From 5b74a55c3ce574f373a7bd389e80880544ddc838 Mon Sep 17 00:00:00 2001
From: Jason Ertel <jason.ertel@securityonionsolutions.com>
Date: Mon, 11 Nov 2024 17:21:42 -0500
Subject: [PATCH] ensure roles file exists since no longer syncing clients to
 es

---
 salt/soc/config.sls | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/salt/soc/config.sls b/salt/soc/config.sls
index 129d669d3..4134d8b77 100644
--- a/salt/soc/config.sls
+++ b/salt/soc/config.sls
@@ -177,10 +177,13 @@ socusersroles:
       - sls: manager.sync_es_users
 
 socclientsroles:
-  file.exists:
+  file.managed:
     - name: /opt/so/conf/soc/soc_clients_roles
-    - require:
-      - sls: manager.sync_es_users
+    - user: 939
+    - group: 939
+    - mode: 600
+    - allow_empty: true
+    - create: true
 
 socuploaddir:
   file.directory: