mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 09:12:45 +01:00
add path.repo mount if symlink exists
This commit is contained in:
@@ -24,7 +24,7 @@ include:
|
|||||||
{% set NODEIP = salt['pillar.get']('elasticsearch:mainip', '') -%}
|
{% set NODEIP = salt['pillar.get']('elasticsearch:mainip', '') -%}
|
||||||
{% set TRUECLUSTER = salt['pillar.get']('elasticsearch:true_cluster', False) %}
|
{% set TRUECLUSTER = salt['pillar.get']('elasticsearch:true_cluster', False) %}
|
||||||
{% set MANAGERIP = salt['pillar.get']('global:managerip') %}
|
{% set MANAGERIP = salt['pillar.get']('global:managerip') %}
|
||||||
{% set ESMOUNT = salt['pillar.get']('elasticsearch:extramount', False) %}
|
{% set ES_PATH_REPO = salt['pillar.get']('elasticsearch:config:path:repo', False) %}
|
||||||
|
|
||||||
{% if grains['role'] in ['so-eval','so-managersearch', 'so-manager', 'so-standalone', 'so-import'] %}
|
{% if grains['role'] in ['so-eval','so-managersearch', 'so-manager', 'so-standalone', 'so-import'] %}
|
||||||
{% set esclustername = salt['pillar.get']('manager:esclustername') %}
|
{% set esclustername = salt['pillar.get']('manager:esclustername') %}
|
||||||
@@ -235,6 +235,14 @@ eslogdir:
|
|||||||
- group: 939
|
- group: 939
|
||||||
- makedirs: True
|
- makedirs: True
|
||||||
|
|
||||||
|
es_repos_dir:
|
||||||
|
file.directory:
|
||||||
|
- name: /nsm/elasticsearch/repos/
|
||||||
|
- user: 930
|
||||||
|
- group: 939
|
||||||
|
- require:
|
||||||
|
- file: nsmesdir
|
||||||
|
|
||||||
auth_users:
|
auth_users:
|
||||||
file.managed:
|
file.managed:
|
||||||
- name: /opt/so/conf/elasticsearch/users.tmp
|
- name: /opt/so/conf/elasticsearch/users.tmp
|
||||||
@@ -317,8 +325,13 @@ so-elasticsearch:
|
|||||||
- /opt/so/conf/elasticsearch/users_roles:/usr/share/elasticsearch/config/users_roles:ro
|
- /opt/so/conf/elasticsearch/users_roles:/usr/share/elasticsearch/config/users_roles:ro
|
||||||
- /opt/so/conf/elasticsearch/users:/usr/share/elasticsearch/config/users:ro
|
- /opt/so/conf/elasticsearch/users:/usr/share/elasticsearch/config/users:ro
|
||||||
{% endif %}
|
{% endif %}
|
||||||
{% if ESMOUNT %}
|
{% if ES_PATH_REPO %}
|
||||||
- {{ ESMOUNT }}:/snapshots:rw
|
{% for repo in ES_PATH_REPO %}
|
||||||
|
# /nsm/elasticsearch/repos{{ repo }} must exist as a symlink for the bind to be created
|
||||||
|
{% if salt['cmd.retcode']("[[ ! test -L /nsm/elasticsearch/repos{{ repo }} ]]") %}
|
||||||
|
- /nsm/elasticsearch/repos{{ repo }}:{{ repo }}:rw
|
||||||
|
{% endif %}
|
||||||
|
{% endfor %}
|
||||||
{% endif %}
|
{% endif %}
|
||||||
- watch:
|
- watch:
|
||||||
- file: cacertz
|
- file: cacertz
|
||||||
|
|||||||
Reference in New Issue
Block a user