From 6fb0c5dbfe5800c59a078a7aed80b0be1a8ed1c8 Mon Sep 17 00:00:00 2001
From: Mike Reeves <mike.reeves@securityonionsolutions.com>
Date: Wed, 25 Oct 2023 15:37:36 -0400
Subject: [PATCH] Annotation changes for warm node

---
 salt/elasticsearch/soc_elasticsearch.yaml | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/salt/elasticsearch/soc_elasticsearch.yaml b/salt/elasticsearch/soc_elasticsearch.yaml
index f04ba08e0..764de3c44 100644
--- a/salt/elasticsearch/soc_elasticsearch.yaml
+++ b/salt/elasticsearch/soc_elasticsearch.yaml
@@ -477,3 +477,18 @@ elasticsearch:
     so-strelka: *indexSettings
     so-syslog: *indexSettings
     so-zeek: *indexSettings
+  so_roles:
+    so-maanger: &soroleSettings
+      node:
+        roles:
+          description: List of Elasticsearch roles that the node should have. Blank assumes all roles
+          forcedType: "[]string"
+          global: False
+          advanced: True
+          helpLink: elasticsearch.html
+    so-managersearch: *soroleSettings
+    so-standalone: *soroleSettings
+    so-searchnode: *soroleSettings
+    so-heavynode: *soroleSettings
+    so-eval: *soroleSettings
+    so-import: *soroleSettings
\ No newline at end of file