Join a domain…

domain_join_linux_realmd.sls

{% from "domain/map.jinja" import domain with context %}

{% set ticket_available = "false" %}
{% if salt['cmd.retcode']('klist') == '0' %}
  {% set ticket_available = "true" %}
{% endif %}

{% if ticket_available == "true" %}
domain-join-linux-realmd:
  cmd.run:
    - name: 'realm join {{ domain.data.domain }} --computer-ou="{{ domain.data.computer_ou }}"'
{% else %}
please-run-kinit:
  test.configurable_test_state:
    - name: No Kerberos ticket available
    - comment: "Please run 'kinit your_user@{{ domain.data.domain|upper }}' to get a Kerberos ticket"
    - changes: False
    - result: False
{% endif %}