salt/common/ssh.sls


1
2
3
4
5
6
7
8
9
10
11
12
13
14

include:
  - openssh.banner
{%- if salt['pillar.get']('manage_sshd', True) %}
  - openssh.config

/etc/ssh/user_ca:
  file.managed:
    - contents:
      {%- for key in salt['pillar.get']('secret_ssh:userca_keys') -%}
      - {{ key }}
      {%- endfor -%}
    - require:
      - pkg: openssh
{%- endif %}