Deprecate the ssh key for deployments

README.md

@@ -80,6 +80,7 @@ It usually should not differ between deployments and might be assigned to many m
 
 - `deploy.config.key` **no default value**
   A private key that is able to access repositories.
+  **Deprecated** Use [gitlab deploy tokens](https://doc.it.hs-hannover.de/books/sysadmin/page/gitlab-deploy-with-token-and-without-ssh) instead:
 - `deploy.config.deploy_directory` _default: `/srv/repo`_
   The directory in which git clones are located.
 - `deploy.config.venv_directory` _default: `/srv/venv`_

deploy/user.sls

@@ -4,6 +4,7 @@ deployer:
   user.absent: []
   group.absent: []
 
+{% if salt.pillar.get('deploy:config:key:', None) is not None %}
 
 deploy_user_ssh_known_hosts_file_present:
   file.managed:
@@ -50,6 +51,8 @@ deploy_key:
     - group: root
     - makedirs: True
 
+{% endif %}
+
 {% for project_name, project_config in deploy.projects.items() %}
 
 {% set config_user_groups = project_config.get('user_groups', []) %}