152 Commits

Author	SHA1	Message	Date
m0duspwnens	451b19dc4d	change from file to x509	2021-10-22 09:53:20 -04:00
m0duspwnens	f93c6146f5	docker binds requires	2021-10-21 15:24:55 -04:00
m0duspwnens	d0c87cd317	allow for pillar override of defaults	2021-09-17 12:11:12 -04:00
m0duspwnens	3ce48acadd	change cluster_settings to config	2021-09-16 16:44:31 -04:00
m0duspwnens	0534a2dda3	Merge remote-tracking branch 'remotes/origin/dev' into issue/1257	2021-09-13 15:04:50 -04:00
m0duspwnens	93f2cd75a4	add the jinja template	2021-09-09 10:19:46 -04:00
m0duspwnens	f06ab8b77d	testing defaults.yaml	2021-09-09 08:55:36 -04:00
Jason Ertel	10126bb7ef	Auth enhancements	2021-09-02 09:44:57 -04:00
m0duspwnens	a27569f20b	remove source when contents provided	2021-08-25 12:32:17 -04:00
m0duspwnens	0681d29bb0	starting es pillarization	2021-08-25 10:23:06 -04:00
Jason Ertel	89a02383b8	Correct cronjob path issue for sysctl; suppress diff outputs from users/roles files; suppress salt state output during user sync	2021-06-09 16:31:32 -04:00
Jason Ertel	e22421ec99	Refactor users/roles management via salt due to Salt's clobbering of the inode which breaks Docker mounts	2021-06-04 20:01:30 -04:00
Jason Ertel	7aede4d058	Persist chown/chmod settings on users/roles files	2021-06-02 09:01:16 -04:00
m0duspwnens	7e48740ea7	fix merge conflict	2021-06-01 10:56:02 -04:00
m0duspwnens	d25a439bd4	more changes	2021-06-01 10:53:58 -04:00
Jason Ertel	a42a406f53	Remove extra users file mounts; disable elastic anon access when auth enabled	2021-05-29 07:52:08 -04:00
m0duspwnens	68abaa5e3c	update auth.map and curl.config to use new elasticsearch:auth pillar format	2021-05-28 14:03:21 -04:00
m0duspwnens	0134ceef16	merge and resolve conflict in elasticsearch state	2021-05-27 11:33:44 -04:00
m0duspwnens	dc8520df42	user curl.config for curl and elasticscripts	2021-05-26 18:04:30 -04:00
m0duspwnens	7263e35a89	happy little comment	2021-05-26 14:52:59 -04:00
m0duspwnens	4d991d3773	propogate users and users_roles	2021-05-26 14:52:10 -04:00
Jason Ertel	c531ef0773	Move user sync'd files to saltstack for grid propagation	2021-05-26 13:44:30 -04:00
Jason Ertel	a6a4c03029	Improve error scenarios for user sync; Ensure user sync runs before Elastic container starts	2021-05-26 12:08:10 -04:00
m0duspwnens	c3b2e1e8b2	dont show changes	2021-05-25 16:16:57 -04:00
m0duspwnens	e261c197f3	add elasticsearch.auth state to statnalone node	2021-05-25 13:46:18 -04:00
m0duspwnens	8d9d5a267a	generate elasticsearch.auth pillar if it doesnt exist	2021-05-25 11:52:58 -04:00
m0duspwnens	bd301880ad	define the default	2021-05-24 16:32:30 -04:00
m0duspwnens	2deb703272	map users_roles and users conf into docker container	2021-05-24 16:30:55 -04:00
Jason Ertel	8c6489a49a	Initial pass at synchronizing users file	2021-05-24 15:48:05 -04:00
Mike Reeves	1ecb079066	Fix Kibana Script for loading dashboards	2021-03-08 17:36:07 -05:00
Mike Reeves	e0d9212e55	Make https default for all things	2021-03-02 14:01:05 -05:00
Mike Reeves	3219f4cd12	Remove Features Option	2021-03-02 11:04:50 -05:00
Mike Reeves	4212afe0c9	Add features option back	2021-01-30 19:57:18 -05:00
Mike Reeves	4ef38f8d04	Add EPS and RAID status collection for telegraf	2021-01-25 19:14:46 -05:00
Mike Reeves	636687ac59	Merge pull request #2702 from Security-Onion-Solutions/essecurity ... SSL with Elastic Basic license. Remove features option.	2021-01-21 13:57:28 -05:00
Mike Reeves	9408d62c65	Remove features	2021-01-21 13:55:53 -05:00
Mike Reeves	f85ecf254e	Fix dupe	2021-01-21 13:21:08 -05:00
Mike Reeves	9f984036c5	Use the internmediate cert	2021-01-21 13:00:46 -05:00
Mike Reeves	bb523c44e6	Enable features temporarily	2021-01-21 12:19:41 -05:00
Mike Reeves	013b706ce4	Enable http ssl	2021-01-21 12:13:23 -05:00
Mike Reeves	84b75a38a3	Fix error in init.sls for ES	2021-01-21 11:21:04 -05:00
Mike Reeves	6de70ec820	Update docker mappings for ES	2021-01-21 11:12:12 -05:00
m0duspwnens	b693373d8d	change how we allow or disallow states to be run https://github.com/Security-Onion-Solutions/securityonion/issues/2679	2021-01-20 15:09:53 -05:00
Mike Reeves	575098e368	Update init.sls	2020-12-17 20:23:38 -05:00
Mike Reeves	39425c1ba8	Fix extra extrahosts	2020-12-17 20:15:56 -05:00
TOoSmOotH	6448ddc31a	Allow SNs to resolve the ES master	2020-12-17 20:08:21 -05:00
William Wernert	142649b396	[fix] Fix comparator	2020-12-16 10:38:34 -05:00
William Wernert	e464117e8a	[fix] Run so-catrust in ES state on Helix sensor install	2020-12-16 10:19:44 -05:00
William Wernert	aa0d43b1db	[fix] Always define ismanager var	2020-12-16 09:55:09 -05:00
William Wernert	af149d04a9	[fix] Only run portions of ES state, do not run container	2020-12-16 09:18:40 -05:00