salt.pillar.nacl¶

Decrypt pillar data through the builtin NACL renderer

In most cases, you'll want to make this the last external pillar used. For example, to pair with the builtin stack pillar you could do something like this:

nacl.config:
    keyfile: /root/.nacl

ext_pillar:
  - stack: /path/to/stack.cfg
  - nacl: {}

Set nacl.config in your config.

salt.pillar.nacl.ext_pillar(minion_id, pillar, *args, **kwargs)¶