From ee1d2167e8bedc507232438c3106322b0e39340d Mon Sep 17 00:00:00 2001
From: Josh Patterson <josh.patterson@securityonionsolutions.com>
Date: Mon, 10 Aug 2026 08:30:40 -0400
Subject: [PATCH] logrotate: rotate /opt/so/log/salt/so-grid-highstate

Add a logrotate entry for the grid-highstate driver's log, matching the existing
/opt/so/log/salt/{minion,master,so-salt-minion-check} entries (daily, rotate 14,
copytruncate, compress). Registered in both logrotate/defaults.yaml and the SOC
config schema logrotate/soc_logrotate.yaml.
---
 salt/logrotate/defaults.yaml      | 10 ++++++++++
 salt/logrotate/soc_logrotate.yaml |  7 +++++++
 2 files changed, 17 insertions(+)

diff --git a/salt/logrotate/defaults.yaml b/salt/logrotate/defaults.yaml
index e37193d0d..d48665f9c 100644
--- a/salt/logrotate/defaults.yaml
+++ b/salt/logrotate/defaults.yaml
@@ -220,6 +220,16 @@ logrotate:
       - extension .log
       - dateext
       - dateyesterday
+    /opt/so/log/salt/so-grid-highstate:
+      - daily
+      - rotate 14
+      - missingok
+      - copytruncate
+      - compress
+      - create
+      - extension .log
+      - dateext
+      - dateyesterday
     /nsm/idh/*_x_log:
       - daily
       - rotate 14
diff --git a/salt/logrotate/soc_logrotate.yaml b/salt/logrotate/soc_logrotate.yaml
index f329ed623..089772c0f 100644
--- a/salt/logrotate/soc_logrotate.yaml
+++ b/salt/logrotate/soc_logrotate.yaml
@@ -140,6 +140,13 @@ logrotate:
       multiline: True
       global: True
       forcedType: "[]string"
+    "/opt/so/log/salt/so-grid-highstate":
+      description: List of logrotate options for this file.
+      title: /opt/so/log/salt/so-grid-highstate
+      advanced: True
+      multiline: True
+      global: True
+      forcedType: "[]string"
     "/nsm/idh/*_x_log":
       description: List of logrotate options for this file.
       title: /nsm/idh/*.log