mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
begin pillarization of kibana
This commit is contained in:
9
salt/kibana/config.map.jinja
Normal file
9
salt/kibana/config.map.jinja
Normal file
@@ -0,0 +1,9 @@
|
|||||||
|
{% import_yaml 'kibana/defaults.yaml' as KIBANACONFIG with context %}
|
||||||
|
|
||||||
|
{% if salt['pillar.get']('elasticsearch:auth:enabled', False) %}
|
||||||
|
{% do KIBANACONFIG.kibana.config.update({'elasticsearch': {'username': salt['pillar.get']('elasticsearch:auth:users:so_elastic_user:user'), 'password': salt['pillar.get']('elasticsearch:auth:users:so_elastic_user:pass')}}) %}
|
||||||
|
{% else %}
|
||||||
|
{% do KIBANACONFIG.kibana.config.update({'xpack': {'security': {'authc': {'providers': {'anonymous': {'anonymous1': {'order': 0, 'credentials': 'elasticsearch_anonymous_user'}}}}}}}) %}
|
||||||
|
{% endif %}
|
||||||
|
|
||||||
|
{% set KIBANACONFIG = salt['pillar.get']('kibana:config', default=KIBANACONFIG.kibana.config, merge=True) %}
|
||||||
@@ -3,3 +3,31 @@ kibana:
|
|||||||
dashboard:
|
dashboard:
|
||||||
discover:
|
discover:
|
||||||
sampleSize: 100
|
sampleSize: 100
|
||||||
|
config:
|
||||||
|
server:
|
||||||
|
name: kibana
|
||||||
|
host: 0
|
||||||
|
basePath: /kibana
|
||||||
|
publicBaseUrl: https://{{salt['pillar.get']('global:url_base')}}/kibana
|
||||||
|
elasticsearch:
|
||||||
|
hosts:
|
||||||
|
- https://{{salt['pillar.get']('manager:mainip')}}:9200
|
||||||
|
ssl:
|
||||||
|
verificationMode: none
|
||||||
|
requestTimeout: 90000
|
||||||
|
logging:
|
||||||
|
appenders:
|
||||||
|
file:
|
||||||
|
type: file
|
||||||
|
fileName: /var/log/kibana.log
|
||||||
|
layout:
|
||||||
|
type: pattern
|
||||||
|
root:
|
||||||
|
appenders:
|
||||||
|
- default
|
||||||
|
- file
|
||||||
|
telemetry:
|
||||||
|
enabled: False
|
||||||
|
security:
|
||||||
|
showInsecureClusterWarning: False
|
||||||
|
|
||||||
1
salt/kibana/etc/kibana.yml.jinja
Normal file
1
salt/kibana/etc/kibana.yml.jinja
Normal file
@@ -0,0 +1 @@
|
|||||||
|
{{ KIBANACONFIG | yaml(False) }}
|
||||||
@@ -34,8 +34,8 @@ kibanaconfdir:
|
|||||||
|
|
||||||
synckibanaconfig:
|
synckibanaconfig:
|
||||||
file.recurse:
|
file.recurse:
|
||||||
- name: /opt/so/conf/kibana/etc
|
- name: /opt/so/conf/kibana/etc/kibana.yml
|
||||||
- source: salt://kibana/etc
|
- source: salt://kibana/etc/kibana.yml.jinja
|
||||||
- user: 932
|
- user: 932
|
||||||
- group: 939
|
- group: 939
|
||||||
- file_mode: 660
|
- file_mode: 660
|
||||||
@@ -104,9 +104,9 @@ kibanadashtemplate:
|
|||||||
- defaults:
|
- defaults:
|
||||||
DASHBOARD: {{ KIBANA_SETTINGS.dashboard }}
|
DASHBOARD: {{ KIBANA_SETTINGS.dashboard }}
|
||||||
|
|
||||||
so-kibana-config-load:
|
so-kibana-dashboard-load:
|
||||||
cmd.run:
|
cmd.run:
|
||||||
- name: /usr/sbin/so-kibana-config-load
|
- name: /usr/sbin/so-kibana-dashboard-load
|
||||||
- cwd: /opt/so
|
- cwd: /opt/so
|
||||||
|
|
||||||
# Keep the setting correct
|
# Keep the setting correct
|
||||||
|
|||||||
Reference in New Issue
Block a user