Fixes #38964 - Add salt minimum auth version

manifests/plugin/salt.pp

@@ -8,6 +8,8 @@
 #
 # $autosign_key_file:: File to use for salt autosign via grains
 #
+# $minimum_auth_version:: Minimum authentication version for salt minions
+#
 # $user::            User to run salt commands under
 #
 # $group::           Group to run salt commands and access configuration files
@@ -33,6 +35,7 @@
 class foreman_proxy::plugin::salt (
   Stdlib::Absolutepath $autosign_file = $foreman_proxy::plugin::salt::params::autosign_file,
   Stdlib::Absolutepath $autosign_key_file = $foreman_proxy::plugin::salt::params::autosign_key_file,
+  Optional[Integer] $minimum_auth_version = $foreman_proxy::plugin::salt::params::minimum_auth_version,
   Boolean $enabled = $foreman_proxy::plugin::salt::params::enabled,
   Foreman_proxy::ListenOn $listen_on = $foreman_proxy::plugin::salt::params::listen_on,
   String $user = $foreman_proxy::plugin::salt::params::user,

manifests/plugin/salt/params.pp

@@ -8,6 +8,7 @@
   $autosign_file = "${foreman_proxy::params::etc}/salt/autosign.conf"
   $autosign_grains_dir = '/var/lib/foreman-proxy/salt/grains'
   $autosign_key_file = "${autosign_grains_dir}/autosign_key"
+  $minimum_auth_version = undef
   $user          = 'root'
 
   $api           = false

templates/plugin/salt_master.conf.erb

@@ -27,6 +27,16 @@ ext_pillar:
   - puppet: /usr/bin/foreman-node
 
 
+##
+# Minimum authentication version
+<% minimum_auth_version = scope.lookupvar('foreman_proxy::plugin::salt::minimum_auth_version') %>
+<% if [nil, :undefined, :undef].include?(minimum_auth_version) %>
+# use salt's default minimum_auth_version
+<% else %>
+minimum_auth_version: <%= minimum_auth_version %>
+<% end %>
+
+
 ##
 # Salt API access
 external_auth: