o

�N�g��@s$dZd
dl
Z
dZdd�Zdd�ZdS)a}

Decrypt pillar data through the builtin NACL renderer

In most cases, you'll want to make this the last external pillar used. For
example, to pair with the builtin stack pillar you could do something like
this:

.. code:: yaml

    nacl.config:
        keyfile: /root/.nacl

    ext_pillar:
      - stack: /path/to/stack.cfg
      - nacl: {}

Set ``nacl.config`` in your config.

�N�naclcCstd
durdSt
S)NZ	fips_modeT)Fz+nacl pillar data not available in FIPS mode)�__opts__�__virtualname__�rr�D/opt/saltstack/salt/lib/python3.10/site-packages/salt/pillar/nacl.py�__virtual__s


rcOstj
�tt��d
�
}||
�
S)Nr)�salt�loaderZrenderrZ__salt__�get)Z	minion_idZpillar�args�kwargsZrender_functionrrr�
ext_pillar s

r
)�__doc__rrrr
rrrr�<module>
s