CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-07 09:42:46 +01:00
Code Issues Packages Projects Releases Wiki Activity

reduce defaults.yaml

Browse Source
This commit is contained in:
m0duspwnens
2021-09-16 15:32:08 -04:00
parent 889d235c45
commit 5526a2bc3a
2 changed files with 38 additions and 1086 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
salt/elasticsearch/config.map.jinja
View File

@@ -1,30 +1,30 @@
# soup needs
# elasticsearch:esclustername pillar move to elasticsearch:cluster_settings:cluster:name
# move elasticsearch:true_cluster_name to elasticsearch:cluster_settings:cluster:name if true_cluster enabled
# elasticsearch:esclustername pillar move to elasticsearch:config:cluster:name
# move elasticsearch:true_cluster_name to elasticsearch:config:cluster:name if true_cluster enabled
# elasticsearch:node_route_type moved
{% import_yaml 'elasticsearch/defaults.yaml' as ESCONFIG with context %}
{% if not salt['pillar.get']('elasticsearch:auth:enabled', False) %}
{% do ESCONFIG.elasticsearch.cluster_settings.xpack.security.authc.anonymous.update({'username': 'anonymous_user', 'roles': 'superuser', 'authz_exception': 'true'}) %}
{% do ESCONFIG.elasticsearch.config.xpack.security.authc.anonymous.update({'username': 'anonymous_user', 'roles': 'superuser', 'authz_exception': 'true'}) %}
{% endif %}
{% if salt['pillar.get']('elasticsearch:true_cluster', False) %}
{% do ESCONFIG.elasticsearch.cluster_settings.cluster.update({'name': salt['pillar.get']('elasticsearch:true_cluster_name')}) %} {# this is temporary #}
{% do ESCONFIG.elasticsearch.config.cluster.update({'name': salt['pillar.get']('elasticsearch:true_cluster_name')}) %} {# this is temporary #}
{% if grains.id.split('_') | last in ['manager','managersearch'] %}
{% if salt['pillar.get']('nodestab', {}) %}
{% do ESCONFIG.elasticsearch.cluster_settings.node.update({'roles': ['master', 'data', 'remote_cluster_client']}) %}
{% do ESCONFIG.elasticsearch.cluster_settings.discovery.update({'seed_hosts': [grains.master]}) %}
{% do ESCONFIG.elasticsearch.config.node.update({'roles': ['master', 'data', 'remote_cluster_client']}) %}
{% do ESCONFIG.elasticsearch.config.discovery.update({'seed_hosts': [grains.master]}) %}
{% for SN, SNDATA in salt['pillar.get']('nodestab', {}).items() %}
{% do ESCONFIG.elasticsearch.cluster_settings.discovery.seed_hosts.append(SN.split('_')|first) %}
{% do ESCONFIG.elasticsearch.config.discovery.seed_hosts.append(SN.split('_')|first) %}
{% endfor %}
{% endif %}
{% if grains.id.split('_') | last == 'manager' %}
{% do ESCONFIG.elasticsearch.cluster_settings.node.attr.update({'box_type': ''}) %}
{% do ESCONFIG.elasticsearch.config.node.attr.update({'box_type': ''}) %}
{% endif %}
{% else %}
{% do ESCONFIG.elasticsearch.cluster_settings.node.update({'roles': ['data', 'ingest']}) %}
{% do ESCONFIG.elasticsearch.cluster_settings.node.attr.update({'box_type': 'hot'}) %}
{% do ESCONFIG.elasticsearch.cluster_settings.discovery.update({'seed_hosts': [grains.master]}) %}
{% do ESCONFIG.elasticsearch.config.node.update({'roles': ['data', 'ingest']}) %}
{% do ESCONFIG.elasticsearch.config.node.attr.update({'box_type': 'hot'}) %}
{% do ESCONFIG.elasticsearch.config.discovery.update({'seed_hosts': [grains.master]}) %}
{% endif %}
{% endif %}

1102
salt/elasticsearch/defaults.yaml
View File

File diff suppressed because it is too large Load Diff