x98VEi\xbb1>:H\xfb[A\xbf\xa7\xbf\xa1b\xac\xad@\xd2\xb5\\\xe2\na\x06>h[=G\xfdM\xb4*\xcf\xc0\xfcB\xbfc\x81.\x90\xb9\'iH\x9b\x06\xf1\x8b\xa8,C2,f\x02\x89!\xdeu\x83\xd2\x93\xa4\xfdr\xab\x1a\xc83Uv\xd5v\xe2\x92\x12\'\x97\xf8{\xdb-e7\x8b\x06w\xf9\xbf@\x8a\xd3\xe5.`\xb5U\xf10\xbe%l\x17/\x8e\x05\xf3\x19wu\x0f]\x86\x08nn\xe5\x18\xb4UO{\xa4\x10\x19\xf5\xb5\x95\xbf8k\xc7\xd0\x0b\xb1p,\xb36\xa1q\x8d\x17\xf3\x02\x8b\xcf}t\x94L\xc9\xaf\xe0\xba\xe1#\xad\x05\x19\xa0\x96\xcc\xaf\x0f\xba\x9e`T{\xba~t\xac\x07\x19\x8c\xb1\xfb\x84\xd0\x00%)\xce\x1d\xc4\xb7\xfb\xdf\x16\x8b\'&\x9cm\xc8\xd6v\x81z\x1b\xaa\x8e2\x1f2O\xe6\xc7\x0f\x14z\x8d\xbc\x86\x04\x8a\xdf\xceWu\xe0i\x0f\xe4\xeb\x98)$4`\xdb\x8d\x0e\xab\xe2xc\xb1\xca\xd1(\x1a\xd3\x85\xd4\x16S\xbf0\x7f\x86\x81p@,\x87\xa92\t\xe9\n\x12(\x02-\xef\x90\x8d\xc4\x9a\xaf\xbc \\M\x1cY\x0f\x82H\xaa\xab\xde\x8f1\x81\xe1\xce=\xab\xc2!\xe8t\xcf\x16\x94\xffFu\xb8\x10\xca5\xf3\x0b\x86\xf9\x0e\x9e\xdauA(\x0f\xc5\xc3\x9cS}r|\x1b\x1b\xe2?\xa5\xb4\xcd\xae7\xd1\x97\x92\x89e\x8ah\x03mA\xb50\r\xbb\xa4 \x15\x1252\xa5\xaa\x0b\xee&\xf8I\x8f\t\xbeH\xe6\xfaOi\x99\xee=\x8f\x12\xd5W\xf2\xc7\x95\xa9\xb2gC~\xfd\xd8\x17\x00\x1b\xa1\x8a\x8dW(\x7f:\xcdg\x12\xbc\x81\x86\xf5P\x93),R7\x06\xe6\xb7\xbcH\xaaK\xd9 \rP\x925h<a\x02\x03\x01\x00\x010\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x00\x03\x82\x02\x01\x00E;L\x05\xa8\x88\xedO\xb1\x1d\x82J\x03\xf3\x0c~\x93\xa73/\x90\xbd\xc7\xfdAW\xc7\xf0\x0f\xf0M\xbax\x99>\xd0\xa5\xe4t\xbc:U\xbdrtH\xab;\x96R\xe5i\xfb<>\xf0\x13;lr\xeb\xd9\xd8u\x81\xb4t\x14\x04@\x08\x0b\xde\n\xdf@a\xf7I\xbf-[.}z`:\x19\xc0/\xa78\xce\x1aw\xa2L\xf46\xa9X\x06\xfb\xf0\x18y0\xb9@M\xa5\xd1$c\xa8\xdc\xc8\xbc\xf6<\xff\xfe\x03\x9e8u\xbe\xbe\x9f\x96\xbb\xab\xca\xcbQ\x8c\xbc\xf6\xc1a\xa5\xb3\xc5;(\x08\x96/F\xc2F\x9c\xb1\x130\xce_Q\xd1\x16\xb5\x9e\x14\xcd\xc4-\x84\t\xaa\x10\xbbkK\xd71\xb5\xabmt\xcav\x95 \xafe_^\xf2u\xaf\x90\xd1\xa8\x9a\xc1\xec~\xb0duT\xf9\xc3)\x84}x\x8fR/qls\xdb\xb1,\x18QU\x8c\xbd@N6\xbdG\ruO\xd0\xf97\t%ka\xcf\xf6\x01\xf1\x18\x86\x1b\xbaWt\xf95\x86\xd9\xb1\xcb\xa8T\xb5$\xfeB\xb7\xc7C\xff\xe8\xa98\x93g\xc5CTOX\x01\xf58\x99\xd2\x08\xbd2-I\xbe\x11\xe5W3\r\xf0\x82\xe8\xff@\x84\x8b\xe9\xf1\xd4\x828\xc6>6\x90\x1cq\x0c\x0cW\xca\x11\x94\x8a\x9dO\xb9\x8a1o|\xd2\xfa\x06\xbd\xae?i4\x94aq\xbc[\t\x98f1\x9e\xaf#\xee\x95\xd6\xec!\xd9\xdc\x9d\xad\x06\xccm;\x0c)a~\x84(\x8a\x11m\x1f~\xc7X\xe1\xf3\xe6\xdeV\x94z[w\xca\xb1Rt\\\x1b?}\\\xe2X\xe5\tO\x9e\xe18\xb4iN\x96st\x98\x8c.[x{\x9f=\x14\xd0!\xea\xb5]S8\x08h\xbd\x99\x9fe5\xfe5GUwdz\xfa?\xbb\xc6F\x05\xf3\xbc3\x1d]=\xd3\xf2\xb9\xbc]"x\xaf6 n\x13\xf6\xe3X\xe8\x01W\x12+\x8d{z\x8dVF\x06\x13\xd0\x15\xf6\xe6\x8b9|\x1f\x84\x8d\xc9\x8f\x9d\xf7\xa7\x97\x91\xe9V\x96lS4\xe6\xa9\xc8\xee\x01\xb7\xd3\xaf$\x80\xdf\xd50\xba\xdc>\x7ff-\xd28'}, 'errors': []}, 'retcode': 0, 'jid': '20251020115221844441', 'fun': 'x509.sign_remote_certificate', 'fun_args': ['test', {}, True], 'user': 'root', 'master_id': 'localhost_master', '_stamp': '2025-10-20T11:52:21.931372'}
[DEBUG   ] Minion of 'localhost' is handling event tag '__master_req_channel_payload/c058dec3-917f-43e2-867c-8dc4965380c9/localhost'
[DEBUG   ] Minion return retry timer set to 8 seconds (randomized)
[DEBUG   ] SaltEvent PUB socket URI: /var/run/salt/minion/minion_event_49960de588_pub.ipc
[DEBUG   ] SaltEvent PULL socket URI: /var/run/salt/minion/minion_event_49960de588_pull.ipc
[DEBUG   ] Sending event: tag = __master_req_channel_return/c058dec3-917f-43e2-867c-8dc4965380c9; data = {'ret': None, '_stamp': '2025-10-20T11:52:21.949434'}
[DEBUG   ] Closing IPCMessageClient instance
[DEBUG   ] Closing IPCMessageSubscriber instance
[DEBUG   ] Closing IPCMessageClient instance
[DEBUG   ] minion return: {'success': True, 'return': {'data': {'signing_cert': b'0\x82\x04\x8c0\x82\x02t\xa0\x03\x02\x01\x02\x02\x14O\x84\xcb\x0f\x08\x84>\xbcr\xfa\x11\xf1\xef\x80\xf3\x90&\xdf\x10\xdd0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x000\x000\x1e\x17\r251020114938Z\x17\r261020114938Z0\x000\x82\x02"0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x01\x05\x00\x03\x82\x02\x0f\x000\x82\x02\n\x02\x82\x02\x01\x00\xb6b\xf6\x90)R\xdd%O \x00\x8b\x8a\xe7\xae\xe1F`k\xb2E!\xe4<\xd5\xd1\xd5\xce\xd9\r\x1a\x7f\x12\xbc\xfd!\xfd\x89\xfe3\xb4\xd7\xb9^h\x80"\x10\x07@um\xb2o\x89\xa9\x9f\x05*\xf6\xf8o\xb0\x13k\x89\xf4\xf2c\xd6\xf2\xf9H\xb5\xa3<}\x1c\x9b\xe8<\x0ce\x98VEi\xbb1>:H\xfb[A\xbf\xa7\xbf\xa1b\xac\xad@\xd2\xb5\\\xe2\na\x06>h[=G\xfdM\xb4*\xcf\xc0\xfcB\xbfc\x81.\x90\xb9\'iH\x9b\x06\xf1\x8b\xa8,C2,f\x02\x89!\xdeu\x83\xd2\x93\xa4\xfdr\xab\x1a\xc83Uv\xd5v\xe2\x92\x12\'\x97\xf8{\xdb-e7\x8b\x06w\xf9\xbf@\x8a\xd3\xe5.`\xb5U\xf10\xbe%l\x17/\x8e\x05\xf3\x19wu\x0f]\x86\x08nn\xe5\x18\xb4UO{\xa4\x10\x19\xf5\xb5\x95\xbf8k\xc7\xd0\x0b\xb1p,\xb36\xa1q\x8d\x17\xf3\x02\x8b\xcf}t\x94L\xc9\xaf\xe0\xba\xe1#\xad\x05\x19\xa0\x96\xcc\xaf\x0f\xba\x9e`T{\xba~t\xac\x07\x19\x8c\xb1\xfb\x84\xd0\x00%)\xce\x1d\xc4\xb7\xfb\xdf\x16\x8b\'&\x9cm\xc8\xd6v\x81z\x1b\xaa\x8e2\x1f2O\xe6\xc7\x0f\x14z\x8d\xbc\x86\x04\x8a\xdf\xceWu\xe0i\x0f\xe4\xeb\x98)$4`\xdb\x8d\x0e\xab\xe2xc\xb1\xca\xd1(\x1a\xd3\x85\xd4\x16S\xbf0\x7f\x86\x81p@,\x87\xa92\t\xe9\n\x12(\x02-\xef\x90\x8d\xc4\x9a\xaf\xbc \\M\x1cY\x0f\x82H\xaa\xab\xde\x8f1\x81\xe1\xce=\xab\xc2!\xe8t\xcf\x16\x94\xffFu\xb8\x10\xca5\xf3\x0b\x86\xf9\x0e\x9e\xdauA(\x0f\xc5\xc3\x9cS}r|\x1b\x1b\xe2?\xa5\xb4\xcd\xae7\xd1\x97\x92\x89e\x8ah\x03mA\xb50\r\xbb\xa4 \x15\x1252\xa5\xaa\x0b\xee&\xf8I\x8f\t\xbeH\xe6\xfaOi\x99\xee=\x8f\x12\xd5W\xf2\xc7\x95\xa9\xb2gC~\xfd\xd8\x17\x00\x1b\xa1\x8a\x8dW(\x7f:\xcdg\x12\xbc\x81\x86\xf5P\x93),R7\x06\xe6\xb7\xbcH\xaaK\xd9 \rP\x925h<a\x02\x03\x01\x00\x010\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x00\x03\x82\x02\x01\x00E;L\x05\xa8\x88\xedO\xb1\x1d\x82J\x03\xf3\x0c~\x93\xa73/\x90\xbd\xc7\xfdAW\xc7\xf0\x0f\xf0M\xbax\x99>\xd0\xa5\xe4t\xbc:U\xbdrtH\xab;\x96R\xe5i\xfb<>\xf0\x13;lr\xeb\xd9\xd8u\x81\xb4t\x14\x04@\x08\x0b\xde\n\xdf@a\xf7I\xbf-[.}z`:\x19\xc0/\xa78\xce\x1aw\xa2L\xf46\xa9X\x06\xfb\xf0\x18y0\xb9@M\xa5\xd1$c\xa8\xdc\xc8\xbc\xf6<\xff\xfe\x03\x9e8u\xbe\xbe\x9f\x96\xbb\xab\xca\xcbQ\x8c\xbc\xf6\xc1a\xa5\xb3\xc5;(\x08\x96/F\xc2F\x9c\xb1\x130\xce_Q\xd1\x16\xb5\x9e\x14\xcd\xc4-\x84\t\xaa\x10\xbbkK\xd71\xb5\xabmt\xcav\x95 \xafe_^\xf2u\xaf\x90\xd1\xa8\x9a\xc1\xec~\xb0duT\xf9\xc3)\x84}x\x8fR/qls\xdb\xb1,\x18QU\x8c\xbd@N6\xbdG\ruO\xd0\xf97\t%ka\xcf\xf6\x01\xf1\x18\x86\x1b\xbaWt\xf95\x86\xd9\xb1\xcb\xa8T\xb5$\xfeB\xb7\xc7C\xff\xe8\xa98\x93g\xc5CTOX\x01\xf58\x99\xd2\x08\xbd2-I\xbe\x11\xe5W3\r\xf0\x82\xe8\xff@\x84\x8b\xe9\xf1\xd4\x828\xc6>6\x90\x1cq\x0c\x0cW\xca\x11\x94\x8a\x9dO\xb9\x8a1o|\xd2\xfa\x06\xbd\xae?i4\x94aq\xbc[\t\x98f1\x9e\xaf#\xee\x95\xd6\xec!\xd9\xdc\x9d\xad\x06\xccm;\x0c)a~\x84(\x8a\x11m\x1f~\xc7X\xe1\xf3\xe6\xdeV\x94z[w\xca\xb1Rt\\\x1b?}\\\xe2X\xe5\tO\x9e\xe18\xb4iN\x96st\x98\x8c.[x{\x9f=\x14\xd0!\xea\xb5]S8\x08h\xbd\x99\x9fe5\xfe5GUwdz\xfa?\xbb\xc6F\x05\xf3\xbc3\x1d]=\xd3\xf2\xb9\xbc]"x\xaf6 n\x13\xf6\xe3X\xe8\x01W\x12+\x8d{z\x8dVF\x06\x13\xd0\x15\xf6\xe6\x8b9|\x1f\x84\x8d\xc9\x8f\x9d\xf7\xa7\x97\x91\xe9V\x96lS4\xe6\xa9\xc8\xee\x01\xb7\xd3\xaf$\x80\xdf\xd50\xba\xdc>\x7ff-\xd28'}, 'errors': []}, 'retcode': 0, 'jid': '20251020115221844441', 'fun': 'x509.sign_remote_certificate', 'fun_args': ['test', {}, True], 'user': 'root', 'master_id': 'localhost_master'}
[DEBUG   ] Minion of 'localhost' is handling event tag '__master_req_channel_return/c058dec3-917f-43e2-867c-8dc4965380c9'
[DEBUG   ] Closing AsyncReqChannel instance
[INFO    ] The certificate is in the correct state
[INFO    ] Completed state [/tmp/localhost.crt] at time 13:52:22.164587 (duration_in_ms=516.158)
[DEBUG   ] File /var/cache/salt/minion/accumulator/138366595017040 does not exist, no need to cleanup
[DEBUG   ] Closing AsyncReqChannel instance
[DEBUG   ] The functions from module 'state' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded state.check_result
[INFO    ] Returning information for job: 20251020115212169424
[DEBUG   ] SaltEvent PUB socket URI: /var/run/salt/minion/minion_event_49960de588_pub.ipc
[DEBUG   ] SaltEvent PULL socket URI: /var/run/salt/minion/minion_event_49960de588_pull.ipc
[DEBUG   ] Sending event: tag = __master_req_channel_payload/f20b6a3d-25f9-4499-abfc-a20750749fe5/localhost; data = {'cmd': '_return', 'id': 'localhost', 'success': True, 'return': {'x509_|-Manage private key_|-/tmp/localhost.key_|-private_key_managed': {'name': '/tmp/localhost.key', 'changes': {}, 'result': True, 'comment': 'The private key is in the correct state', '__sls__': 'test.x509_req', '__run_num__': 0, 'start_time': '13:52:21.214778', 'duration': 220.743, '__id__': 'Manage private key'}, 'file_|-Manage private key_|-/tmp/localhost.key_|-managed': {'name': '/tmp/localhost.key', 'changes': {}, 'result': True, 'duration': 5.706, 'start_time': '13:52:21.389922', 'comment': 'File /tmp/localhost.key not updated', '__state_ran__': True, '__run_num__': 2, '__sls__': 'test.x509_req', '__id__': 'Manage private key'}, 'x509_|-Manage CSR_|-/tmp/localhost.csr_|-csr_managed': {'name': '/tmp/localhost.csr', 'changes': {}, 'result': True, 'comment': 'The certificate signing request is in the correct state', '__sls__': 'test.x509_req', '__run_num__': 2, 'start_time': '13:52:21.436033', 'duration': 212.046, '__id__': 'Manage CSR'}, 'file_|-Manage CSR_|-/tmp/localhost.csr_|-managed': {'name': '/tmp/localhost.csr', 'changes': {}, 'result': True, 'duration': 2.831, 'start_time': '13:52:21.606526', 'comment': 'File /tmp/localhost.csr not updated', '__state_ran__': True, '__run_num__': 4, '__sls__': 'test.x509_req', '__id__': 'Manage CSR'}, 'x509_|-Request signed certificate_|-/tmp/localhost.crt_|-certificate_managed': {'name': '/tmp/localhost.crt', 'changes': {}, 'result': True, 'comment': 'The certificate is in the correct state', '__sls__': 'test.x509_req', '__run_num__': 4, 'start_time': '13:52:21.648429', 'duration': 516.158, '__id__': 'Request signed certificate'}, 'file_|-Request signed certificate_|-/tmp/localhost.crt_|-managed': {'name': '/tmp/localhost.crt', 'changes': {}, 'result': True, 'duration': 2.786, 'start_time': '13:52:21.824953', 'comment': 'File /tmp/localhost.crt not updated', '__state_ran__': True, '__run_num__': 6, '__sls__': 'test.x509_req', '__id__': 'Request signed certificate'}}, 'retcode': 0, 'jid': '20251020115212169424', 'fun': 'state.apply', 'fun_args': ['test.x509_req'], 'user': 'root', 'master_id': 'localhost_master', 'out': 'highstate', '_stamp': '2025-10-20T11:52:22.170505'}
[DEBUG   ] Minion of 'localhost' is handling event tag '__master_req_channel_payload/f20b6a3d-25f9-4499-abfc-a20750749fe5/localhost'
[DEBUG   ] Minion return retry timer set to 10 seconds (randomized)
[DEBUG   ] SaltEvent PUB socket URI: /var/run/salt/minion/minion_event_49960de588_pub.ipc
[DEBUG   ] SaltEvent PULL socket URI: /var/run/salt/minion/minion_event_49960de588_pull.ipc
[DEBUG   ] Sending event: tag = __master_req_channel_return/f20b6a3d-25f9-4499-abfc-a20750749fe5; data = {'ret': None, '_stamp': '2025-10-20T11:52:22.183673'}
[DEBUG   ] Closing IPCMessageClient instance
[DEBUG   ] Minion of 'localhost' is handling event tag '__master_req_channel_return/f20b6a3d-25f9-4499-abfc-a20750749fe5'
[DEBUG   ] Closing IPCMessageSubscriber instance
[DEBUG   ] Closing IPCMessageClient instance
[DEBUG   ] minion return: {'success': True, 'return': {'x509_|-Manage private key_|-/tmp/localhost.key_|-private_key_managed': {'name': '/tmp/localhost.key', 'changes': {}, 'result': True, 'comment': 'The private key is in the correct state', '__sls__': 'test.x509_req', '__run_num__': 0, 'start_time': '13:52:21.214778', 'duration': 220.743, '__id__': 'Manage private key'}, 'file_|-Manage private key_|-/tmp/localhost.key_|-managed': {'name': '/tmp/localhost.key', 'changes': {}, 'result': True, 'duration': 5.706, 'start_time': '13:52:21.389922', 'comment': 'File /tmp/localhost.key not updated', '__state_ran__': True, '__run_num__': 2, '__sls__': 'test.x509_req', '__id__': 'Manage private key'}, 'x509_|-Manage CSR_|-/tmp/localhost.csr_|-csr_managed': {'name': '/tmp/localhost.csr', 'changes': {}, 'result': True, 'comment': 'The certificate signing request is in the correct state', '__sls__': 'test.x509_req', '__run_num__': 2, 'start_time': '13:52:21.436033', 'duration': 212.046, '__id__': 'Manage CSR'}, 'file_|-Manage CSR_|-/tmp/localhost.csr_|-managed': {'name': '/tmp/localhost.csr', 'changes': {}, 'result': True, 'duration': 2.831, 'start_time': '13:52:21.606526', 'comment': 'File /tmp/localhost.csr not updated', '__state_ran__': True, '__run_num__': 4, '__sls__': 'test.x509_req', '__id__': 'Manage CSR'}, 'x509_|-Request signed certificate_|-/tmp/localhost.crt_|-certificate_managed': {'name': '/tmp/localhost.crt', 'changes': {}, 'result': True, 'comment': 'The certificate is in the correct state', '__sls__': 'test.x509_req', '__run_num__': 4, 'start_time': '13:52:21.648429', 'duration': 516.158, '__id__': 'Request signed certificate'}, 'file_|-Request signed certificate_|-/tmp/localhost.crt_|-managed': {'name': '/tmp/localhost.crt', 'changes': {}, 'result': True, 'duration': 2.786, 'start_time': '13:52:21.824953', 'comment': 'File /tmp/localhost.crt not updated', '__state_ran__': True, '__run_num__': 6, '__sls__': 'test.x509_req', '__id__': 'Request signed certificate'}}, 'retcode': 0, 'jid': '20251020115212169424', 'fun': 'state.apply', 'fun_args': ['test.x509_req'], 'user': 'root', 'master_id': 'localhost_master'}

Type of salt install

Official deb

Major version

3006.x

What supported OS are you seeing the problem on? Can select multiple. (If bug appears on an unsupported OS, please open a GitHub Discussion instead)

ubuntu-24.04

salt --versions-report output

Salt Version:
          Salt: 3006.16
 
Python Version:
        Python: 3.10.18 (main, Sep  5 2025, 22:48:51) [GCC 11.2.0]
 
Dependency Versions:
          cffi: 1.14.6
      cherrypy: 18.10.0
  cryptography: 42.0.5
      dateutil: 2.8.1
     docker-py: 7.1.0
         gitdb: Not Installed
     gitpython: Not Installed
        Jinja2: 3.1.6
       libgit2: 1.3.0
  looseversion: 1.0.2
      M2Crypto: Not Installed
          Mako: Not Installed
       msgpack: 1.0.2
  msgpack-pure: Not Installed
  mysql-python: Not Installed
     packaging: 24.0
     pycparser: 2.21
      pycrypto: Not Installed
  pycryptodome: 3.19.1
        pygit2: 1.7.0
  python-gnupg: 0.4.8
        PyYAML: 6.0.1
         PyZMQ: 23.2.0
        relenv: 0.20.6
         smmap: Not Installed
       timelib: 0.3.0
       Tornado: 4.5.3
           ZMQ: 4.3.4
 
System Versions:
          dist: ubuntu 24.04.1 noble
        locale: utf-8
       machine: x86_64
       release: 6.8.0-52-generic
        system: Linux
       version: Ubuntu 24.04.1 noble

[Sxderp]

Similar to #68076 , but also more generic.

I think this is showing that there's a gap in how Salt is handling output data that can be bytes. In #68076 the solution was to exclude the key ("tok") that had binary data. I don't think that's an option here.

Either:

1. In the data normalization utility have some option to base64 binary things that don't encode to unicode. There's already an option to "keep" / "ignore" those values (JSON can't encode binary so base64 would need to be done).
2. Base64 encode (or PEM encode, since it's a cert?) the payload before it leaves the state.

I think 1 is less disruptive as it can be applied piece-meal without breaking things that might expect the payload to be binary. The API should also be adjusted to run the payloads through the new decoder. Right now it's just doing a json serialization which would fail on the payload the OP posted #68134.

[accjk]

In addition to this: when using master_job_cache: mysql (or other returners like redis / sqlite) in salt-master configuration, issuing certificates does not work at all. The job ends with:

Comment: ca_server did not respond. Salt master must permit peers to call the sign_remote_certificate function.

The master log has a similar error:

[salt.utils.job   :147 ][CRITICAL][12017] The specified 'mysql' returner threw a stack trace
Traceback (most recent call last):
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/utils/job.py", line 145, in store_job
    mminion.returners[fstr](load)
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/loader/lazy.py", line 162, in __call__
    ret = self.loader.run(run_func, *args, **kwargs)
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/loader/lazy.py", line 1248, in run
    return self._last_context.run(self._run_as, _func_or_method, *args, **kwargs)
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/loader/lazy.py", line 1263, in _run_as
    ret = _func_or_method(*args, **kwargs)
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/returners/mysql.py", line 307, in returner
    cleaned_return = salt.utils.data.decode(ret)
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/utils/data.py", line 252, in decode
    return decode_dict(
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/utils/data.py", line 399, in decode_dict
    value = decode_dict(
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/utils/data.py", line 399, in decode_dict
    value = decode_dict(
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/utils/data.py", line 411, in decode_dict
    value = decode(
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/utils/data.py", line 293, in decode
    data = _decode_func(data, encoding, errors, normalize)
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/utils/stringutils.py", line 113, in to_unicode
    return _normalize(to_str(s, encoding, errors))
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/utils/stringutils.py", line 89, in to_str
    raise exc  # pylint: disable=raising-bad-type
  File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/utils/stringutils.py", line 82, in to_str
    return _normalize(s.decode(enc, errors))
UnicodeDecodeError: 'utf-8' codec can't decode byte 0x82 in position 1: invalid start byte