From bfaffbc87e2b7b1ab7d52612178c0d632679d9c0 Mon Sep 17 00:00:00 2001
From: m0duspwnens <josh.patterson@securityonionsolutions.com>
Date: Tue, 1 Jun 2021 11:15:28 -0400
Subject: [PATCH] add reactor and beacon for sqlite db

---
 files/salt/master/master        | 2 ++
 salt/manager/files/beacons.conf | 5 +++++
 salt/manager/init.sls           | 5 +++++
 salt/reactor/kratos.sls         | 5 +++++
 4 files changed, 17 insertions(+)
 create mode 100644 salt/manager/files/beacons.conf
 create mode 100644 salt/reactor/kratos.sls

diff --git a/files/salt/master/master b/files/salt/master/master
index 93e8ff938..675556d14 100644
--- a/files/salt/master/master
+++ b/files/salt/master/master
@@ -67,3 +67,5 @@ peer:
 reactor:
   - 'so/fleet':
     - salt://reactor/fleet.sls
+  - salt/beacon/*/inotify//watch_sqlite.db:
+    - salt://reactor/kratos.sls
diff --git a/salt/manager/files/beacons.conf b/salt/manager/files/beacons.conf
new file mode 100644
index 000000000..b1cca51ba
--- /dev/null
+++ b/salt/manager/files/beacons.conf
@@ -0,0 +1,5 @@
+beacons:
+  watch_sqlite.db:
+    - files:
+        /opt/so/conf/kratos/db/sqlite.db: {}
+    - beacon_module: inotify
diff --git a/salt/manager/init.sls b/salt/manager/init.sls
index 7ef489496..10466d019 100644
--- a/salt/manager/init.sls
+++ b/salt/manager/init.sls
@@ -121,6 +121,11 @@ syncesusers:
       - /opt/so/saltstack/local/salt/elasticsearch/files/users
       - /opt/so/saltstack/local/salt/elasticsearch/files/users_roles
 
+beacons_config:
+  file.managed:
+    - name: /etc/salt/minion.d/beacons.conf
+    - source: salt://manager/files/beacons.conf
+
 {% else %}
 
 {{sls}}_state_not_allowed:
diff --git a/salt/reactor/kratos.sls b/salt/reactor/kratos.sls
new file mode 100644
index 000000000..a465f134c
--- /dev/null
+++ b/salt/reactor/kratos.sls
@@ -0,0 +1,5 @@
+so_user_sync:
+  local.cmd.run:
+    - tgt: {{ data['data']['id'] }}
+    - arg:
+      - so-user sync