CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Change optional integration Fleet configuration

Browse Source
This commit is contained in:
Wes
2023-11-01 13:52:38 +00:00
parent 9701d0ac20
commit 44e45843bf
1 changed files with 11 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
salt/elasticfleet/config.sls
View File

@@ -93,6 +93,13 @@ eaintegration:
- user: 947 - user: 947
- group: 939 - group: 939
eaoptionalintegrationsdir:
file.directory:
- name: /opt/so/conf/elastic-fleet/integrations-optional
- user: 947
- group: 939
- makedirs: True
{% for minion in node_data %} {% for minion in node_data %}
{% set role = node_data[minion]["role"] %} {% set role = node_data[minion]["role"] %}
{% if role in [ "fleet","heavynode", "manager","managersearch","standalone" ] %} {% if role in [ "fleet","heavynode", "manager","managersearch","standalone" ] %}
@@ -100,16 +107,16 @@ eaintegration:
{% set integration_keys = salt['pillar.get']('elasticfleet:optional_integrations', {}).keys() %} {% set integration_keys = salt['pillar.get']('elasticfleet:optional_integrations', {}).keys() %}
fleet_server_integrations_{{ minion }}: fleet_server_integrations_{{ minion }}:
file.directory: file.directory:
- name: /opt/so/conf/elastic-fleet/integrations/FleetServer_{{ minion }} - name: /opt/so/conf/elastic-fleet/integrations-optional/FleetServer_{{ minion }}
- user: 947 - user: 947
- group: 939 - group: 939
- makedirs: True - makedirs: True
{% for integration in integration_keys %} {% for integration in integration_keys %}
{% set enabled_nodes = optional_integrations[integration]["enabled_nodes"] %} {% set enabled_nodes = optional_integrations[integration]["enabled_nodes"] %}
{% if minion in enabled_nodes %} {% if minion in enabled_nodes %}
optional_integrations_dynamic_{{ minion }}: optional_integrations_dynamic_{{ minion }}_{{ integration }}:
file.managed: file.managed:
- name: /opt/so/conf/elastic-fleet/integrations/FleetServer_{{ minion }}/{{ integration }}.json - name: /opt/so/conf/elastic-fleet/integrations-optional/FleetServer_{{ minion }}/{{ integration }}.json
- source: salt://elasticfleet/files/integrations-optional/{{ integration }}.json - source: salt://elasticfleet/files/integrations-optional/{{ integration }}.json
- user: 947 - user: 947
- group: 939 - group: 939
@@ -120,17 +127,13 @@ optional_integrations_dynamic_{{ minion }}:
{% endfor %} {% endfor %}
{% endif %} {% endif %}
{% endfor %} {% endfor %}
ea-integrations-load: ea-integrations-load:
file.absent: file.absent:
- name: /opt/so/state/eaintegrations.txt - name: /opt/so/state/eaintegrations.txt
- onchanges: - onchanges:
- file: eaintegration - file: eaintegration
- file: eadynamicintegration - file: eadynamicintegration
- file: eapackageupgrade - file: /opt/so/conf/elastic-fleet/integrations-optional/*
{% for minion in node_data %}
- file: optional_integrations_dynamic_{{ minion }}
{% endfor %}
{% endif %} {% endif %}
{% else %} {% else %}