Troubleshooting Salt SSH known hosts
If a machine or VM is reinstalled with a new SSH key, but the same IP address is used to onboard it, there is a chance that Salt will complain about a "man-in-the-middle attack".
This happens because Salt’s .ssh/known_hosts file still contains the old SSH fingerprint.
To remove a host from this list, run the following command:
mgrctl ssh knownhost remove <hostname>
If the host to remove is not using the default SSH port 22, you can specify the port manually:
mgrctl ssh knownhost remove <hostname> <port>