Manage LC repository + ca-certificates

manage
- home:crameleon:LibertaCasa repository
- ca-certificates-syscid
in common SUSE state.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>

1 files changed, 34 insertions, 0 deletions

diff --git a/salt/common/suse.sls b/salt/common/suse.sls
index 0cfce32..984c25a 100644
--- a/salt/common/suse.sls
+++ b/salt/common/suse.sls
@@ -2,3 +2,37 @@ include:
   - profile.seccheck
   - profile.zypp
   - profile.node_exporter
+
+{#- to-do: move this to some formula or macro -#}
+{%- set osfullname = grains['osfullname'] -%}
+{#- this SLES clause likely only works in BCI -#}
+{%- if osfullname == 'Leap' or osfullname == 'SLES' -%}
+{%- set repoos = grains['osrelease'] -%}
+{%- elif osfullname == 'openSUSE Tumbleweed' -%}
+{%- set repoos = 'openSUSE_Tumbleweed' -%}
+{%- else -%}
+{%- do salt.log.error('Unsupported operating system.') -%}
+{%- endif -%}
+{%- set repobase = 'https://download.opensuse.org/repositories/home:/crameleon:/LibertaCasa/' ~ repoos -%}
+{%- set repokey = repobase ~ '/repodata/repomd.xml.key' %}
+
+libertacasa_rpm_key:
+  cmd.run:
+    - name: rpm --import {{ repokey }}
+    - unless: rpm -q --quiet gpg-pubkey-f8722274-5f7a4d7b
+
+libertacasa_rpm_repository:
+  pkgrepo.managed:
+    - name: 'LibertaCasa'
+    - baseurl: {{ repobase }}
+    - comments:
+        - 'Managed by Salt'
+    - gpgcheck: 1
+    - gpgkey: {{ repokey }}
+    - require:
+      - cmd: libertacasa_rpm_key
+
+ca-certificates-syscid:
+  pkg.installed:
+    - require:
+      - pkgrepo: libertacasa_rpm_repository