From 24cb7f4a1481cadc847a788544c5381cf4311ad8 Mon Sep 17 00:00:00 2001 From: Mike Reeves Date: Wed, 5 Dec 2018 19:50:59 -0500 Subject: [PATCH] Fleet Modules --- salt/firewall/init.sls | 11 +++++++++++ salt/fleet/init.sls | 1 + 2 files changed, 12 insertions(+) diff --git a/salt/firewall/init.sls b/salt/firewall/init.sls index 87c149d99..71575e3d6 100644 --- a/salt/firewall/init.sls +++ b/salt/firewall/init.sls @@ -357,6 +357,17 @@ enable_standard_analyst_5601_{{ip}}: - dport: 5601 - position: 1 - save: True +#THIS IS TEMPORARY +enable_standard_analyst_8080_{{ip}}: + iptables.insert: + - table: filter + - chain: DOCKER-USER + - jump: ACCEPT + - proto: tcp + - source: {{ ip }} + - dport: 8080 + - position: 1 + - save: True {% endfor %} diff --git a/salt/fleet/init.sls b/salt/fleet/init.sls index d3ae946e8..59c02c0ce 100644 --- a/salt/fleet/init.sls +++ b/salt/fleet/init.sls @@ -24,6 +24,7 @@ so-fleet: - KOLIDE_SERVER_CERT=/ssl/server.cert - KOLIDE_SERVER_KEY=/ssl/server.key - KOLIDE_LOGGING_JSON=true + - KOLIDE_AUTH_JWT_KEY=thisisatest - binds: - /etc/pki/fleet.key:/ssl/server.key:ro - /etc/pki/fleet.crt:/ssl/server.cert