seperate manager states for strelka

This commit is contained in:
m0duspwnens
2024-05-09 10:03:02 -04:00
parent 656bf60fda
commit 3a99624eb8
2 changed files with 8 additions and 32 deletions

View File

@@ -43,7 +43,7 @@ strelka_backend:
{% endif %} {% endif %}
- restart_policy: on-failure - restart_policy: on-failure
- watch: - watch:
- file: strelkasensorrules - file: strelkasensorcompiledrules
delete_so-strelka-backend_so-status.disabled: delete_so-strelka-backend_so-status.disabled:
file.uncomment: file.uncomment:

View File

@@ -5,45 +5,21 @@
{% from 'allowed_states.map.jinja' import allowed_states %} {% from 'allowed_states.map.jinja' import allowed_states %}
{% if sls.split('.')[0] in allowed_states %} {% if sls.split('.')[0] in allowed_states %}
{% from 'vars/globals.map.jinja' import GLOBALS %}
{% if GLOBALS.is_manager %}
include:
- strelka.manager
{% endif %}
# Strelka config # Strelka config
strelkaconfdir: strelkasensorcompiledrules:
file.directory:
- name: /opt/so/conf/strelka/rules/compiled/
- user: 939
- group: 939
- makedirs: True
strelkacompileyara:
file.managed:
- name: /opt/so/conf/strelka/compile_yara.py
- source: salt://strelka/compile_yara/compile_yara.py
- user: 939
- group: 939
- makedirs: True
strelkarulesdir:
file.directory:
- name: /opt/so/conf/strelka/rules
- user: 939
- group: 939
- makedirs: True
{%- if grains.role in ['so-sensor', 'so-heavynode'] %}
strelkasensorrules:
file.recurse: file.recurse:
- name: /opt/so/conf/strelka/rules/compiled/ - name: /opt/so/conf/strelka/rules/compiled/
- source: salt://strelka/rules/compiled/ - source: salt://strelka/rules/compiled/
- user: 939 - user: 939
- group: 939 - group: 939
- clean: True - clean: True
{%- endif %}
strelkareposdir:
file.directory:
- name: /opt/so/conf/strelka/repos
- user: 939
- group: 939
- makedirs: True - makedirs: True
strelkadatadir: strelkadatadir: