From 184356618cd524f418fa935ffe3c06da4cb56ca5 Mon Sep 17 00:00:00 2001 From: Josh Brower Date: Thu, 11 Nov 2021 08:28:22 -0500 Subject: [PATCH 1/2] Add Fleet Standalone Node to manager ssl --- salt/nginx/init.sls | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/salt/nginx/init.sls b/salt/nginx/init.sls index c732db636..0e8a73fe0 100644 --- a/salt/nginx/init.sls +++ b/salt/nginx/init.sls @@ -77,7 +77,7 @@ so-nginx: - /opt/so/tmp/nginx/:/var/lib/nginx:rw - /opt/so/tmp/nginx/:/run:rw - /opt/so/conf/fleet/packages:/opt/socore/html/packages - {% if grains.role in ['so-manager', 'so-managersearch', 'so-eval', 'so-standalone', 'so-import'] %} + {% if grains.role in ['so-manager', 'so-managersearch', 'so-eval', 'so-standalone', 'so-import', 'so-fleet'] %} - /etc/pki/managerssl.crt:/etc/pki/nginx/server.crt:ro - /etc/pki/managerssl.key:/etc/pki/nginx/server.key:ro # ATT&CK Navigator binds From 96f427d924ac54b631ef72c96f936d4fa4a3ef77 Mon Sep 17 00:00:00 2001 From: Josh Brower Date: Thu, 11 Nov 2021 08:45:22 -0500 Subject: [PATCH 2/2] Add so-fleet to cert requirements --- salt/nginx/init.sls | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/salt/nginx/init.sls b/salt/nginx/init.sls index 0e8a73fe0..615372216 100644 --- a/salt/nginx/init.sls +++ b/salt/nginx/init.sls @@ -102,7 +102,7 @@ so-nginx: - file: nginxconfdir - require: - file: nginxconf - {% if grains.role in ['so-manager', 'so-managersearch', 'so-eval', 'so-standalone', 'so-import'] %} + {% if grains.role in ['so-manager', 'so-managersearch', 'so-eval', 'so-standalone', 'so-import', 'so-fleet'] %} - x509: managerssl_key - x509: managerssl_crt - file: navigatorconfig