diff --git a/pillar/top.sls b/pillar/top.sls index 1fdb59deb..b15038e5e 100644 --- a/pillar/top.sls +++ b/pillar/top.sls @@ -262,6 +262,7 @@ base: - minions.adv_{{ grains.id }} - kafka.nodes - kafka.soc_kafka + - stig.soc_stig '*_import': - node_data.ips @@ -319,10 +320,12 @@ base: - elasticfleet.adv_elasticfleet - minions.{{ grains.id }} - minions.adv_{{ grains.id }} + - stig.soc_stig '*_hypervisor': - minions.{{ grains.id }} - minions.adv_{{ grains.id }} + - stig.soc_stig '*_desktop': - minions.{{ grains.id }} diff --git a/salt/allowed_states.map.jinja b/salt/allowed_states.map.jinja index 068722ca2..2cd7f2f87 100644 --- a/salt/allowed_states.map.jinja +++ b/salt/allowed_states.map.jinja @@ -143,6 +143,7 @@ ), 'so-fleet': ( ssl_states + + stig_states + ['logstash', 'nginx', 'healthcheck', 'elasticfleet'] ), 'so-receiver': ( diff --git a/salt/sensor/init.sls b/salt/sensor/init.sls index 1d7899b62..7d1714c2c 100644 --- a/salt/sensor/init.sls +++ b/salt/sensor/init.sls @@ -43,5 +43,5 @@ combine_bond_script: execute_combine_bond: cmd.run: - name: /usr/sbin/so-combine-bond - - onchanges: - - file: combine_bond_script + - onlyif: + - ip link show bond0 diff --git a/salt/sensor/tools/sbin_jinja/so-combine-bond b/salt/sensor/tools/sbin_jinja/so-combine-bond index 0a8a2e66a..ded429470 100644 --- a/salt/sensor/tools/sbin_jinja/so-combine-bond +++ b/salt/sensor/tools/sbin_jinja/so-combine-bond @@ -18,7 +18,7 @@ fi # Check if bond0 exists if ! ip link show bond0 &>/dev/null; then - exit 1 + exit 0 fi # Function to get slave interfaces - works across distributions @@ -48,7 +48,7 @@ get_bond_slaves() { SLAVES=$(get_bond_slaves bond0) if [ -z "$SLAVES" ]; then - exit 1 + exit 0 fi # Process each slave interface diff --git a/salt/stig/enabled.sls b/salt/stig/enabled.sls index 0e5448f7d..91aae7069 100644 --- a/salt/stig/enabled.sls +++ b/salt/stig/enabled.sls @@ -47,6 +47,7 @@ update_stig_profile: - name: /opt/so/conf/stig/sos-oscap.xml - source: salt://stig/files/sos-oscap.xml - user: socore + - show_changes: False - group: socore - mode: 0644 diff --git a/salt/top.sls b/salt/top.sls index a75346462..6c3135b45 100644 --- a/salt/top.sls +++ b/salt/top.sls @@ -299,6 +299,7 @@ base: - elasticfleet - elasticfleet.install_agent_grid - schedule + - stig '*_hypervisor and I@features:vrt and G@saltversion:{{saltversion}}': - match: compound