diff --git a/salt/curator/files/curator.yml b/salt/curator/files/curator.yml index 76888c94f..549310d73 100644 --- a/salt/curator/files/curator.yml +++ b/salt/curator/files/curator.yml @@ -15,20 +15,25 @@ --- # Remember, leave a key empty if there is no value. None will be a string, # not a Python "NoneType" -client: - hosts: - - {{elasticsearch}} - port: 9200 - username: "{{ ES_USER }}" - password: "{{ ES_PASS }}" - url_prefix: - use_ssl: True - certificate: - client_cert: - client_key: - ssl_no_validate: True - timeout: 30 - master_only: False +elasticsearch: + client: + hosts: + - https://{{elasticsearch}}:9200 + cloud_id: + ca_certs: + client_cert: + client_key: + verify_certs: False + request_timeout: 30 + other_settings: + api_key: + id: + api_key: + master_only: False +{%- if salt['pillar.get']('elasticsearch:auth:enabled') is sameas true %} + username: "{{ ES_USER }}" + password: "{{ ES_PASS }}" +{%- endif %} logging: loglevel: INFO diff --git a/salt/curator/init.sls b/salt/curator/init.sls index e62304bce..a06696b0f 100644 --- a/salt/curator/init.sls +++ b/salt/curator/init.sls @@ -142,6 +142,8 @@ so-curator: - file: actionconfs - file: curconf - file: curlogdir + - watch: + - file: curconf so-curatorclusterclose: cron.present: diff --git a/setup/so-functions b/setup/so-functions index 74913c32f..ede539a6c 100755 --- a/setup/so-functions +++ b/setup/so-functions @@ -1986,9 +1986,9 @@ repo_sync_local() { dnf repolist # Make sure we can get to the sig repo logCmd "curl --retry 5 --retry-delay 60 -A 'gridinstall/$SOVERSION/$OS/$(uname -r)/1' https://sigs.securityonion.net/checkup --output /tmp/checkup" - logCmd "dnf reposync --norepopath -n -g --delete -m -c /root/repodownload.conf --repoid=securityonionsync --download-metadata -p /nsm/repo/" + logCmd "dnf reposync --norepopath -g --delete -m -c /root/repodownload.conf --repoid=securityonionsync --download-metadata -p /nsm/repo/" # Run it again and make sure we got allt he things - logCmd "dnf reposync --norepopath -n -g --delete -m -c /root/repodownload.conf --repoid=securityonionsync --download-metadata -p /nsm/repo/" + logCmd "dnf reposync --norepopath -g --delete -m -c /root/repodownload.conf --repoid=securityonionsync --download-metadata -p /nsm/repo/" # After the download is complete run createrepo create_repo