predownload logstash and elastic for new searchnode and heavynode

salt/elasticsearch/addsearchnode.sls

@@ -0,0 +1,29 @@
+so-soc container extrahosts
+seed_hosts elasticsearch.yaml
+so-elasticsearch container extrahosts
+so-logstash container extrahosts
+
+          ID: elasticfleet_sbin_jinja
+    Function: file.recurse
+        Name: /usr/sbin
+      Result: True
+     Comment: Recursively updated /usr/sbin
+     Started: 19:56:53.468894
+    Duration: 951.706 ms
+     Changes:
+              ----------
+              /usr/sbin/so-elastic-fleet-artifacts-url-update:
+                  ----------
+                  diff:
+                      ---
+                      +++
+                      @@ -26,7 +26,7 @@
+                       }
+
+                       # Query for the current Grid Nodes that are running Logstash (which includes Fleet Nodes)
+                      -LOGSTASHNODES='{"manager": {"jpp70man1": {"ip": "10.66.166.231"}}, "searchnode": {"jpp70sea1": {"ip": "10.66.166.232"}, "jpp70sea2": {"ip": "10.66.166.142"}}}'
+                      +LOGSTASHNODES='{"manager": {"jpp70man1": {"ip": "10.66.166.231"}}, "searchnode": {"jpp70sea1": {"ip": "10.66.166.232"}}}'
+
+                       # Initialize an array for new hosts from Fleet Nodes
+                       declare -a NEW_LIST=()
+

salt/elasticsearch/download.sls

@@ -0,0 +1,20 @@
+# Copyright Security Onion Solutions LLC and/or licensed to Security Onion Solutions LLC under one
+# or more contributor license agreements. Licensed under the Elastic License 2.0 as shown at
+# https://securityonion.net/license; you may not use this file except in compliance with the
+# Elastic License 2.0.
+
+{% from 'allowed_states.map.jinja' import allowed_states %}
+{% if sls.split('.')[0] in allowed_states %}
+{%   from 'vars/globals.map.jinja' import GLOBALS %}
+
+so-elasticsearch_image:
+  docker_image.present:
+    - name: {{ GLOBALS.registry_host }}:5000/{{ GLOBALS.image_repo }}/so-elasticsearch:{{ GLOBALS.so_version }}
+
+{% else %}
+
+{{sls}}_state_not_allowed:
+  test.fail_without_changes:
+    - name: {{sls}}_state_not_allowed
+
+{% endif %}