IDH - states allowed

salt/allowed_states.map.jinja

@@ -248,7 +248,7 @@
     {% do allowed_states.append('strelka') %}
   {% endif %}
 
-  {% if WAZUH and grains.role in ['so-eval', 'so-manager', 'so-standalone', 'so-node', 'so-managersearch', 'so-heavynode', 'so-receiver']%}
+  {% if WAZUH and grains.role in ['so-eval', 'so-manager', 'so-standalone', 'so-node', 'so-managersearch', 'so-heavynode', 'so-receiver','so-idh']%}
     {% do allowed_states.append('wazuh') %}
   {% endif %}
 

salt/idh/Dockerfile

@@ -1,12 +0,0 @@
-FROM python:3.6-slim
-
-WORKDIR /root/
-
-RUN rm /bin/sh && ln -s /bin/bash /bin/sh
-
-RUN apt update && apt-get install -y sudo supervisor && rm -rf /var/lib/apt/lists/*
-RUN pip install opencanary
-
-ADD supervise-opencanary.conf /etc/supervisor/conf.d/supervise-opencanary.conf
-
-CMD ["/usr/bin/supervisord", "-n"]

salt/idh/init.sls

@@ -1,3 +1,7 @@
+{% set VERSION = salt['pillar.get']('global:soversion', 'HH1.2.2') %}
+{% set IMAGEREPO = salt['pillar.get']('global:imagerepo') %}
+{% set MANAGER = salt['grains.get']('master') %}
+
 # IDH State
 
 # Create a config directory

salt/idh/supervise-opencanary.conf

@@ -1,4 +0,0 @@
- [program:opencanaryd]
-command=/usr/local/bin/opencanaryd --start
-redirect_stderr=true
-autorestart=true

setup/so-setup

@@ -253,7 +253,7 @@ elif [ "$install_type" = 'FLEET' ]; then
 	OSQUERY=1
 elif [ "$install_type" = 'IDH' ]; then
 	is_minion=true
-	is_idh_standalone=true
+	is_idh=true
 	IDH=1
 elif [ "$install_type" = 'HELIXSENSOR' ]; then
 	is_helix=true
@@ -809,7 +809,7 @@ echo "1" > /root/accept_changes
 	set_progress_str 62 "$(print_salt_state_apply 'common')"
 	salt-call state.apply -l info common >> $setup_log 2>&1
 
-	if [[ ! $is_helix && ! $is_receiver ]]; then
+	if [[ ! $is_helix && ! $is_receiver && ! $is_idh ]]; then
 		set_progress_str 62 "$(print_salt_state_apply 'nginx')"
 		salt-call state.apply -l info nginx >> $setup_log 2>&1
 	fi