mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
additional changes for managerhype
This commit is contained in:
@@ -1,7 +1,7 @@
|
||||
{% set node_types = {} %}
|
||||
{% for minionid, ip in salt.saltutil.runner(
|
||||
'mine.get',
|
||||
tgt='G@role:so-hypervisor',
|
||||
tgt='G@role:so-hypervisor or G@role:so-managerhype',
|
||||
fun='network.ip_addrs',
|
||||
tgt_type='compound') | dictsort()
|
||||
%}
|
||||
|
||||
@@ -42,7 +42,7 @@ libvirt_python_module:
|
||||
- onchanges:
|
||||
- file: libvirt_python_wheel
|
||||
|
||||
{% if 'hyper' in grains.id.split('_') | last %}
|
||||
{% if 'hype' in grains.id.split('_') | last %}
|
||||
|
||||
# provides virsh
|
||||
install_libvirt-client:
|
||||
|
||||
@@ -21,7 +21,9 @@ qemu_ssh_client_config:
|
||||
- name: /root/.ssh/config
|
||||
- source: salt://libvirt/ssh/files/config
|
||||
|
||||
{% else %}
|
||||
{% endif %}
|
||||
|
||||
{% if GLOBALS.role in ['so-hypervisor', 'so-managerhype'] %}
|
||||
|
||||
# used for qemu+ssh connection between manager and hypervisors
|
||||
create_soqemussh_user:
|
||||
|
||||
@@ -86,19 +86,6 @@ salt_master_service:
|
||||
- file: engines_config
|
||||
- order: last
|
||||
|
||||
{#
|
||||
# we need to managed adding the following to salt-master config if there are hypervisors
|
||||
reactor:
|
||||
- 'salt/key':
|
||||
- salt://reactor/check_hypervisor.sls
|
||||
- 'salt/cloud/*/deploying':
|
||||
- /opt/so/saltstack/default/salt/reactor/createEmptyPillar.sls
|
||||
- 'setup/so-minion':
|
||||
- /opt/so/saltstack/default/salt/reactor/sominion_setup.sls
|
||||
- 'salt/cloud/*/destroyed':
|
||||
- /opt/so/saltstack/default/salt/reactor/deleteKey.sls
|
||||
#}
|
||||
|
||||
{% else %}
|
||||
|
||||
{{sls}}_state_not_allowed:
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
# this state is included in the salt.minion state
|
||||
|
||||
{% set role = salt['grains.get']('role', '') %}
|
||||
{% if role == 'so-hypervisor' -%}
|
||||
{% if role in ['so-hypervisor','so-managerhype'] and salt['network.ip_addrs']('br0')|length > 0 -%}
|
||||
{% set interface = 'br0' %}
|
||||
{% else %}
|
||||
{% set interface = pillar.host.mainint %}
|
||||
@@ -22,7 +22,7 @@ mine_functions:
|
||||
mine_functions:
|
||||
network.ip_addrs:
|
||||
- interface: {{ interface }}
|
||||
{%- if role in ['so-eval','so-import','so-manager','so-managersearch','so-standalone'] %}
|
||||
{%- if role in ['so-eval','so-import','so-manager','so-managerhype','so-managersearch','so-standalone'] %}
|
||||
x509.get_pem_entries:
|
||||
- glob_path: '/etc/pki/ca.crt'
|
||||
{% endif -%}
|
||||
|
||||
Reference in New Issue
Block a user