Feature request: Execution module with function(s) to clear files cached from the salt fileserver

[terminalmage]

Currently, the minion fileserver cache is never purged. Adding functionality to control the minion fileserver cache would have a couple benefits:

• Reclaim space on the minion
• If a file with a password in it is cached to the minion, and later removed from the salt fileserver, its counterpart cached to the minion will remain there. Having the ability to easily clear it would help alleviate this potential security risk.

[terminalmage]

ZD-702 > requested by Gary through ZD, has not been requested or committed to a customer

[meggiebot]

@terminalmage how big is this feature add?

[UtahDave]

I think some of this may already be done. I think there may be a runner function that clears the minion cache

[terminalmage]

@UtahDave To my knowledge that only clears grains/pillar/mine data. There is a saltutil.clear_cache function already, but it blows away all cached files in the minion cachedir.

The likely solution for this is a modification of this function that allows one to limit the function to just the fileserver cache. I might also add additional arguments to clean only files with a filename matching a pattern, or of a certain age, so that people can schedule a cache cleanup via cron to purge files older than N days.

@meggiebot this shouldn't take more than a day or two (famous last words), just haven't gotten around to it yet.

[scallister]

Any updates on this issue?

[Oloremo]

This is a very much needed feature.

[max-arnold]

See #51431

[Oloremo]

#51431 will remove everything in cache dir so it's far from perfect. I don't want to remove my custom modules\states etc.

[Oloremo]

I'm working on some archive.extracted state enchantments and cache control is the problem that I run on over and over. I'd really like to have an option to "keep N last releases" for archive.extracted case.

I understand that the cache is not really related to archive.extracted but they're interconnected a lot.