Compare commits

...

3 commits

Author SHA1 Message Date
Actaeus Curabitur
b65b0bd8ea removed password.sls, which shouldn't exist yet 2022-09-08 11:26:29 -05:00
Actaeus Curabitur
e4da990cce updated how roles are handled in pillar files 2022-09-08 11:19:02 -05:00
Actaeus Curabitur
57f6066c45 switched to pillar roles wherever possible instead of grain roles 2022-09-08 10:24:41 -05:00
62 changed files with 379 additions and 496 deletions

1
pillars/roles.jinja Normal file
View file

@ -0,0 +1 @@
{%- set roles=salt.cmd.shell("grep -Po '(?<=- ).*' /srv/salt/"+saltenv+"/pillars/servers/roles/server/"+grains['host']+".sls").split('\n') -%}

View file

@ -1,21 +1,20 @@
{%- from "roles.jinja" import roles with context %}
{% set states = salt['cp.list_states'](saltenv) %}
include:
- roles.aurpkgs.none
{%- if grains['roles'] is defined -%}
{%- if grains['roles'] is not none -%}
{%- if 'aurrepo' in grains['roles'] -%}
{%- for state in states %}
{%- if state.startswith("pillars.roles.aurpkgs.") -%}
{%- set role = state.split('.')[3] %}
{%- if roles is not none -%}
{%- if 'aurrepo' in roles -%}
{%- for state in states %}
{%- if state.startswith("pillars.roles.aurpkgs.") -%}
{%- set role = state.split('.')[3] %}
- roles.aurpkgs.{{ role }}
{%- endif -%}
{%- endfor -%}
{%- else -%}
{%- for role in grains['roles'] %}
{%- if 'pillars.roles.aurpkgs.'+role in states %}
{%- endif -%}
{%- endfor -%}
{%- else -%}
{%- for role in roles %}
{%- if 'pillars.roles.aurpkgs.'+role in states %}
- roles.aurpkgs.{{ role }}
{%- endif -%}
{%- endfor -%}
{%- endif -%}
{%- endif -%}
{%- endfor -%}
{%- endif -%}
{%- endif -%}

View file

@ -1,21 +1,20 @@
{%- from "roles.jinja" import roles with context %}
{% set states = salt['cp.list_states'](saltenv) %}
include:
- roles.backup.none
{%- if grains['roles'] is defined -%}
{%- if grains['roles'] is not none -%}
{%- if 'backup' in grains['roles'] -%}
{%- for state in states %}
{%- if state.startswith("pillars.roles.backup.") -%}
{%- set role = state.split('.')[3] %}
{%- if roles is not none -%}
{%- if 'backup' in roles -%}
{%- for state in states %}
{%- if state.startswith("pillars.roles.backup.") -%}
{%- set role = state.split('.')[3] %}
- roles.backup.{{ role }}
{%- endif -%}
{%- endfor -%}
{%- else -%}
{%- for role in grains['roles'] %}
{%- if 'pillars.roles.backup.'+role in states %}
{%- endif -%}
{%- endfor -%}
{%- else -%}
{%- for role in roles %}
{%- if 'pillars.roles.backup.'+role in states %}
- roles.backup.{{ role }}
{%- endif -%}
{%- endfor -%}
{%- endif -%}
{%- endif -%}
{%- endfor -%}
{%- endif -%}
{%- endif -%}

View file

@ -1,21 +1,20 @@
{%- from "roles.jinja" import roles with context %}
{% set states = salt['cp.list_states'](saltenv) %}
include:
- roles.ca.none
{%- if grains['roles'] is defined -%}
{%- if grains['roles'] is not none -%}
{%- if 'ca' in grains['roles'] -%}
{%- for state in states %}
{%- if state.startswith("pillars.roles.ca.") -%}
{%- set role = state.split('.')[3] %}
{%- if roles is not none -%}
{%- if 'ca' in roles -%}
{%- for state in states %}
{%- if state.startswith("pillars.roles.ca.") -%}
{%- set role = state.split('.')[3] %}
- roles.ca.{{ role }}
{%- endif -%}
{%- endfor -%}
{%- else -%}
{%- for role in grains['roles'] %}
{%- if 'pillars.roles.ca.'+role in states %}
{%- endif -%}
{%- endfor -%}
{%- else -%}
{%- for role in roles %}
{%- if 'pillars.roles.ca.'+role in states %}
- roles.ca.{{ role }}
{%- endif -%}
{%- endfor -%}
{%- endif -%}
{%- endif -%}
{%- endfor -%}
{%- endif -%}
{%- endif -%}

View file

@ -1,15 +1,14 @@
{%- from "roles.jinja" import roles with context %}
{% set states = salt['cp.list_states'](saltenv) %}
include:
- roles.database.none
{%- if grains['roles'] is defined -%}
{%- if grains['roles'] is not none -%}
{%- if 'mysql' in grains['roles'] -%}
{%- for state in states %}
{%- if state.startswith("pillars.roles.database.") -%}
{%- set role = state.split('.')[3] %}
{%- if roles is not none -%}
{%- if 'mysql' in roles -%}
{%- for state in states %}
{%- if state.startswith("pillars.roles.database.") -%}
{%- set role = state.split('.')[3] %}
- roles.database.{{ role }}
{%- endif -%}
{%- endfor -%}
{%- endif -%}
{%- endif -%}
{%- endfor -%}
{%- endif -%}
{%- endif -%}

View file

@ -1,13 +1,12 @@
{%- from "roles.jinja" import roles with context %}
{% set states = salt['cp.list_states'](saltenv) %}
include:
- roles.firewalld.core
{%- if grains['roles'] is defined -%}
{%- if grains['roles'] is not none -%}
{%- for role in grains['roles'] %}
{%- if 'pillars.roles.firewalld.'+role in states %}
{%- if roles is not none -%}
{%- for role in roles %}
{%- if 'pillars.roles.firewalld.'+role in states %}
- roles.firewalld.{{ role }}
{%- endif -%}
{%- endfor -%}
{%- endif -%}
{%- endif -%}
{%- endfor -%}
{%- endif -%}

View file

@ -1,13 +1,12 @@
{%- from "roles.jinja" import roles with context %}
{% set states = salt['cp.list_states'](saltenv) %}
include:
- roles.git.none
{%- if grains['roles'] is defined -%}
{%- if grains['roles'] is not none -%}
{%- for role in grains['roles'] %}
{%- if 'pillars.roles.git.'+role in states %}
{%- if roles is not none -%}
{%- for role in roles %}
{%- if 'pillars.roles.git.'+role in states %}
- roles.git.{{ role }}
{%- endif -%}
{%- endfor -%}
{%- endif -%}
{%- endif -%}
{%- endfor -%}
{%- endif -%}

View file

@ -1,13 +0,0 @@
{% set states = salt['cp.list_states'](saltenv) %}
include:
- roles.git.none
{%- if grains['roles'] is defined -%}
{%- if grains['roles'] is not none -%}
{%- for role in grains['roles'] %}
{%- if 'pillars.roles.git.'+role in states %}
- roles.git.{{ role }}
{%- endif -%}
{%- endfor -%}
{%- endif -%}
{%- endif -%}

View file

@ -1,25 +0,0 @@
git:
tmux-root:
repo: "ssh://gitea@git.actcur.com:5022/actcur/tmux.git"
path: "/root/tmux"
branch: "master"
key: "git_actcur"
force: true
email: "actcur@actcur.com"
name: "Actaeus Curabitur"
tmux-ejparker:
repo: "ssh://gitea@git.actcur.com:5022/actcur/tmux.git"
path: "/ejparker/tmux"
branch: "master"
key: "git_actcur"
force: true
email: "actcur@actcur.com"
name: "Actaeus Curabitur"
web:
repo: "ssh://gitea@git.actcur.com:5022/actcur/portal.git"
path: "/srv/http/portal"
branch: "master"
key: "git_actcur"
force: true
email: "actcur@actcur.com"
name: "Actaeus Curabitur"

View file

@ -1,17 +0,0 @@
git:
salt:
repo: "ssh://gitea@git.actcur.com:5022/actcur/salt.git"
path: "/srv/salt/prod"
branch: "master"
key: "git_actcur"
force: true
email: "actcur@actcur.com"
name: "Actaeus Curabitur"
salt_dev:
repo: "ssh://gitea@git.actcur.com:5022/actcur/salt.git"
path: "/srv/salt/dev"
branch: "dev"
key: "git_actcur"
force: true
email: "actcur@actcur.com"
name: "Actaeus Curabitur"

View file

@ -1,9 +0,0 @@
git:
ytdownloader:
repo: "ssh://gitea@git.actcur.com:5022/actcur/ytdownloader.git"
path: "/root/scripts/ytdownloader"
branch: "master"
key: "git_actcur"
force: true
email: "actcur@actcur.com"
name: "Actaeus Curabitur"

View file

@ -1,13 +1,12 @@
{%- from "roles.jinja" import roles with context %}
{% set states = salt['cp.list_states'](saltenv) %}
include:
- roles.host.none
{%- if grains['roles'] is defined -%}
{%- if grains['roles'] is not none -%}
{%- for role in grains['roles'] %}
{%- if 'pillars.roles.host.'+role in states %}
{%- if roles is not none -%}
{%- for role in roles %}
{%- if 'pillars.roles.host.'+role in states %}
- roles.host.{{ role }}
{%- endif -%}
{%- endfor -%}
{%- endif -%}
{%- endif -%}
{%- endfor -%}
{%- endif -%}

View file

@ -1,13 +1,12 @@
{%- from "roles.jinja" import roles with context %}
{% set states = salt['cp.list_states'](saltenv) %}
include:
- roles.laradev.none
{%- if grains['roles'] is defined -%}
{%- if grains['roles'] is not none -%}
{%- for role in grains['roles'] %}
{%- if 'pillars.roles.laradev.'+role in states %}
{%- if roles is not none -%}
{%- for role in roles %}
{%- if 'pillars.roles.laradev.'+role in states %}
- roles.laradev.{{ role }}
{%- endif -%}
{%- endfor -%}
{%- endif -%}
{%- endif -%}
{%- endfor -%}
{%- endif -%}

View file

@ -1,13 +1,12 @@
{%- from "roles.jinja" import roles with context %}
{% set states = salt['cp.list_states'](saltenv) %}
include:
- roles.lxc.container_profiles
{%- if grains['roles'] is defined -%}
{%- if grains['roles'] is not none -%}
{%- for role in grains['roles'] %}
{%- if 'pillars.roles.lxc.'+role in states %}
{%- if roles is not none -%}
{%- for role in roles %}
{%- if 'pillars.roles.lxc.'+role in states %}
- roles.lxc.{{ role }}
{%- endif -%}
{%- endfor -%}
{%- endif -%}
{%- endif -%}
{%- endfor -%}
{%- endif -%}

View file

@ -1,13 +1,12 @@
{%- from "roles.jinja" import roles with context %}
{% set states = salt['cp.list_states'](saltenv) %}
include:
- roles.mount.none
{%- if grains['roles'] is defined -%}
{%- if grains['roles'] is not none -%}
{%- for role in grains['roles'] %}
{%- if 'pillars.roles.mount.'+role in states %}
{%- if roles is not none -%}
{%- for role in roles %}
{%- if 'pillars.roles.mount.'+role in states %}
- roles.mount.{{ role }}
{%- endif -%}
{%- endfor -%}
{%- endif -%}
{%- endif -%}
{%- endfor -%}
{%- endif -%}

View file

@ -1,21 +1,20 @@
{%- from "roles.jinja" import roles with context %}
{% set states = salt['cp.list_states'](saltenv) %}
include:
- roles.nginx.none
{%- if grains['roles'] is defined -%}
{%- if grains['roles'] is not none -%}
{%- if 'portal' in grains['roles'] -%}
{%- for state in states %}
{%- if state.startswith("pillars.roles.nginx.") -%}
{%- set role = state.split('.')[3] %}
{%- if roles is not none -%}
{%- if 'portal' in roles -%}
{%- for state in states %}
{%- if state.startswith("pillars.roles.nginx.") -%}
{%- set role = state.split('.')[3] %}
- roles.nginx.{{ role }}
{%- endif -%}
{%- endfor -%}
{%- else -%}
{%- for role in grains['roles'] %}
{%- if 'pillars.roles.nginx.'+role in states %}
{%- endif -%}
{%- endfor -%}
{%- else -%}
{%- for role in roles %}
{%- if 'pillars.roles.nginx.'+role in states %}
- roles.nginx.{{ role }}
{%- endif -%}
{%- endfor -%}
{%- endif -%}
{%- endif -%}
{%- endfor -%}
{%- endif -%}
{%- endif -%}

View file

@ -1,15 +1,14 @@
{%- from "roles.jinja" import roles with context %}
{% set states = salt['cp.list_states'](saltenv) %}
include:
- roles.router.none
{%- if grains['roles'] is defined -%}
{%- if grains['roles'] is not none -%}
{%- if 'router' in grains['roles'] -%}
{%- for state in states %}
{%- if state.startswith("pillars.roles.router.") -%}
{%- set role = state.split('.')[3] %}
{%- if roles is not none -%}
{%- if 'router' in roles -%}
{%- for state in states %}
{%- if state.startswith("pillars.roles.router.") -%}
{%- set role = state.split('.')[3] %}
- roles.router.{{ role }}
{%- endif -%}
{%- endfor -%}
{%- endif -%}
{%- endif -%}
{%- endfor -%}
{%- endif -%}
{%- endif -%}

View file

@ -1,15 +1,14 @@
{%- from "roles.jinja" import roles with context %}
{% set states = salt['cp.list_states'](saltenv) %}
include:
- roles.services.none
{%- if grains['roles'] is defined -%}
{%- if grains['roles'] is not none -%}
{%- if 'icinga' in grains['roles'] -%}
{%- for state in states %}
{%- if state.startswith("pillars.roles.services.") -%}
{%- set role = state.split('.')[3] %}
{%- if roles is not none -%}
{%- if 'icinga' in roles -%}
{%- for state in states %}
{%- if state.startswith("pillars.roles.services.") -%}
{%- set role = state.split('.')[3] %}
- roles.services.{{ role }}
{%- endif -%}
{%- endfor -%}
{%- endif -%}
{%- endif -%}
{%- endfor -%}
{%- endif -%}
{%- endif -%}

View file

@ -1,6 +1,5 @@
grains:
roles:
- server
- ssh
- nrpe
- saltminion
roles:
- server
- ssh
- nrpe
- saltminion

View file

@ -1,13 +1,12 @@
grains:
roles:
- server
- nrpe
- saltminion
- nginx-proxy
- arr
- sonarr
- radarr
- lidarr
- jackett
- ytdownloader
- podfox
roles:
- server
- nrpe
- saltminion
- nginx-proxy
- arr
- sonarr
- radarr
- lidarr
- jackett
- ytdownloader
- podfox

View file

@ -1,8 +1,7 @@
grains:
roles:
- server
- ssh
- nrpe
- saltminion
- atheos
- nginx-proxy
roles:
- server
- ssh
- nrpe
- saltminion
- atheos
- nginx-proxy

View file

@ -1,8 +1,7 @@
grains:
roles:
- server
- ssh
- nrpe
- saltminion
- authelia
- nginx-proxy
roles:
- server
- ssh
- nrpe
- saltminion
- authelia
- nginx-proxy

View file

@ -1,8 +1,7 @@
grains:
roles:
- server
- ssh
- nrpe
- saltminion
- nginx-proxy
- baikal
roles:
- server
- ssh
- nrpe
- saltminion
- nginx-proxy
- baikal

View file

@ -1,6 +1,5 @@
grains:
roles:
- server
- ssh
- nrpe
- saltminion
roles:
- server
- ssh
- nrpe
- saltminion

View file

@ -1,9 +1,8 @@
grains:
roles:
- server
- ssh
- nrpe
- saltminion
- laradev
- bbs
- nginx-proxy
roles:
- server
- ssh
- nrpe
- saltminion
- laradev
- bbs
- nginx-proxy

View file

@ -1,7 +1,6 @@
grains:
roles:
- server
- ssh
- nrpe
- saltminion
- ca
roles:
- server
- ssh
- nrpe
- saltminion
- ca

View file

@ -1,9 +1,8 @@
grains:
roles:
- server
- ssh
- nrpe
- saltminion
- laradev
- clark-family
- nginx-proxy
roles:
- server
- ssh
- nrpe
- saltminion
- laradev
- clark-family
- nginx-proxy

View file

@ -1,8 +1,7 @@
grains:
roles:
- server
- ssh
- nrpe
- saltminion
- nextcloud
- nginx-proxy
roles:
- server
- ssh
- nrpe
- saltminion
- nextcloud
- nginx-proxy

View file

@ -1,7 +1,6 @@
grains:
roles:
- server
- nrpe
- saltminion
- nginx-proxy
- emby
roles:
- server
- nrpe
- saltminion
- nginx-proxy
- emby

View file

@ -1,8 +1,7 @@
grains:
roles:
- server
- ssh
- nrpe
- saltminion
- git
- nginx-proxy
roles:
- server
- ssh
- nrpe
- saltminion
- git
- nginx-proxy

View file

@ -1,8 +1,7 @@
grains:
roles:
- server
- ssh
- nrpe
- saltminion
- gitea
- nginx-proxy
roles:
- server
- ssh
- nrpe
- saltminion
- gitea
- nginx-proxy

View file

@ -1,9 +1,8 @@
grains:
roles:
- server
- ssh
- nrpe
- saltminion
- backup
- host
- host2
roles:
- server
- ssh
- nrpe
- saltminion
- backup
- host
- host2

View file

@ -1,9 +1,8 @@
grains:
roles:
- server
- ssh
- nrpe
- saltminion
- backup
- host
- host2
roles:
- server
- ssh
- nrpe
- saltminion
- backup
- host
- host2

View file

@ -1,8 +1,7 @@
grains:
roles:
- server
- ssh
- nrpe
- saltminion
- icinga
- nginx-proxy
roles:
- server
- ssh
- nrpe
- saltminion
- icinga
- nginx-proxy

View file

@ -1,7 +1,6 @@
grains:
roles:
- server
- ssh
- nrpe
- saltminion
- freeipa-server
roles:
- server
- ssh
- nrpe
- saltminion
- freeipa-server

View file

@ -1,7 +1,6 @@
grains:
roles:
- server
- nrpe
- saltminion
- lxc_container
- jackett
roles:
- server
- nrpe
- saltminion
- lxc_container
- jackett

View file

@ -1,7 +1,6 @@
grains:
roles:
- server
- ssh
- nrpe
- saltminion
- laradev
roles:
- server
- ssh
- nrpe
- saltminion
- laradev

View file

@ -1,7 +1,6 @@
grains:
roles:
- server
- nrpe
- saltminion
- lxc_container
- lidarr
roles:
- server
- nrpe
- saltminion
- lxc_container
- lidarr

View file

@ -1,7 +1,6 @@
grains:
roles:
- server
- nrpe
- saltminion
- nginx-proxy
- ombi
roles:
- server
- nrpe
- saltminion
- nginx-proxy
- ombi

View file

@ -1,8 +1,7 @@
grains:
roles:
- server
- ssh
- nrpe
- saltminion
- nginx-proxy
- pass
roles:
- server
- ssh
- nrpe
- saltminion
- nginx-proxy
- pass

View file

@ -1,9 +1,8 @@
grains:
roles:
- server
- ssh
- nrpe
- saltminion
- pkg-cache
- aurutils
- nginx-proxy
roles:
- server
- ssh
- nrpe
- saltminion
- pkg-cache
- aurutils
- nginx-proxy

View file

@ -1,8 +1,7 @@
grains:
roles:
- server
- ssh
- nrpe
- saltminion
- portal
- nginx-proxy
roles:
- server
- ssh
- nrpe
- saltminion
- portal
- nginx-proxy

View file

@ -1,8 +1,7 @@
grains:
roles:
- server
- ssh
- nrpe
- saltminion
- openproject
- nginx-proxy
roles:
- server
- ssh
- nrpe
- saltminion
- openproject
- nginx-proxy

View file

@ -1,7 +1,6 @@
grains:
roles:
- server
- nrpe
- saltminion
- lxc_container
- radarr
roles:
- server
- nrpe
- saltminion
- lxc_container
- radarr

View file

@ -1,4 +1,3 @@
grains:
roles:
- router
- ssh
roles:
- router
- ssh

View file

@ -1,8 +1,7 @@
grains:
roles:
- server
- nrpe
- saltminion
- nginx-proxy
- windscribe
- rtorrent
roles:
- server
- nrpe
- saltminion
- nginx-proxy
- windscribe
- rtorrent

View file

@ -1,9 +1,8 @@
grains:
roles:
- server
- ssh
- nrpe
- saltminion
- saltmaster
- mirrorlist
- certbot
roles:
- server
- ssh
- nrpe
- saltminion
- saltmaster
- mirrorlist
- certbot

View file

@ -1,8 +1,7 @@
grains:
roles:
- server
- nrpe
- saltminion
- lxc_container
- sonarr
- ytdownloader
roles:
- server
- nrpe
- saltminion
- lxc_container
- sonarr
- ytdownloader

View file

@ -1,7 +1,6 @@
grains:
roles:
- server
- ssh
- nrpe
- saltminion
- mysql
roles:
- server
- ssh
- nrpe
- saltminion
- mysql

View file

@ -1,7 +1,6 @@
grains:
roles:
- server
- ssh
- nrpe
- saltminion
- sshserver
roles:
- server
- ssh
- nrpe
- saltminion
- sshserver

View file

@ -1,8 +1,7 @@
grains:
roles:
- server
- ssh
- nrpe
- saltminion
- sync
- nginx-proxy
roles:
- server
- ssh
- nrpe
- saltminion
- sync
- nginx-proxy

View file

@ -1,8 +1,7 @@
grains:
roles:
- server
- nrpe
- saltminion
- nginx-proxy
- windscribe
- transmission
roles:
- server
- nrpe
- saltminion
- nginx-proxy
- windscribe
- transmission

View file

@ -1,8 +1,7 @@
grains:
roles:
- server
- ssh
- nrpe
- saltminion
- ttrss
- nginx-proxy
roles:
- server
- ssh
- nrpe
- saltminion
- ttrss
- nginx-proxy

View file

@ -1,9 +1,8 @@
grains:
roles:
- server
- ssh
- nrpe
- saltminion
- lxc
- video
- nginx-proxy
roles:
- server
- ssh
- nrpe
- saltminion
- lxc
- video
- nginx-proxy

View file

@ -1,8 +1,7 @@
grains:
roles:
- server
- ssh
- nrpe
- saltminion
- vpnserver
- ca-cert
roles:
- server
- ssh
- nrpe
- saltminion
- vpnserver
- ca-cert

View file

@ -1,14 +1,12 @@
{# ensure that grains pillar exists -#}
{%- if pillar['grains'] is defined -%}
{%- if pillar['grains']['roles'] is defined %}
{%- if pillar['roles'] is defined %}
set-roles:
grains.present:
- name: roles
- force: true
- value: [{% for role in pillar['grains']['roles'] %}{{role}},{% endfor %}]
{% else %}
- value: [{% for role in pillar['roles'] %}{{role}},{% endfor %}]
{% else %}
set-roles:
grains.absent:
- name: roles
{%- endif -%}
{%- endif -%}

View file

@ -1,7 +1,7 @@
{%- set os=grains['os'] -%}
{##check if server is portal##}
{%- if 'portal' in pillar['grains']['roles'] -%}
{%- if 'portal' in pillar['roles'] -%}
{%- set portal = "portal" -%}
{%- endif -%}
nginx:

View file

@ -7,10 +7,8 @@ object Host "{{server}}.actcur.com" {
import "generic-host"
address = "{{server}}.actcur.com"
{%- if role_data['grains'] is defined %}
{%- if role_data['grains']['roles'] is defined %}
vars.roles=[{%- for role in role_data['grains']['roles'] %}"{{role}}",{%- endfor -%}""];
{%- endif -%}
{%- if role_data['roles'] is defined %}
vars.roles=[{%- for role in role_data['roles'] %}"{{role}}",{%- endfor -%}""];
{%- endif %}
}

View file

@ -1,7 +1,7 @@
{%- set os=grains['os'] -%}
{##check if server is portal##}
{%- if 'portal' in pillar['grains']['roles'] -%}
{%- if 'portal' in pillar['roles'] -%}
{%- set portal = "portal" -%}
{%- endif -%}
nginx:

View file

@ -1,6 +1,6 @@
{%- if 'backup' in pillar['grains']['roles'] -%}
{%- if 'backup' in pillar['roles'] -%}
{%- else -%}
{##ensure that backup pillar exists##}
{%- if pillar['backup'] is defined -%}

View file

@ -14,8 +14,8 @@
- systems.core.freeipa
'*':
{#- don't run update automatically on containers - updates will be triggered from their host -#}
{%- if pillar['grains']['roles'] is defined -%}
{%- if 'lxc_container' not in pillar['grains']['roles'] %}
{%- if pillar['roles'] is defined -%}
{%- if 'lxc_container' not in pillar['roles'] %}
- update
{%- endif -%}
{%- endif %}
@ -29,9 +29,9 @@
- systems.core.mount
- systems.core.git
- systems.core.backup
{%- if grains['roles'] is defined -%}
{%- if grains['roles'] is not none -%}
{%- for role in grains['roles'] %}
{%- if pillar['roles'] is defined -%}
{%- if pillar['roles'] is not none -%}
{%- for role in pillar['roles'] %}
{%- if 'roles.maintain.'+role in states %}
- roles.maintain.{{role}}
{%- endif -%}