CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-21 00:13:06 +01:00
Code Issues Packages Projects Releases Wiki Activity

need to restart docker service if ca changes

Browse Source
This commit is contained in:
Josh Patterson
2025-12-12 18:50:22 -05:00
parent 38f38e2789
commit ba62a8c10c
2 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
salt/ca/trustca.sls
View File

@@ -5,6 +5,9 @@
{% from 'vars/globals.map.jinja' import GLOBALS %} {% from 'vars/globals.map.jinja' import GLOBALS %}
include:
- docker
cacertdir: cacertdir:
file.directory: file.directory:
- name: /etc/pki/tls/certs - name: /etc/pki/tls/certs
@@ -15,6 +18,8 @@ trusttheca:
file.managed: file.managed:
- name: /etc/pki/tls/certs/intca.crt - name: /etc/pki/tls/certs/intca.crt
- source: salt://ca/files/ca.crt - source: salt://ca/files/ca.crt
- listen_in:
- service: docker_running
{% if GLOBALS.os_family == 'Debian' %} {% if GLOBALS.os_family == 'Debian' %}
symlinkca: symlinkca:

1
salt/docker/init.sls
View File

@@ -89,7 +89,6 @@ docker_running:
- enable: True - enable: True
- watch: - watch:
- file: docker_daemon - file: docker_daemon
- file: trusttheca
- require: - require:
- file: docker_daemon - file: docker_daemon
- file: trusttheca - file: trusttheca