Push smallstep root ca

app/smallstep.sls

@@ -20,4 +20,29 @@
     - mode: 0600
   pkg.installed:
     - sources:
-      - step-cli: /opt/step-cli/pkgs/step-cli-{{version}}.deb
+      - step-cli: /opt/step-cli/pkgs/step-cli-{{version}}.deb
+
+/root/.step/certs/root_ca.pem:
+  file.managed:
+    - user: root
+    - group: root
+    - mode: 0600
+    - makedirs: true
+    - contents: |
+        -----BEGIN CERTIFICATE-----
+        MIIBsDCCAVWgAwIBAgIQZ01jqAhYWfIy7WPgsPSCpzAKBggqhkjOPQQDAjA2MTQw
+        MgYDVQQDEysyODExIFJlZHJvY2sgVHJhaWwgTmV0d29yayBTZXJ2aWNlcyBSb290
+        IENBMB4XDTIxMDEyMDIzMDYzNloXDTMxMDEyMDIzMDYzNlowNjE0MDIGA1UEAxMr
+        MjgxMSBSZWRyb2NrIFRyYWlsIE5ldHdvcmsgU2VydmljZXMgUm9vdCBDQTBZMBMG
+        ByqGSM49AgEGCCqGSM49AwEHA0IABMKE6FWn1ZrwcmL+03wAg8PZ93tx3iuyQR3q
+        aYuAYGCa5sbArBNTVtsOzUpfUxO608PyaLZSJC1BkST4aMXr9pOjRTBDMA4GA1Ud
+        DwEB/wQEAwIBBjASBgNVHRMBAf8ECDAGAQH/AgEBMB0GA1UdDgQWBBSf9KkqbqQs
+        XUCa9kYPTbsmn7O1fTAKBggqhkjOPQQDAgNJADBGAiEA4QuRJ17rmbQalXL6I1+W
+        EH99OEd4YEqCsCYNLnUdjk4CIQCbFwZkBmotKn15mdYI98VqyuHIolBY34FxjpwH
+        7lkFvg==
+        -----END CERTIFICATE-----
+
+step certificate install /root/.step/certs/root_ca.pem:
+  cmd.run:
+    - onchanges:
+      - file: /root/.step/certs/root_ca.pem