{% from "salt/map.jinja" import salt_daemons with context %}
{% from "salt/deb_install/map.jinja" import osrelease, oscodename with context %}

/etc/apt/keyrings/salt-archive-keyring-2023.pgp:
  file.managed:
    - source: https://packages.broadcom.com/artifactory/api/security/keypair/SaltProjectKey/public
    - source_hash: 36decef986477acb8ba2a1fc4041bcf9f22229ef6c939d0317c9e36a9d142b34

/etc/apt/sources.list.d/salt.list:
  file.managed:
    - contents: deb [signed-by=/etc/apt/keyrings/salt-archive-keyring-2023.pgp arch=amd64] https://packages.broadcom.com/artifactory/saltproject-deb/ stable main

salt-common:
  pkg.installed:
    - version: '{{ salt.pillar.get("salt:version") }}'
    - refresh: true
    - require:
      - file: /etc/apt/keyrings/salt-archive-keyring-2023.pgp
      - file: /etc/apt/sources.list.d/salt.list

salt {{ salt.pillar.get("salt:version") }}:
  pkg.held:
    - pkgs:
      - salt-common
{% for daemon in salt_daemons %}
      - salt-{{ daemon }}
{% endfor %}
    - require:
      - pkg: salt-common
{% for daemon in salt_daemons %}
      - pkg: salt-{{ daemon }}
{% endfor %}
  
{% for daemon in salt_daemons %}
salt-{{ daemon }}:
  pkg.installed:
    - version: '{{ salt.pillar.get("salt:version") }}'
    - require:
      - pkg: salt-common
  service.running:
    - enable: true
    - require:
      - pkg: salt-{{ daemon }}
    - listen:
      - file: /etc/salt/{{ daemon }}
{% endfor %}