cron.sls

/usr/local/bin/salt-cron.sh:
  file.managed:
    - user: root
    - group: root
    - source: salt://system/cron/salt-cron.sh
    - mode: 755

/usr/bin/chronic /usr/local/bin/salt-cron.sh | /usr/bib/logger -t salt-cron:
  cron.present:
    - identifier: SALT
    - user: root
    - minute: '*/5'

moreutils.sls

packages.moreutils:
  pkg.installed:
    - pkgs:
      - moreutils

salt-cron.sh

#!/usr/bin/env bash
  
set -e
set -x

cd /srv/salt

/usr/bin/git fetch --all --prune
/usr/bin/git reset --hard origin/master

/usr/bin/salt-call \
    --local \
    --log-file-level=info \
    --state-output=changes \
    --state-verbose=false \
    state.apply