icinga:
  user.present:
    - shell: /bin/bash
    - home: /var/lib/icinga
    - system: true
    - createhome: true

/var/lib/icinga/.ssh:
  file.directory:
    - user: icinga
    - group: icinga
    - mode: 700
    - require:
      - user: icinga

/var/lib/icinga/.ssh/authorized_keys:
  file.managed:
    - user: icinga
    - group: icinga
    - mode: 400
    - contents_pillar: icinga2:icinga_rsa_pubkey
    - require:
      - file: /var/lib/icinga/.ssh

/etc/sudoers.d/icinga:
  file.managed:
    - user: root
    - group: root
    - mode: 440
    - template: jinja
    - source: salt://icinga2/files/client_sudo.jinja
    - check_cmd: /usr/sbin/visudo -c -f