We pass the pillars via the template engine context, this avoid the need to load `map.jinja` from the templates themselves and recude the number of `pillar.get` calls. * openssh/config.sls (sshd_config): pass `sshd_config` in the context. (ssh_config): pass `ssh_config` in the context. * openssh/files/default/ssh_config: remove `map.jinja` import since it's now in the context. * openssh/files/default/sshd_config: ditoo. * openssh/known_hosts.sls: pass `known_hosts` in the context. * openssh/files/default/ssh_known_hosts: use `known_hosts` from the context instead of calling `pillar.get` several times. BREAKING CHANGE: Minimum Salt version support is now `2019.2` in line with official upstream support; also use of the `traverse` Jinja filter.
		
			
				
	
	
		
			135 lines
		
	
	
		
			4.3 KiB
		
	
	
	
		
			Plaintext
		
	
	
	
	
	
			
		
		
	
	
			135 lines
		
	
	
		
			4.3 KiB
		
	
	
	
		
			Plaintext
		
	
	
	
	
	
{#- present in ssh_config and known in actual file options -#}
 | 
						|
{%- set processed_options = [] -%}
 | 
						|
{%- set string_or_list_options = ['KexAlgorithms', 'Ciphers', 'MACs'] -%}
 | 
						|
 | 
						|
{%- macro render_raw_option(keyword, value) -%}
 | 
						|
  {%- if value is sameas true -%}
 | 
						|
{{ keyword }} yes
 | 
						|
  {%- elif value is sameas false -%}
 | 
						|
{{ keyword }} no
 | 
						|
  {%- elif value is string or value is number -%}
 | 
						|
{{ keyword }} {{ value }}
 | 
						|
  {%- else -%}
 | 
						|
{%- for single_value in value -%}
 | 
						|
{{ keyword }} {{ single_value }}
 | 
						|
{% endfor -%}
 | 
						|
  {%- endif -%}
 | 
						|
{%- endmacro -%}
 | 
						|
 | 
						|
{%- macro render_host_option(keyword, value) -%}
 | 
						|
{%- if value is sameas true %}
 | 
						|
    {{ keyword }} yes
 | 
						|
  {%- elif value is sameas false %}
 | 
						|
    {{ keyword }} no
 | 
						|
  {%- elif value is string or value is number %}
 | 
						|
    {{ keyword }} {{ value }}
 | 
						|
  {%- else -%}
 | 
						|
    {%- if keyword in string_or_list_options %}
 | 
						|
    {{ keyword }} {{ value|join(',') }}
 | 
						|
    {%- else %}
 | 
						|
    {%- for single_value in value -%}
 | 
						|
    {{ keyword }} {{ single_value }}
 | 
						|
    {%- endfor -%}
 | 
						|
    {%- endif -%}
 | 
						|
{%- endif -%}
 | 
						|
{%- endmacro -%}
 | 
						|
 | 
						|
{#- generic renderer used for ssh matches, known options, -#}
 | 
						|
{#- and unknown options -#}
 | 
						|
{%- macro render_option(keyword, default, config_dict=ssh_config) -%}
 | 
						|
  {%- set value = config_dict.get(keyword, default) -%}
 | 
						|
{{ render_raw_option(keyword, value) }}
 | 
						|
{%- endmacro -%}
 | 
						|
 | 
						|
{#- macros for render option according to present -#}
 | 
						|
{%- macro option_impl(keyword, default, present) -%}
 | 
						|
  {%- if present -%}
 | 
						|
    {%- do processed_options.append(keyword) -%}
 | 
						|
    {%- set prefix='' -%}
 | 
						|
  {%- else -%}
 | 
						|
    {%- set prefix='#' -%}
 | 
						|
  {%- endif -%}
 | 
						|
  {#- add prefix to keyword -#}
 | 
						|
  {%- set keyword = prefix ~ keyword -%}
 | 
						|
{{ render_option(keyword, default) }}
 | 
						|
{%- endmacro -%}
 | 
						|
 | 
						|
{#- macros for render option commented by default -#}
 | 
						|
{%- macro option(keyword, default, present) -%}
 | 
						|
{{ option_impl(keyword, default, keyword in ssh_config) }}
 | 
						|
{%- endmacro -%}
 | 
						|
 | 
						|
{#- macros for render option uncommented by default -#}
 | 
						|
{%- macro option_default_uncommented(keyword, default, present) -%}
 | 
						|
{{ option_impl(keyword, default, True) }}
 | 
						|
{%- endmacro -%}
 | 
						|
 | 
						|
{#- macro for collapsing a list into a string -#}
 | 
						|
{%- macro option_collapselist(keyword, sep) -%}
 | 
						|
{%- do processed_options.append(keyword) -%}
 | 
						|
{{keyword}} {{ssh_config.get(keyword)|join(sep)}}
 | 
						|
{%- endmacro -%}
 | 
						|
 | 
						|
{#- macro for handling an option that can be specified as a list or a string -#}
 | 
						|
{%- macro option_string_or_list(keyword, default, default_commented, sep=',') -%}
 | 
						|
{%- if ssh_config.get(keyword, '') is string -%}
 | 
						|
  {%- if default_commented -%}
 | 
						|
{{ option(keyword, default) }}
 | 
						|
  {%- else -%}
 | 
						|
{{ option_default_uncommented(keyword, default) }}
 | 
						|
  {%- endif -%}
 | 
						|
{%- else -%}
 | 
						|
{{ option_collapselist(keyword, sep) }}
 | 
						|
{%- endif -%}
 | 
						|
{%- endmacro -%}
 | 
						|
 | 
						|
{%- if ssh_config.get('ConfigBanner', False) -%}
 | 
						|
{{ ssh_config['ConfigBanner'] }}
 | 
						|
{%- else -%}
 | 
						|
# Do not edit this file manually!
 | 
						|
# It will be overwritten by salt!
 | 
						|
{%- endif %}
 | 
						|
{%- set global_src_url = salt ['pillar.get']('__formulas:print_template_url', None) %}
 | 
						|
{%- set local_src_url = salt ['pillar.get']('openssh-formula:print_template_url', None) %}
 | 
						|
{%- if (global_src_url and local_src_url is none) or local_src_url %}
 | 
						|
#
 | 
						|
# Template used to generate this file:
 | 
						|
# {{ source }}
 | 
						|
{%- endif %}
 | 
						|
 | 
						|
{%- if 'Hosts' in ssh_config %}
 | 
						|
{%- do processed_options.append('Hosts') %}
 | 
						|
{%  for host, conf in ssh_config['Hosts'].items() %}
 | 
						|
Host {{ host }}
 | 
						|
  {%- for key, val in conf.items() -%}
 | 
						|
    {{ render_host_option(key, val) }}
 | 
						|
  {%- endfor %}
 | 
						|
{%- endfor %}
 | 
						|
{%- endif %}
 | 
						|
 | 
						|
{# Handling unknown in salt template options #}
 | 
						|
{% for keyword in ssh_config.keys() -%}
 | 
						|
  {#- Matches have to be at the bottom and should be handled differently -#}
 | 
						|
  {%- if not keyword in processed_options and keyword != 'matches' -%}
 | 
						|
    {%- if not keyword in string_or_list_options -%}
 | 
						|
{#- send a blank default as it doesn't matter #}
 | 
						|
{{ render_option(keyword, '') }}
 | 
						|
    {%- else -%}
 | 
						|
{#- same as above #}
 | 
						|
{{ option_string_or_list(keyword, '', True) }}
 | 
						|
    {%- endif -%}
 | 
						|
  {%- endif -%}
 | 
						|
{%- endfor -%}
 | 
						|
 | 
						|
{# Handle matches last as they need to go at the bottom #}
 | 
						|
{% if 'matches' in ssh_config -%}
 | 
						|
  {%- for match in ssh_config['matches'].values() %}
 | 
						|
Match {{ match['type'].keys()[0] }} {{ match['type'].values()[0] }}
 | 
						|
    {%- for keyword in match['options'].keys() %}
 | 
						|
    {{ render_option(keyword, '', config_dict=match['options']) }}
 | 
						|
    {%- endfor %}
 | 
						|
  {%- endfor %}
 | 
						|
{%- endif -%}
 | 
						|
 | 
						|
{#- vim: set ft=jinja : #}
 |