Support "salt://path_to_keyname" ssh_key definition in users:"user name":ssh_keys:"privkey|pubkey" pillar data

[konstest]

Hi I don't want to show private part ssh key into pillar data. I offer this feature.

Pillar example:

users:
  user_name:
    ssh_keys:
      privkey: salt://path_to_PRIVATEKEY
      pubkey: salt://path_to_PUBLICKEY

[EvaSDK]

As far as I remember, using salt file server to store secrets is a bad idea because any minions could requests files from it without restrictions which is why you would put secrets in pillars. Since you want to store them another way, maybe you want to use sdb instead ?

[noelmcloughlin]

Hi @konstest please look at sdb as suggested, and raise new PR if practical.