feat(pip): allow plugin installation

Can now give a list of plugins to install when using the pip
installation method.

letsencrypt/defaults.yaml

@@ -20,6 +20,9 @@ letsencrypt:
     user: root
     group: root
     mode: 755
+  # Only used for the pip install method (install_method = pip). Can be used to
+  # install plugins for certbot.
+  pip_pkgs: []
   config:
     server: https://acme-v02.api.letsencrypt.org/directory
     agree-tos: true

letsencrypt/install.sls

@@ -52,5 +52,8 @@ letsencrypt-client:
   {%-   else %}
       - certbot
   {%-   endif %}
+  {%-   for pkg in letsencrypt.pip_pkgs %}
+      - {{ pkg }}
+  {%-   endfor %}
   {%- endif %}
     - reload_modules: True

pillar.example

@@ -19,6 +19,11 @@ letsencrypt:
   # If you want to have specific version of certbot you can enable it. The
   # version value should match a certbot/certbot branch.
   version: 0.30.x
+  # Only used for the pip install method (install_method = pip). Can be used to
+  # install plugins for certbot. Default: []
+  pip_pkgs:
+    - certbot-dns-azure
+    - certbot-dns-powerdns
   # Subcommand used for certificates' first generation cmd ( run | certonly | renew )
   create_init_cert_subcmd: certonly
   # Any parameter from the cli can be specified in the config file

test/integration/pip/controls/letsencrypt_spec.rb

@@ -20,3 +20,7 @@
   its('content') { should match 'authenticator = standalone' }
   its('content') { should match 'File managed by Salt' }
 end
+
+describe command('/opt/letsencrypt/bin/certbot plugins') do
+  its('stdout') { should match(/dns-powerdns/) }
+end

test/salt/pillar/pip.sls

@@ -3,7 +3,9 @@
 ---
 letsencrypt:
   install_method: pip
-  version: 0.26.1
+  version: 1.7.0
+  pip_pkgs:
+    - certbot-dns-powerdns
   config: |
     server = https://acme-staging.api.letsencrypt.org/directory
     email = saltstack-letsencrypt-formula@example.com