From e464117e8a3951242f26f86d5d9c144246ff34d6 Mon Sep 17 00:00:00 2001
From: William Wernert <william.wernert@securityonionsolutions.com>
Date: Wed, 16 Dec 2020 10:19:44 -0500
Subject: [PATCH] [fix] Run so-catrust in ES state on Helix sensor install

---
 salt/elasticsearch/init.sls | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/salt/elasticsearch/init.sls b/salt/elasticsearch/init.sls
index eb8f281b5..4ebe05cec 100644
--- a/salt/elasticsearch/init.sls
+++ b/salt/elasticsearch/init.sls
@@ -38,8 +38,8 @@
   {% set esclustername = salt['pillar.get']('elasticsearch:esclustername') %}
   {% set esheap = salt['pillar.get']('elasticsearch:esheap') %}
   {% set ismanager = False %}
-{% else %}
-  {% set ismanager = False %}
+{% elif grains['role'] = 'so-helix' %}
+  {% set ismanager = True %} {# Solely for the sake of running so-catrust #}
 {% endif %}
 
 {% set TEMPLATES = salt['pillar.get']('elasticsearch:templates', {}) %}