Using salt-ssh

/etc/salt/roster:

<TARGET>:
  host: <IP>
  port: <PORT>
  user: <USER>
  priv: agent-forwarding

Remember to use sudo -E for local SSH agent (and yubikey) to work when running as root: sudo -E salt-ssh <TARGET> state.apply