Josh Patterson
3310e19ee4
Merge remote-tracking branch 'origin/3/dev' into saltthangs
2026-07-02 10:27:54 -04:00
reyesj2
c33db9d00f
remove outdated eval script and associated salt utility state
2026-07-01 11:12:39 -05:00
Josh Patterson
da94788255
Move highstate_interval_hours to salt.schedule and split schedule.sls
...
highstate_interval_hours describes the per-minion highstate schedule, not the
active-push pipeline, so relocate it from salt.auto_apply to a new salt.schedule
settings subtree. Repoint so-salt-minion-check at the new pillar path (it had
been left on the stale global:push path) so its restart grace period tracks the
schedule again.
- Add salt.schedule.highstate_interval_hours to defaults.yaml/soc_salt.yaml and a
side-effect-free salt/salt/schedule.map.jinja (SCHEDULEMERGED), matching the
*MERGED map convention. Consumers read SCHEDULEMERGED.highstate_interval_hours.
- Split salt/schedule.sls into salt/salt/highstate_schedule.sls (every minion) and
salt/salt/push_drain_schedule.sls (managers); update top.sls to apply the
highstate schedule via '*' and the drainer schedule via the configured-manager
block. Remove the now-empty schedule.sls aggregator.
- pillar_push_map.yaml and so-push-drainer: comment/doc updates only.
2026-06-26 10:51:57 -04:00
Josh Patterson and GitHub
b068ad2b35
remove stig from hypervisor and managerhype
2026-05-13 10:53:11 -04:00
Mike Reeves
868cd11874
Add so-postgres Salt states and integration wiring
...
Phase 1 of the PostgreSQL central data platform:
- Salt states: init, enabled, disabled, config, ssl, auth, sostatus
- TLS via SO CA-signed certs with postgresql.conf template
- Two-tier auth: postgres superuser + so_postgres application user
- Firewall restricts port 5432 to manager-only (HA-ready)
- Wired into top.sls, pillar/top.sls, allowed_states, firewall
containers map, docker defaults, CA signing policies, and setup
scripts for all manager-type roles
2026-04-08 10:58:52 -04:00
Josh Patterson
614537998a
remove curator.disabled from top
2026-03-16 16:44:11 -04:00
Josh Patterson
b3ed54633f
cleanup steno. sensor run pcap.cleanup
2026-03-10 16:09:32 -04:00
Jason Ertel
71839bc87f
remove steno
2026-03-06 15:45:36 -05:00
Josh Patterson
9960db200c
Merge remote-tracking branch 'origin/2.4/dev' into bravo
2025-12-11 17:30:43 -05:00
Josh Patterson
b9ff1704b0
the great ssl refactor
2025-12-11 17:30:06 -05:00
DefensiveDepth
1b55642c86
Refactor rules location
2025-11-18 09:58:14 -05:00
DefensiveDepth
ded520c2c1
Merge remote-tracking branch 'origin/2.4/dev' into idstools-refactor
2025-09-17 10:42:43 -04:00
DefensiveDepth
a77157391c
remove idstools
2025-09-17 10:42:05 -04:00
reyesj2
24be2f869b
enable stig on fleet nodes
2025-08-20 12:08:50 -05:00
Josh Patterson
26d7ceebb2
libvirt.images requires scripts from hypervisor state
2025-05-02 11:30:35 -04:00
Josh Patterson
285d73d526
enable/disable soqemussh. allow for pw to be set
2025-04-18 14:07:32 -04:00
Josh Patterson
445afca6ee
use vrt
2025-04-03 13:44:13 -04:00
Josh Patterson
4165b33995
Merge remote-tracking branch 'origin/2.4/dev' into vlb2
2025-03-27 15:34:39 -04:00
Josh Patterson
1d058729e5
break out manager from non manager
2025-03-27 13:27:34 -04:00
Josh Patterson
f9bf4e4130
Merge remote-tracking branch 'origin/2.4/dev' into vlb2
2025-03-27 11:26:32 -04:00
Josh Patterson
667e66bbef
rename mine update and highstate state
2025-03-26 13:56:49 -04:00
Josh Patterson
55c815cae8
simplify highstate rerun when node_data pillar empty
2025-03-25 19:44:38 -04:00
Josh Patterson
79388af645
only managers need node_ips
2025-03-25 10:17:43 -04:00
Josh Patterson
8f40b66e3b
update mine instead of failing highstate if no node_data
2025-03-24 19:49:24 -04:00
Josh Patterson
269919b980
run setup_hypervisor.setup_environment for mangerhype if needed
2025-03-18 09:39:49 -04:00
Josh Patterson
44a5b3b1e5
MANAGERHYPE setup is now complete!
2025-03-12 21:05:04 -04:00
Josh Patterson
b68f561e6f
progress and hw tracking for soc hypervisor dynamic annotations
2025-02-21 09:50:01 -05:00
m0duspwnens
08bbeedbd7
add automatic NVMe device mounting for VMs with LVM support
2025-01-30 09:55:26 -05:00
m0duspwnens
213df68d04
merge with 120 dev and fix conflicts
2025-01-23 10:56:48 -05:00
m0duspwnens
17943ef0db
add hypervisor state to hypervisor node
2025-01-18 08:24:50 -05:00
m0duspwnens
24eadf2507
add libvirt state to highstate for hypervisor. update allowed_states for libvirt
2025-01-16 17:46:20 -05:00
Jason Ertel
57a9992a3d
Merge branch '2.4/dev' into jertel/wip
2024-11-11 10:06:44 -05:00
m0duspwnens
feb700393e
merge with 2.4.120, fix merge conflicts
2024-10-25 15:09:38 -04:00
m0duspwnens
5fb660bc9a
remove kernel bool option, just use list
2024-10-17 09:29:03 -04:00
Jason Ertel
523ff66389
connect work
2024-10-16 13:44:01 -04:00
reyesj2
385054b7b8
enable stig for so desktop
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2024-09-18 14:18:47 -04:00
m0duspwnens
9d2c5d54b0
hype changes
2024-08-07 10:43:53 -04:00
reyesj2
cf1335dd84
searchnode logstash-kafka cert generation
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2024-07-20 11:31:33 -04:00
reyesj2
268dcbe00b
update receiver node allowed states
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2024-06-18 15:44:51 -04:00
reyesj2
2ad87bf1fe
merge 2.4/dev
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2024-05-08 16:30:45 -04:00
m0duspwnens
5e2e5b2724
Merge remote-tracking branch 'origin/2.4/dev' into orchit
2024-05-07 10:44:14 -04:00
m0duspwnens
dcc1f656ee
predownload logstash and elastic for new searchnode and heavynode
2024-05-07 10:13:51 -04:00
Wes
5aa611302a
Handle YARA rules for distributed deployments
2024-05-06 19:08:01 +00:00
reyesj2
58ebbfba20
Add kafka state to standalone highstate
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2024-05-01 13:03:14 -04:00
m0duspwnens
f514e5e9bb
add kafka to receiver
2024-04-11 16:23:05 -04:00
m0duspwnens
780ad9eb10
add kafka to manager nodes
2024-04-02 15:50:25 -04:00
m0duspwnens
e25bc8efe4
Merge remote-tracking branch 'origin/reyesj2/kafka' into kaffytaffy
2024-04-02 13:36:47 -04:00
DefensiveDepth
d7ecad4333
Initial cut to remove Playbook and deps
2024-03-25 19:42:31 -04:00
reyesj2
446f1ffdf5
merge 2.4/dev
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2024-03-25 13:55:48 -04:00
Josh Brower
1847e5c3c0
Enable nginx on Fleet Node
2024-01-28 11:37:18 -05:00
Josh Patterson
reyesj2
Mike Reeves
Jason Ertel
DefensiveDepth
Wes