From 310a6b4f27a02e8a748966ac345cccc2498da3d9 Mon Sep 17 00:00:00 2001
From: defensivedepth <josh@defensivedepth.com>
Date: Tue, 24 Oct 2023 14:21:01 -0400
Subject: [PATCH] Add kibana curl config

---
 salt/common/init.sls                   | 1 +
 salt/kibana/files/curl.config.template | 1 +
 salt/manager/init.sls                  | 1 +
 salt/manager/kibana.sls                | 7 +++++++
 4 files changed, 10 insertions(+)
 create mode 100644 salt/kibana/files/curl.config.template
 create mode 100644 salt/manager/kibana.sls

diff --git a/salt/common/init.sls b/salt/common/init.sls
index f50f0c61b..8c0089fc0 100644
--- a/salt/common/init.sls
+++ b/salt/common/init.sls
@@ -8,6 +8,7 @@ include:
   - common.packages
 {% if GLOBALS.role in GLOBALS.manager_roles %}
   - manager.elasticsearch # needed for elastic_curl_config state
+  - manager.kibana
 {% endif %}
 
 net.core.wmem_default:
diff --git a/salt/kibana/files/curl.config.template b/salt/kibana/files/curl.config.template
new file mode 100644
index 000000000..7ac434017
--- /dev/null
+++ b/salt/kibana/files/curl.config.template
@@ -0,0 +1 @@
+user = "{{ salt['pillar.get']('elasticsearch:auth:users:so_kibana_user:user', 'NO_USER_SET') }}:{{ salt['pillar.get']('elasticsearch:auth:users:so_kibana_user:pass', 'NO_PW_SET') }}"
diff --git a/salt/manager/init.sls b/salt/manager/init.sls
index e808325ef..cbe3455fe 100644
--- a/salt/manager/init.sls
+++ b/salt/manager/init.sls
@@ -16,6 +16,7 @@ include:
   - kibana.secrets
   - manager.sync_es_users
   - manager.elasticsearch
+  - manager.kibana
 
 repo_log_dir:
   file.directory:
diff --git a/salt/manager/kibana.sls b/salt/manager/kibana.sls
new file mode 100644
index 000000000..eb2b968d6
--- /dev/null
+++ b/salt/manager/kibana.sls
@@ -0,0 +1,7 @@
+elastic_curl_config_distributed:
+  file.managed:
+    - name: /opt/so/conf/kibana/curl.config
+    - source: salt://kibana/files/curl.config.template
+    - template: jinja
+    - mode: 600
+    - show_changes: False