Our git based salt workflow
Michael "Maki" Kato
VP Engineering, Matrix Group International.
What Maki wanted was a workflow that worked like this:
0) salt config is kept in git
1) changes to staging branch would be automatically deployed to salt master and high state executed in production with test=True and the results captured in a CI pipeline. This allows the team to assess the impact of the change before applying in production.
2) at some point staging is merged into main branch
3) changes to main branch automatically deploys to salt master and high state is executed in production with test=False.
4) optionally scheduled tasks run applying main branch with test=True
5) scheduled task runs applying high state with test=False regularly