From 0ba193c7a4d8fe0f87f258a999f6eff88212dcf6 Mon Sep 17 00:00:00 2001
From: m0duspwnens <josh.patterson@securityonionsolutions.com>
Date: Tue, 31 Jan 2023 10:55:14 -0500
Subject: [PATCH] allow docker_registry fw

---
 salt/firewall/assigned_hostgroups.map.yaml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/salt/firewall/assigned_hostgroups.map.yaml b/salt/firewall/assigned_hostgroups.map.yaml
index 3fd3fd1f3..8851e3051 100644
--- a/salt/firewall/assigned_hostgroups.map.yaml
+++ b/salt/firewall/assigned_hostgroups.map.yaml
@@ -78,6 +78,7 @@ role:
               - {{ portgroups.influxdb }}
               - {{ portgroups.elasticsearch_rest }}
               - {{ portgroups.elasticsearch_node }}
+              - {{ portgroups.docker_registry }}
               {% if ISAIRGAP is sameas true %}
               - {{ portgroups.agrules }}
               {% endif %}
@@ -88,18 +89,21 @@ role:
               - {{ portgroups.elastic_agent_control }}
               - {{ portgroups.elastic_agent_data }}
               - {{ portgroups.yum }}
+              - {{ portgroups.docker_registry }}
           searchnodes:
             portgroups:
               - {{ portgroups.redis }}
               - {{ portgroups.elasticsearch_node }}
               - {{ portgroups.beats_5644 }}
               - {{ portgroups.yum }}
+              - {{ portgroups.docker_registry }}
           heavynodes:
             portgroups:
               - {{ portgroups.redis }}
               - {{ portgroups.elasticsearch_node }}
               - {{ portgroups.beats_5644 }}
               - {{ portgroups.yum }}
+              - {{ portgroups.docker_registry }}
           self:
             portgroups:
               - {{ portgroups.syslog}}
@@ -158,6 +162,7 @@ role:
               - {{ portgroups.influxdb }}
               - {{ portgroups.elasticsearch_rest }}
               - {{ portgroups.elasticsearch_node }}
+              - {{ portgroups.docker_registry }}
           sensors:
             portgroups:
               - {{ portgroups.beats_5044 }}
@@ -165,16 +170,19 @@ role:
               - {{ portgroups.elastic_agent_control }}
               - {{ portgroups.elastic_agent_data }}
               - {{ portgroups.yum }}
+              - {{ portgroups.docker_registry }}
           searchnodes:
             portgroups:
               - {{ portgroups.redis }}
               - {{ portgroups.elasticsearch_node }}
               - {{ portgroups.yum }}
+              - {{ portgroups.docker_registry }}
           heavynodes:
             portgroups:
               - {{ portgroups.redis }}
               - {{ portgroups.elasticsearch_node }}
               - {{ portgroups.yum }}
+              - {{ portgroups.docker_registry }}
           self:
             portgroups:
               - {{ portgroups.syslog}}