CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-01-30 11:54:13 +01:00
Code Issues Packages Projects Releases Wiki Activity

Ded Fleet Node - checkpoint

Browse Source
This commit is contained in:
Josh Brower
2023-04-04 16:11:22 -04:00
parent c2d4e870c8
commit cda67b2894
7 changed files with 40 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
salt/firewall/assigned_hostgroups.map.yaml
View File

@@ -317,7 +317,15 @@ role:
fleet:
portgroups:
- {{ portgroups.elasticsearch_rest }}
- {{ portgroups.docker_registry }}
- {{ portgroups.influxdb }}
- {{ portgroups.sensoroni }}
- {{ portgroups.yum }}
- {{ portgroups.beats_5044 }}
- {{ portgroups.beats_5644 }}
- {{ portgroups.beats_5056 }}
- {{ portgroups.elastic_agent_control }}
- {{ portgroups.elastic_agent_data }}
sensors:
portgroups:
- {{ portgroups.docker_registry }}

6
salt/firewall/containers.map.jinja
View File

@@ -93,6 +93,12 @@
'so-idh',
] %}
{% elif GLOBALS.role == 'so-fleet' %}
{% set NODE_CONTAINERS = [
'so-elastic-fleet',
'so-logstash',
] %}
{% elif GLOBALS.role == 'so-sensor' %}
{% set NODE_CONTAINERS = [] %}

1
salt/firewall/ports/ports.yaml
View File

@@ -35,7 +35,6 @@ firewall:
elastic_agent_data:
tcp:
- 5055
- 9200
endgame:
tcp:
- 3765