rework so-firewall to work with pillar files

2025-12-17 06:22:53 +01:00 · 2023-05-01 16:49:06 -04:00
parent 9a4ae2b832
commit 1f6463a9bb
4 changed files with 142 additions and 94 deletions
--- a/salt/firewall/defaults.yaml
+++ b/salt/firewall/defaults.yaml
@@ -13,9 +13,11 @@ firewall:
    fleet: []
    heavynodes: []
    idh: []
+    import: []
    localhost:
      - 127.0.0.1
    manager: []
+    managersearch: []
    receivers: []
    searchnodes: []
    securityonion_desktops: []
--- a/salt/firewall/soc_firewall.yaml
+++ b/salt/firewall/soc_firewall.yaml
@@ -33,8 +33,10 @@ firewall:
    fleet: *hostgroupsettings
    heavynodes: *hostgroupsettings
    idh: *hostgroupsettings
+    import: *hostgroupsettings
    localhost: *ROhostgroupsettingsadv
    manager: *hostgroupsettings
+    managersearch: *hostgroupsettings
    receivers: *hostgroupsettings
    searchnodes: *hostgroupsettings
    securityonion_desktops: *hostgroupsettings