From 1aa2852ed6c60e149aa79578d500c6a4cde2afae Mon Sep 17 00:00:00 2001
From: m0duspwnens <josh.patterson@securityonionsolutions.com>
Date: Tue, 1 Jun 2021 08:35:43 -0400
Subject: [PATCH] fix logic

---
 salt/elasticsearch/auth.sls | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/salt/elasticsearch/auth.sls b/salt/elasticsearch/auth.sls
index 303383cfe..704d743ce 100644
--- a/salt/elasticsearch/auth.sls
+++ b/salt/elasticsearch/auth.sls
@@ -33,7 +33,7 @@ elastic_auth_pillar:
     # be within the file either, so it should then be created
 {% if salt['pillar.get']('elasticsearch:auth', False) %}
     - unless:
-    {% for so_app_user in salt['pillar.get']('elasticsearch:auth:users') %}
-      - grep {{ so_app_user.user }} /opt/so/saltstack/local/pillar/elasticsearch/auth.sls
+    {% for so_app_user, values in salt['pillar.get']('elasticsearch:auth:users', {'so_noapp_user': {'user': 'r@NDumu53Rd0NtDOoP'}}).items() %}
+      - grep {{ values.user }} /opt/so/saltstack/local/pillar/elasticsearch/auth.sls
     {% endfor%}
 {% endif %}