mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
Remove Features Option
This commit is contained in:
@@ -1,6 +1,5 @@
|
|||||||
{%- set NODE_ROUTE_TYPE = salt['pillar.get']('elasticsearch:node_route_type', 'hot') %}
|
{%- set NODE_ROUTE_TYPE = salt['pillar.get']('elasticsearch:node_route_type', 'hot') %}
|
||||||
{%- set NODEIP = salt['pillar.get']('elasticsearch:mainip') %}
|
{%- set NODEIP = salt['pillar.get']('elasticsearch:mainip') %}
|
||||||
{%- set FEATURES = salt['pillar.get']('elastic:features', False) %}
|
|
||||||
{%- set TRUECLUSTER = salt['pillar.get']('elasticsearch:true_cluster', False) %}
|
{%- set TRUECLUSTER = salt['pillar.get']('elasticsearch:true_cluster', False) %}
|
||||||
{%- if TRUECLUSTER is sameas true %}
|
{%- if TRUECLUSTER is sameas true %}
|
||||||
{%- set ESCLUSTERNAME = salt['pillar.get']('elasticsearch:true_cluster_name') %}
|
{%- set ESCLUSTERNAME = salt['pillar.get']('elasticsearch:true_cluster_name') %}
|
||||||
@@ -25,21 +24,19 @@ cluster.routing.allocation.disk.threshold_enabled: true
|
|||||||
cluster.routing.allocation.disk.watermark.low: 95%
|
cluster.routing.allocation.disk.watermark.low: 95%
|
||||||
cluster.routing.allocation.disk.watermark.high: 98%
|
cluster.routing.allocation.disk.watermark.high: 98%
|
||||||
cluster.routing.allocation.disk.watermark.flood_stage: 98%
|
cluster.routing.allocation.disk.watermark.flood_stage: 98%
|
||||||
{%- if FEATURES is sameas true %}
|
|
||||||
xpack.ml.enabled: false
|
xpack.ml.enabled: false
|
||||||
#xpack.security.enabled: false
|
xpack.security.enabled: false
|
||||||
#xpack.security.transport.ssl.enabled: true
|
xpack.security.transport.ssl.enabled: true
|
||||||
#xpack.security.transport.ssl.verification_mode: none
|
xpack.security.transport.ssl.verification_mode: none
|
||||||
#xpack.security.transport.ssl.key: /usr/share/elasticsearch/config/elasticsearch.key
|
xpack.security.transport.ssl.key: /usr/share/elasticsearch/config/elasticsearch.key
|
||||||
#xpack.security.transport.ssl.certificate: /usr/share/elasticsearch/config/elasticsearch.crt
|
xpack.security.transport.ssl.certificate: /usr/share/elasticsearch/config/elasticsearch.crt
|
||||||
#xpack.security.transport.ssl.certificate_authorities: [ "/usr/share/elasticsearch/config/ca.crt" ]
|
xpack.security.transport.ssl.certificate_authorities: [ "/usr/share/elasticsearch/config/ca.crt" ]
|
||||||
#{%- if grains['role'] in ['so-node','so-heavynode'] %}
|
{%- if grains['role'] in ['so-node','so-heavynode'] %}
|
||||||
#xpack.security.http.ssl.enabled: true
|
xpack.security.http.ssl.enabled: true
|
||||||
#xpack.security.http.ssl.client_authentication: none
|
xpack.security.http.ssl.client_authentication: none
|
||||||
#xpack.security.http.ssl.key: /usr/share/elasticsearch/config/elasticsearch.key
|
xpack.security.http.ssl.key: /usr/share/elasticsearch/config/elasticsearch.key
|
||||||
#xpack.security.http.ssl.certificate: /usr/share/elasticsearch/config/elasticsearch.crt
|
xpack.security.http.ssl.certificate: /usr/share/elasticsearch/config/elasticsearch.crt
|
||||||
#xpack.security.http.ssl.certificate_authorities: /usr/share/elasticsearch/config/ca.crt
|
xpack.security.http.ssl.certificate_authorities: /usr/share/elasticsearch/config/ca.crt
|
||||||
#{%- endif %}
|
|
||||||
#xpack.security.authc:
|
#xpack.security.authc:
|
||||||
# anonymous:
|
# anonymous:
|
||||||
# username: anonymous_user
|
# username: anonymous_user
|
||||||
|
|||||||
@@ -18,17 +18,10 @@
|
|||||||
{% set VERSION = salt['pillar.get']('global:soversion', 'HH1.2.2') %}
|
{% set VERSION = salt['pillar.get']('global:soversion', 'HH1.2.2') %}
|
||||||
{% set IMAGEREPO = salt['pillar.get']('global:imagerepo') %}
|
{% set IMAGEREPO = salt['pillar.get']('global:imagerepo') %}
|
||||||
{% set MANAGER = salt['grains.get']('master') %}
|
{% set MANAGER = salt['grains.get']('master') %}
|
||||||
{% set FEATURES = salt['pillar.get']('elastic:features', False) %}
|
|
||||||
{% set NODEIP = salt['pillar.get']('elasticsearch:mainip', '') -%}
|
{% set NODEIP = salt['pillar.get']('elasticsearch:mainip', '') -%}
|
||||||
{% set TRUECLUSTER = salt['pillar.get']('elasticsearch:true_cluster', False) %}
|
{% set TRUECLUSTER = salt['pillar.get']('elasticsearch:true_cluster', False) %}
|
||||||
{% set MANAGERIP = salt['pillar.get']('global:managerip') %}
|
{% set MANAGERIP = salt['pillar.get']('global:managerip') %}
|
||||||
|
|
||||||
{% if FEATURES is sameas true %}
|
|
||||||
{% set FEATUREZ = "-features" %}
|
|
||||||
{% else %}
|
|
||||||
{% set FEATUREZ = '' %}
|
|
||||||
{% endif %}
|
|
||||||
|
|
||||||
{% if grains['role'] in ['so-eval','so-managersearch', 'so-manager', 'so-standalone', 'so-import'] %}
|
{% if grains['role'] in ['so-eval','so-managersearch', 'so-manager', 'so-standalone', 'so-import'] %}
|
||||||
{% set esclustername = salt['pillar.get']('manager:esclustername') %}
|
{% set esclustername = salt['pillar.get']('manager:esclustername') %}
|
||||||
{% set esheap = salt['pillar.get']('manager:esheap') %}
|
{% set esheap = salt['pillar.get']('manager:esheap') %}
|
||||||
@@ -186,7 +179,7 @@ eslogdir:
|
|||||||
|
|
||||||
so-elasticsearch:
|
so-elasticsearch:
|
||||||
docker_container.running:
|
docker_container.running:
|
||||||
- image: {{ MANAGER }}:5000/{{ IMAGEREPO }}/so-elasticsearch:{{ VERSION }}{{ FEATUREZ }}
|
- image: {{ MANAGER }}:5000/{{ IMAGEREPO }}/so-elasticsearch:{{ VERSION }}
|
||||||
- hostname: elasticsearch
|
- hostname: elasticsearch
|
||||||
- name: so-elasticsearch
|
- name: so-elasticsearch
|
||||||
- user: elasticsearch
|
- user: elasticsearch
|
||||||
|
|||||||
@@ -21,12 +21,7 @@
|
|||||||
{% set LOCALHOSTIP = salt['grains.get']('ip_interfaces').get(MAININT)[0] %}
|
{% set LOCALHOSTIP = salt['grains.get']('ip_interfaces').get(MAININT)[0] %}
|
||||||
{% set MANAGER = salt['grains.get']('master') %}
|
{% set MANAGER = salt['grains.get']('master') %}
|
||||||
{% set MANAGERIP = salt['pillar.get']('global:managerip', '') %}
|
{% set MANAGERIP = salt['pillar.get']('global:managerip', '') %}
|
||||||
{% set FEATURES = salt['pillar.get']('elastic:features', False) %}
|
|
||||||
{%- if FEATURES is sameas true %}
|
|
||||||
{% set FEATURES = "-features" %}
|
|
||||||
{% else %}
|
|
||||||
{% set FEATURES = '' %}
|
|
||||||
{% endif %}
|
|
||||||
filebeatetcdir:
|
filebeatetcdir:
|
||||||
file.directory:
|
file.directory:
|
||||||
- name: /opt/so/conf/filebeat/etc
|
- name: /opt/so/conf/filebeat/etc
|
||||||
@@ -64,7 +59,7 @@ filebeatconfsync:
|
|||||||
OUTPUT: {{ salt['pillar.get']('filebeat:config:output', {}) }}
|
OUTPUT: {{ salt['pillar.get']('filebeat:config:output', {}) }}
|
||||||
so-filebeat:
|
so-filebeat:
|
||||||
docker_container.running:
|
docker_container.running:
|
||||||
- image: {{ MANAGER }}:5000/{{ IMAGEREPO }}/so-filebeat:{{ VERSION }}{{ FEATURES }}
|
- image: {{ MANAGER }}:5000/{{ IMAGEREPO }}/so-filebeat:{{ VERSION }}
|
||||||
- hostname: so-filebeat
|
- hostname: so-filebeat
|
||||||
- user: root
|
- user: root
|
||||||
- extra_hosts: {{ MANAGER }}:{{ MANAGERIP }},{{ LOCALHOSTNAME }}:{{ LOCALHOSTIP }}
|
- extra_hosts: {{ MANAGER }}:{{ MANAGERIP }},{{ LOCALHOSTNAME }}:{{ LOCALHOSTIP }}
|
||||||
|
|||||||
@@ -4,12 +4,6 @@
|
|||||||
{% set VERSION = salt['pillar.get']('global:soversion', 'HH1.2.2') %}
|
{% set VERSION = salt['pillar.get']('global:soversion', 'HH1.2.2') %}
|
||||||
{% set IMAGEREPO = salt['pillar.get']('global:imagerepo') %}
|
{% set IMAGEREPO = salt['pillar.get']('global:imagerepo') %}
|
||||||
{% set MANAGER = salt['grains.get']('master') %}
|
{% set MANAGER = salt['grains.get']('master') %}
|
||||||
{% set FEATURES = salt['pillar.get']('elastic:features', False) %}
|
|
||||||
{%- if FEATURES is sameas true %}
|
|
||||||
{% set FEATURES = "-features" %}
|
|
||||||
{% else %}
|
|
||||||
{% set FEATURES = '' %}
|
|
||||||
{% endif %}
|
|
||||||
|
|
||||||
# Add ES Group
|
# Add ES Group
|
||||||
kibanasearchgroup:
|
kibanasearchgroup:
|
||||||
@@ -73,7 +67,7 @@ kibanabin:
|
|||||||
# Start the kibana docker
|
# Start the kibana docker
|
||||||
so-kibana:
|
so-kibana:
|
||||||
docker_container.running:
|
docker_container.running:
|
||||||
- image: {{ MANAGER }}:5000/{{ IMAGEREPO }}/so-kibana:{{ VERSION }}{{ FEATURES }}
|
- image: {{ MANAGER }}:5000/{{ IMAGEREPO }}/so-kibana:{{ VERSION }}
|
||||||
- hostname: kibana
|
- hostname: kibana
|
||||||
- user: kibana
|
- user: kibana
|
||||||
- environment:
|
- environment:
|
||||||
|
|||||||
@@ -19,13 +19,6 @@
|
|||||||
{% set IMAGEREPO = salt['pillar.get']('global:imagerepo') %}
|
{% set IMAGEREPO = salt['pillar.get']('global:imagerepo') %}
|
||||||
{% set MANAGER = salt['grains.get']('master') %}
|
{% set MANAGER = salt['grains.get']('master') %}
|
||||||
{% set MANAGERIP = salt['pillar.get']('global:managerip') %}
|
{% set MANAGERIP = salt['pillar.get']('global:managerip') %}
|
||||||
{% set FEATURES = salt['pillar.get']('elastic:features', False) %}
|
|
||||||
|
|
||||||
{%- if FEATURES is sameas true %}
|
|
||||||
{% set FEATURES = "-features" %}
|
|
||||||
{% else %}
|
|
||||||
{% set FEATURES = '' %}
|
|
||||||
{% endif %}
|
|
||||||
|
|
||||||
# Logstash Section - Decide which pillar to use
|
# Logstash Section - Decide which pillar to use
|
||||||
{% set lsheap = salt['pillar.get']('logstash_settings:lsheap', '') %}
|
{% set lsheap = salt['pillar.get']('logstash_settings:lsheap', '') %}
|
||||||
@@ -146,7 +139,7 @@ lslogdir:
|
|||||||
|
|
||||||
so-logstash:
|
so-logstash:
|
||||||
docker_container.running:
|
docker_container.running:
|
||||||
- image: {{ MANAGER }}:5000/{{ IMAGEREPO }}/so-logstash:{{ VERSION }}{{ FEATURES }}
|
- image: {{ MANAGER }}:5000/{{ IMAGEREPO }}/so-logstash:{{ VERSION }}
|
||||||
- hostname: so-logstash
|
- hostname: so-logstash
|
||||||
- name: so-logstash
|
- name: so-logstash
|
||||||
- user: logstash
|
- user: logstash
|
||||||
|
|||||||
Reference in New Issue
Block a user