CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-08 18:22:47 +01:00
Code Issues Packages Projects Releases Wiki Activity

need /opt/so/conf/ca/cacerts on receiver for kafka to run

Browse Source
This commit is contained in:
m0duspwnens
2024-04-12 13:50:25 -04:00
parent fcfbb1e857
commit c014508519
3 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
salt/allowed_states.map.jinja
View File

@@ -191,7 +191,8 @@
'firewall', 'firewall',
'schedule', 'schedule',
'docker_clean', 'docker_clean',
'kafka' 'kafka',
'elasticsearch.ca'
], ],
'so-desktop': [ 'so-desktop': [
'ssl', 'ssl',

2
salt/elasticsearch/ca.sls
View File

@@ -4,7 +4,7 @@
# Elastic License 2.0. # Elastic License 2.0.
{% from 'allowed_states.map.jinja' import allowed_states %} {% from 'allowed_states.map.jinja' import allowed_states %}
{% if sls.split('.')[0] in allowed_states %} {% if sls.split('.')[0] in allowed_states or sls in allowed_states %}
{% from 'vars/globals.map.jinja' import GLOBALS %} {% from 'vars/globals.map.jinja' import GLOBALS %}
# Move our new CA over so Elastic and Logstash can use SSL with the internal CA # Move our new CA over so Elastic and Logstash can use SSL with the internal CA

1
salt/kafka/enabled.sls
View File

@@ -10,6 +10,7 @@
{% set KAFKANODES = salt['pillar.get']('kafka:nodes', {}) %} {% set KAFKANODES = salt['pillar.get']('kafka:nodes', {}) %}
include: include:
- elasticsearch.ca
- kafka.sostatus - kafka.sostatus
- kafka.config - kafka.config
- kafka.storage - kafka.storage