Troubleshooting Salt SSH known hosts

If a machine or VM is reinstalled with a new SSH key, but the same IP address is used to onboard it, there is a chance that Salt will complain about a "man-in-the-middle attack". This happens because Salt’s .ssh/known_hosts file still contains the old SSH fingerprint.

To remove a host from this list, run the following command:

mgrctl ssh knownhost remove <hostname>

If the host to remove is not using the default SSH port 22, you can specify the port manually:

mgrctl ssh knownhost remove <hostname> <port>