CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Generate kafka keystore on changes to kafka.key

Browse Source 
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
This commit is contained in:
reyesj2
2024-04-04 16:16:53 -04:00
parent 13105c4ab3
commit 40b08d737c
2 changed files with 16 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
salt/kafka/config.sls
View File

@@ -80,10 +80,19 @@ kafka_data_dir:
- group: 960 - group: 960
- makedirs: True - makedirs: True
kafka_keystore_script: kafka_generate_keystore:
cmd.run: cmd.run:
- name: /usr/sbin/so-kafka-generate-keystore - name: "/usr/sbin/so-kafka-generate-keystore"
- cwd: /opt/so - onchanges:
- x509: /etc/pki/kafka.key
kafka_keystore_perms:
file.managed:
- replace: False
- name: /etc/pki/kafka.jks
- mode: 640
- user: 960
- group: 939
kafka_kraft_server_properties: kafka_kraft_server_properties:
file.managed: file.managed:

11
salt/kafka/tools/sbin_jinja/so-kafka-generate-keystore
View File

@@ -7,10 +7,7 @@
. /usr/sbin/so-common . /usr/sbin/so-common
if [ ! -f /etc/pki/kafka.jks ]; then # Generate a new keystore
docker run -v /etc/pki/kafka.p12:/etc/pki/kafka.p12 --name so-kafka-keystore --user root --entrypoint keytool {{ GLOBALS.registry_host }}:5000/{{ GLOBALS.image_repo }}/so-kafka:{{ GLOBALS.so_version }} -importkeystore -srckeystore /etc/pki/kafka.p12 -srcstoretype PKCS12 -srcstorepass changeit -destkeystore /etc/pki/kafka.jks -deststoretype JKS -deststorepass changeit -noprompt docker run -v /etc/pki/kafka.p12:/etc/pki/kafka.p12 --name so-kafka-keystore --user root --entrypoint keytool {{ GLOBALS.registry_host }}:5000/{{ GLOBALS.image_repo }}/so-kafka:{{ GLOBALS.so_version }} -importkeystore -srckeystore /etc/pki/kafka.p12 -srcstoretype PKCS12 -srcstorepass changeit -destkeystore /etc/pki/kafka.jks -deststoretype JKS -deststorepass changeit -noprompt
docker cp so-kafka-keystore:/etc/pki/kafka.jks /etc/pki/kafka.jks docker cp so-kafka-keystore:/etc/pki/kafka.jks /etc/pki/kafka.jks
docker rm so-kafka-keystore docker rm so-kafka-keystore
else
exit 0
fi