mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-08 10:12:53 +01:00
Start using so-elastic-agent container
This commit is contained in:
@@ -10,15 +10,39 @@
|
|||||||
{% set FLEETSERVERPOLICY = salt['pillar.get']('elasticfleet:server:server_policy','so-manager') %}
|
{% set FLEETSERVERPOLICY = salt['pillar.get']('elasticfleet:server:server_policy','so-manager') %}
|
||||||
{% set FLEETURL = salt['pillar.get']('elasticfleet:server:url') %}
|
{% set FLEETURL = salt['pillar.get']('elasticfleet:server:url') %}
|
||||||
|
|
||||||
elasticfleetdir:
|
# Add EA Group
|
||||||
|
elasticsagentgroup:
|
||||||
|
group.present:
|
||||||
|
- name: elastic-agent
|
||||||
|
- gid: 947
|
||||||
|
|
||||||
|
# Add EA user
|
||||||
|
elastic-agent:
|
||||||
|
user.present:
|
||||||
|
- uid: 947
|
||||||
|
- gid: 947
|
||||||
|
- home: /opt/so/conf/elastic-fleet
|
||||||
|
- createhome: False
|
||||||
|
|
||||||
|
eaconfdir:
|
||||||
|
file.directory:
|
||||||
|
- name: /opt/so/conf/elastic-fleet
|
||||||
|
- user: 947
|
||||||
|
- group: 939
|
||||||
|
- makedirs: True
|
||||||
|
|
||||||
|
eastatedir:
|
||||||
file.directory:
|
file.directory:
|
||||||
- name: /opt/so/conf/elastic-fleet/state
|
- name: /opt/so/conf/elastic-fleet/state
|
||||||
|
- user: 947
|
||||||
|
- group: 939
|
||||||
- makedirs: True
|
- makedirs: True
|
||||||
|
|
||||||
|
|
||||||
{% if SERVICETOKEN != '' %}
|
{% if SERVICETOKEN != '' %}
|
||||||
so-elastic-fleet:
|
so-elastic-fleet:
|
||||||
docker_container.running:
|
docker_container.running:
|
||||||
- image: docker.elastic.co/beats/elastic-agent:8.4.1
|
- image: {{ GLOBALS.registry_host }}:5000/{{ GLOBALS.image_repo }}/so-elastic-agent:{{ GLOBALS.so_version }}
|
||||||
- name: so-elastic-fleet
|
- name: so-elastic-fleet
|
||||||
- hostname: Fleet-{{ GLOBALS.hostname }}
|
- hostname: Fleet-{{ GLOBALS.hostname }}
|
||||||
- detach: True
|
- detach: True
|
||||||
|
|||||||
@@ -210,7 +210,7 @@ chownilogstashelasticfleetp8:
|
|||||||
- replace: False
|
- replace: False
|
||||||
- name: /etc/pki/elasticfleet.p8
|
- name: /etc/pki/elasticfleet.p8
|
||||||
- mode: 640
|
- mode: 640
|
||||||
- user: 931
|
- user: 947
|
||||||
- group: 939
|
- group: 939
|
||||||
|
|
||||||
# Create Symlinks to the keys so I can distribute it to all the things
|
# Create Symlinks to the keys so I can distribute it to all the things
|
||||||
|
|||||||
Reference in New Issue
Block a user