CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-10 03:02:58 +01:00
Code Issues Packages Projects Releases Wiki Activity

set initial schedule for vm to deal with possible manager firewall state.apply delay

Browse Source
This commit is contained in:
m0duspwnens
2024-08-28 14:12:23 -04:00
parent d44ce0a070
commit f5e6e49075
5 changed files with 24 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
salt/salt/cloud/cloud.profiles.d/socloud.conf.jinja
View File

@@ -20,7 +20,7 @@ core-{{host}}:
master_port: 4506 master_port: 4506
#startup_states: sls #startup_states: sls
#sls_list: #sls_list:
# - setup.virt.setSalt # - setup.virt.initial_schedule
# - setup.virt.setHostname # - setup.virt.setHostname
use_superseded: use_superseded:
- module.run - module.run
@@ -34,10 +34,10 @@ core-{{host}}:
#preflight_cmds: #preflight_cmds:
# - echo "preflight_cmds" # - echo "preflight_cmds"
# the destination directory will be created if it doesn't exist # the destination directory will be created if it doesn't exist
#file_map: file_map:
# /opt/so/saltstack/default/salt/repo/client/files/oracle/keys/securityonion.pub: /tmp/securityonion.pub /opt/so/saltstack/default/salt/setup/virt/initial_schedule.sls: /opt/so/conf/salt/cloud_file_map/salt/initial_schedule.sls
#inline_script: inline_script:
# - "systemctl start salt-minion" - "sudo salt-call state.apply initial_schedule --local --file-root=/opt/so/conf/salt/cloud_file_map/salt/"
# - "rpm --import /tmp/securityonion.pub" # - "rpm --import /tmp/securityonion.pub"
# grains to add to the minion # grains to add to the minion

8
salt/salt/master.sls
View File

@@ -58,10 +58,10 @@ salt_master_service:
#- salt/cloud/*/requesting #- salt/cloud/*/requesting
# - 'salt/cloud/*/deploying': # - 'salt/cloud/*/deploying':
# - /opt/so/saltstack/default/salt/reactor/createEmptyPillar.sls # - /opt/so/saltstack/default/salt/reactor/createEmptyPillar.sls
# - 'salt/cloud/*/created': ## - 'salt/cloud/*/created':
# - /opt/so/saltstack/default/salt/reactor/setSalt.sls ## - /opt/so/saltstack/default/salt/reactor/setSalt.sls
# - /opt/so/saltstack/default/salt/reactor/setHostname.sls ## - /opt/so/saltstack/default/salt/reactor/setHostname.sls
# - /opt/so/saltstack/default/salt/reactor/sominion.sls ## - /opt/so/saltstack/default/salt/reactor/sominion.sls
# - 'setup/so-minion': # - 'setup/so-minion':
# - /opt/so/saltstack/default/salt/reactor/sominion_setup.sls # - /opt/so/saltstack/default/salt/reactor/sominion_setup.sls
# - /opt/so/saltstack/default/salt/reactor/virtUpdate.sls # - /opt/so/saltstack/default/salt/reactor/virtUpdate.sls

4
salt/setup/virt/init.sls Normal file
View File

@@ -0,0 +1,4 @@
include:
- setup.virt.setSalt
- setup.virt.setHostname
- setup.virt.sominion

7
salt/setup/virt/initial_schedule.sls Normal file
View File

@@ -0,0 +1,7 @@
init_node_schedule:
schedule.present:
- name: init_node
- function: state.sls
- job_args:
- setup.virt.init
- minutes: 1

5
salt/setup/virt/setSalt.sls
View File

@@ -8,7 +8,10 @@ set_role_grain:
- name: role - name: role
- value: so-{{ grains.id.split("_") | last }} - value: so-{{ grains.id.split("_") | last }}
# set event for firewall rules - so-firewall-minion # disable the initial schedule
remove_init_node_schedule:
schedule.absent:
- name: init_node
set_highstate: set_highstate:
file.append: file.append: