[BUG] Impossible to create certificates on salt 3007 masterless about salt HOT 2 OPEN

Hi there! Welcome to the Salt Community! Thank you for making your first contribution. We have a lengthy process for issues and PRs. Someone from the Core Team will follow up as soon as possible. In the meantime, here’s some information that may help as you continue your Salt journey.
Please be sure to review our Code of Conduct. Also, check out some of our community resources including:

• Community Wiki
• Salt’s Contributor Guide
• Join our Community Slack
• IRC on LiberaChat
• Salt Project YouTube channel
• Salt Project Twitch channel

There are lots of ways to get involved in our community. Every month, there are around a dozen opportunities to meet with other contributors and the Salt Core team and collaborate in real time. The best way to keep track is by subscribing to the Salt Community Events Calendar.
If you have additional questions, email us at [email protected]. We’re glad you’ve joined our community and look forward to doing awesome things with you!

from salt.

Yup, can confirm this is an issue in all released versions of x509_v2. Fix coming in soon.

Edit: To clarify, the title is incorrect. The creation works, but once there is a certificate at the managed path, subsequent operations fail.

A workaround until the fix is released would be to remove signing_private_key from the policy and define it in the state itself. When signing locally, policies mostly serve convenience only, so it wouldn't be a much of a security issue.

from salt.