{%- set s3util_secret = salt['pillar.get']('s3-dbutils:secrets:s3util', '') -%}
{%- set s3api_ro_secret = salt['pillar.get']('s3-dbutils:secrets:s3api_ro', '') -%}
{%- set s3util_password = pillar['yav'][s3util_secret] -%}
{%- set s3api_ro_password = pillar['yav'][s3api_ro_secret] -%}

*:6432:s3db:s3util:{{ s3util_password }}
*:6432:s3meta:s3util:{{ s3util_password }}
*:6432:s3db:s3api_ro:{{ s3api_ro_password }}
*:6432:s3meta:s3api_ro:{{ s3api_ro_password }}
