{% if salt['grains.get']('include_secrets', True) %}
include:
  - secrets.role.saltmaster
{% endif %}

salt:
  gitfs:
    pygit2:
      git:
        require_state: git
  master:
    cli_summary: True
    default_top: production
    env_order:
      - production
    ext_pillar:
      - git:
          - production gitlab@gitlab.infra.opensuse.org:infra/salt.git:
              - env: production
              - root: pillar
              - privkey: /var/lib/salt/.ssh/salt_gitlab_ioo_infra_salt
              - pubkey: /var/lib/salt/.ssh/salt_gitlab_ioo_infra_salt.pub
    ext_pillar_first: True
    fileserver_backend:
      - git
    gitfs_provider: pygit2
    gitfs_remotes:
      - gitlab@gitlab.infra.opensuse.org:infra/salt.git:
          - root: salt
          - privkey: /var/lib/salt/.ssh/salt_gitlab_ioo_infra_salt
          - pubkey: /var/lib/salt/.ssh/salt_gitlab_ioo_infra_salt.pub
      {% import_yaml "FORMULAS.yaml" as formulas_yaml %}
      {% set formulas = formulas_yaml.keys()|sort %}
      {% for formula in formulas %}
      - https://gitlab.infra.opensuse.org/saltstack-formulas/{{ formula }}-formula.git
      {% endfor %}
    gitfs_ssl_verify: True
    hash_type: sha512
    pillar_gitfs_ssl_verify: True
    pillar_merge_lists: True
    pillar_source_merging_strategy: smart
    state_output: changes
    state_verbose: False
    top_file_merging_strategy: same
    user: salt
  reactor:
    - 'salt/fileserver/gitfs/update':
        - /srv/reactor/update_fileserver.sls