openssh-formula/openssh/map.jinja

{## Start with  defaults from defaults.yaml ##}
{% import_yaml "openssh/defaults.yaml" as default_settings %}

{##
Setup variable using grains['os_family'] based logic, only add key:values here
that differ from whats in defaults.yaml
##}
{% set os_family_map = salt['grains.filter_by']({
    'Arch': {
      'server': 'openssh',
      'client': 'openssh',
      'service': 'sshd',
      'dig_pkg': 'bind-tools',
    },
    'Debian': {
      'server': 'openssh-server',
      'client': 'openssh-client',
      'service': 'ssh',
    },
    'FreeBSD': {
      'service': 'sshd',
      'dig_pkg': 'bind-tools',
      'sshd_config_group': 'wheel',
      'ssh_config_group': 'wheel',
    },
    'OpenBSD': {
      'service': 'sshd',
      'sshd_config_group': 'wheel',
      'ssh_config_group': 'wheel',
    },
    'Gentoo': {
      'server': 'net-misc/openssh',
      'client': 'net-misc/openssh',
      'service': 'sshd',
      'dig_pkg': 'net-dns/bind-tools',
    },
    'RedHat': {
      'server': 'openssh-server',
      'client': 'openssh-clients',
      'service': 'sshd',
      'dig_pkg': 'bind-utils',
    },
    'Suse': {
      'server': 'openssh',
      'client': 'openssh',
      'service': 'sshd',
      'dig_pkg': 'bind-utils',
    },
  }
  , grain="os_family"
  , merge=salt['pillar.get']('openssh:lookup'))
%}

{## Merge the flavor_map to the default settings ##}
{% do default_settings.openssh.update(os_family_map) %}

{## Merge in openssh:lookup pillar ##}
{% set openssh = salt['pillar.get'](
    'openssh',
    default=default_settings.openssh,
    merge=True
  )
%}

{% set os_family_map = salt['grains.filter_by']({
    'FreeBSD': {
        'Subsystem': 'sftp /usr/libexec/sftp-server',
    },
    'OpenBSD': {
        'Subsystem': 'sftp /usr/libexec/sftp-server',
    },
    'Suse': {
        'Subsystem': 'sftp /usr/lib/ssh/sftp-server',
    },
    'Arch': {
        'Subsystem': 'sftp /usr/lib/ssh/sftp-server',
    },
    'RedHat': {
        'Subsystem': 'sftp /usr/libexec/openssh/sftp-server',
    },
    'default': {}
  }
  , grain="os_family"
  , merge=salt['pillar.get']('sshd_config:lookup'))
%}

{% set os_finger_map = salt['grains.filter_by']({
    'CentOS-6': {
        'UsePrivilegeSeparation': 'yes',
    },
    'default': {}
  }
  , grain="osfinger"
  , merge=salt['pillar.get']('sshd_config:lookup'))
%}


{## Merge the flavor_map to the default settings ##}
{% do default_settings.sshd_config.update(os_family_map) %}
{% do default_settings.sshd_config.update(os_finger_map) %}

{## Merge in sshd_config:lookup pillar ##}
{% set sshd_config = salt['pillar.get'](
    'sshd_config',
    default=default_settings.sshd_config,
    merge=True
  )
%}