conf.sls

include:
  - jdk

sync cacerts:
  file.managed:
    - name: /opt/java/{{jdk.root}}/jre/lib/security/cacerts
    - source: {{ cacerts }}
    - user: {{ owner }}
    - group: {{ owner }}
    - mode: 644

jdk.sls

jdk:
  pkg.installed:
    - name: {{ jdk.version }}

pillar.example

jdk:
  version: rpm-name
  root: folder-root
{% if grains['server-class'] == 'prod' %}
  cacerts: prod-cacerts-file
{% elif grains['server-class'] == 'non-prod' %}
  cacerts: non-prod-cacerts-file
{% endif %}

variables.sls

include:
  - jdk
  
{% set jdk.version = pillar['jdk']['version'] %}
{% set jdk.root = pillar['jdk']['root'] %}
{% set cacerts = pillar['jdk']['cacerts'] %}