From ecc8594d443a1bbb8090313b06ae38a4891ab8bc Mon Sep 17 00:00:00 2001
From: m0duspwnens <josh.patterson@securityonionsolutions.com>
Date: Wed, 8 Dec 2021 13:32:56 -0500
Subject: [PATCH] prevent so-receiver from getting extra keys/certs

---
 salt/ssl/init.sls | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/salt/ssl/init.sls b/salt/ssl/init.sls
index d2edb51c4..6641ff186 100644
--- a/salt/ssl/init.sls
+++ b/salt/ssl/init.sls
@@ -225,7 +225,7 @@ chownilogstashfilebeatp8:
     - user: 931
     - group: 939
 
-  {% if grains.role != 'so-heavynode' %}
+  {% if grains.role not in  ['so-heavynode', 'so-receiver']%}
 # Create Symlinks to the keys so I can distribute it to all the things
 filebeatdir:
   file.directory: