mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
remove redundant common from top, create so-status conf files on manager before registry state https://github.com/Security-Onion-Solutions/securityonion/issues/1681
This commit is contained in:
@@ -57,10 +57,10 @@ so-dockerregistry:
|
|||||||
- /etc/pki/registry.crt:/etc/pki/registry.crt:ro
|
- /etc/pki/registry.crt:/etc/pki/registry.crt:ro
|
||||||
- /etc/pki/registry.key:/etc/pki/registry.key:ro
|
- /etc/pki/registry.key:/etc/pki/registry.key:ro
|
||||||
|
|
||||||
append_so-dockerregistry_so-status.conf:
|
append_so-registry_so-status.conf:
|
||||||
file.append:
|
file.append:
|
||||||
- name: /opt/so/conf/so-status/so-status.conf
|
- name: /opt/so/conf/so-status/so-status.conf
|
||||||
- text: so-dockerregistry
|
- text: so-registry
|
||||||
|
|
||||||
{% else %}
|
{% else %}
|
||||||
|
|
||||||
|
|||||||
14
salt/top.sls
14
salt/top.sls
@@ -42,7 +42,6 @@ base:
|
|||||||
- salt.master
|
- salt.master
|
||||||
- ca
|
- ca
|
||||||
- ssl
|
- ssl
|
||||||
- common
|
|
||||||
- registry
|
- registry
|
||||||
- telegraf
|
- telegraf
|
||||||
- firewall
|
- firewall
|
||||||
@@ -60,7 +59,6 @@ base:
|
|||||||
- match: compound
|
- match: compound
|
||||||
- ca
|
- ca
|
||||||
- ssl
|
- ssl
|
||||||
- common
|
|
||||||
- telegraf
|
- telegraf
|
||||||
- firewall
|
- firewall
|
||||||
- nginx
|
- nginx
|
||||||
@@ -86,7 +84,6 @@ base:
|
|||||||
- salt.master
|
- salt.master
|
||||||
- ca
|
- ca
|
||||||
- ssl
|
- ssl
|
||||||
- common
|
|
||||||
- registry
|
- registry
|
||||||
- manager
|
- manager
|
||||||
- nginx
|
- nginx
|
||||||
@@ -145,7 +142,6 @@ base:
|
|||||||
- salt.master
|
- salt.master
|
||||||
- ca
|
- ca
|
||||||
- ssl
|
- ssl
|
||||||
- common
|
|
||||||
- registry
|
- registry
|
||||||
- nginx
|
- nginx
|
||||||
- telegraf
|
- telegraf
|
||||||
@@ -194,7 +190,6 @@ base:
|
|||||||
- salt.master
|
- salt.master
|
||||||
- ca
|
- ca
|
||||||
- ssl
|
- ssl
|
||||||
- common
|
|
||||||
- registry
|
- registry
|
||||||
- manager
|
- manager
|
||||||
- nginx
|
- nginx
|
||||||
@@ -252,7 +247,6 @@ base:
|
|||||||
|
|
||||||
'*_node and I@node:node_type:parser and G@saltversion:{{saltversion}}':
|
'*_node and I@node:node_type:parser and G@saltversion:{{saltversion}}':
|
||||||
- match: compound
|
- match: compound
|
||||||
- common
|
|
||||||
- firewall
|
- firewall
|
||||||
- logstash
|
- logstash
|
||||||
{%- if FLEETMANAGER or FLEETNODE %}
|
{%- if FLEETMANAGER or FLEETNODE %}
|
||||||
@@ -263,7 +257,6 @@ base:
|
|||||||
|
|
||||||
'*_node and I@node:node_type:hot and G@saltversion:{{saltversion}}':
|
'*_node and I@node:node_type:hot and G@saltversion:{{saltversion}}':
|
||||||
- match: compound
|
- match: compound
|
||||||
- common
|
|
||||||
- firewall
|
- firewall
|
||||||
- logstash
|
- logstash
|
||||||
- curator
|
- curator
|
||||||
@@ -275,7 +268,6 @@ base:
|
|||||||
|
|
||||||
'*_node and I@node:node_type:warm and G@saltversion:{{saltversion}}':
|
'*_node and I@node:node_type:warm and G@saltversion:{{saltversion}}':
|
||||||
- match: compound
|
- match: compound
|
||||||
- common
|
|
||||||
- firewall
|
- firewall
|
||||||
- elasticsearch
|
- elasticsearch
|
||||||
{%- if FLEETMANAGER or FLEETNODE %}
|
{%- if FLEETMANAGER or FLEETNODE %}
|
||||||
@@ -288,7 +280,6 @@ base:
|
|||||||
- match: compound
|
- match: compound
|
||||||
- ca
|
- ca
|
||||||
- ssl
|
- ssl
|
||||||
- common
|
|
||||||
- nginx
|
- nginx
|
||||||
- telegraf
|
- telegraf
|
||||||
- firewall
|
- firewall
|
||||||
@@ -307,7 +298,6 @@ base:
|
|||||||
|
|
||||||
'*_managersensor and G@saltversion:{{saltversion}}':
|
'*_managersensor and G@saltversion:{{saltversion}}':
|
||||||
- match: compound
|
- match: compound
|
||||||
- common
|
|
||||||
- nginx
|
- nginx
|
||||||
- telegraf
|
- telegraf
|
||||||
- influxdb
|
- influxdb
|
||||||
@@ -326,7 +316,6 @@ base:
|
|||||||
- salt.master
|
- salt.master
|
||||||
- ca
|
- ca
|
||||||
- ssl
|
- ssl
|
||||||
- common
|
|
||||||
- registry
|
- registry
|
||||||
- nginx
|
- nginx
|
||||||
- telegraf
|
- telegraf
|
||||||
@@ -375,7 +364,6 @@ base:
|
|||||||
- match: compound
|
- match: compound
|
||||||
- ca
|
- ca
|
||||||
- ssl
|
- ssl
|
||||||
- common
|
|
||||||
- nginx
|
- nginx
|
||||||
- telegraf
|
- telegraf
|
||||||
- firewall
|
- firewall
|
||||||
@@ -406,7 +394,6 @@ base:
|
|||||||
- match: compound
|
- match: compound
|
||||||
- ca
|
- ca
|
||||||
- ssl
|
- ssl
|
||||||
- common
|
|
||||||
- nginx
|
- nginx
|
||||||
- telegraf
|
- telegraf
|
||||||
- firewall
|
- firewall
|
||||||
@@ -422,7 +409,6 @@ base:
|
|||||||
- salt.master
|
- salt.master
|
||||||
- ca
|
- ca
|
||||||
- ssl
|
- ssl
|
||||||
- common
|
|
||||||
- registry
|
- registry
|
||||||
- manager
|
- manager
|
||||||
- nginx
|
- nginx
|
||||||
|
|||||||
@@ -590,6 +590,11 @@ fi
|
|||||||
set_progress_str 25 'Configuring firewall'
|
set_progress_str 25 'Configuring firewall'
|
||||||
set_initial_firewall_policy >> $setup_log 2>&1
|
set_initial_firewall_policy >> $setup_log 2>&1
|
||||||
|
|
||||||
|
# create these so the registry state can add so-registry to /opt/so/conf/so-status/so-status.conf
|
||||||
|
mkdir -p /opt/so/conf/so-status/
|
||||||
|
touch /opt/so/conf/so-status/so-status.conf
|
||||||
|
touch /opt/so/conf/so-status/so-status.disabled.conf
|
||||||
|
|
||||||
if [[ "$setup_type" == 'iso' ]]; then
|
if [[ "$setup_type" == 'iso' ]]; then
|
||||||
set_progress_str 26 'Copying containers from iso'
|
set_progress_str 26 'Copying containers from iso'
|
||||||
else
|
else
|
||||||
|
|||||||
Reference in New Issue
Block a user