Jason Ertel
d131d167de
provide explanation text
2026-07-08 07:00:38 -04:00
Jason Ertel
8a8f2c4a33
change order to recollate first
2026-07-07 22:22:00 -04:00
Jason Ertel
7f6014096b
recollate db
2026-07-07 22:01:27 -04:00
Jason Ertel
ef83450107
recollate
2026-07-07 16:54:06 -04:00
reyesj2
24b75b4a2b
typo
2026-07-01 12:50:23 -05:00
reyesj2
e88eb65a44
keep old packages for rollback ability
2026-07-01 10:29:05 -05:00
reyesj2
dc8c80633b
update airgap soup to sync uek repo from iso and retain latest packages only
2026-07-01 10:23:04 -05:00
reyesj2
670d2b2757
casing
2026-06-30 12:57:56 -05:00
reyesj2
3b8459c6ec
soup upgrade kafka cluster metadata v4
2026-06-30 12:43:42 -05:00
Josh Patterson and GitHub
a9f9d8bd0d
Merge pull request #15985 from Security-Onion-Solutions/soupmod2
...
allow manager two full highstates during soup, improve elastic script runtime
2026-06-22 17:02:02 -04:00
reyesj2
22d5c96bd5
don't create stack trace when set -e is disabled
2026-06-18 14:56:29 -05:00
Josh Patterson
62c01a9756
Merge remote-tracking branch 'origin/3/dev' into soupmod2
2026-06-18 09:53:44 -04:00
reyesj2
16149df71f
formatting
2026-06-16 18:21:28 -05:00
reyesj2
6a18f35020
add context to soup errors and optional soup debug log with xtrace output
2026-06-16 18:21:28 -05:00
Josh Patterson
8e33d0e1e9
Merge remote-tracking branch 'origin/3/dev' into soupmod2
2026-06-16 12:54:18 -04:00
reyesj2
3daed551df
use --fail flag without set -x, since elasticsearch can return a 404 on the template lookup
2026-06-16 11:17:04 -05:00
reyesj2
4456bde1c8
check if template exists without --fail flag
2026-06-16 10:45:53 -05:00
Jorge Reyes and GitHub
4a6c675223
skip kibana backport if the template doesn't exist
2026-06-16 10:33:11 -05:00
reyesj2
1a423a2434
update message
2026-06-15 14:17:34 -05:00
reyesj2
d10f21399c
remove comments
2026-06-15 13:31:23 -05:00
Josh Patterson
83aaa76f98
allow full highstate on manager when locked
2026-06-10 16:34:10 -04:00
reyesj2
9aa9ea3255
Iniitial DLM support
2026-06-09 23:19:26 -05:00
Jorge Reyes and GitHub
534f0e639d
Merge pull request #15954 from Security-Onion-Solutions/reyesj2-patch-4
...
run elastic agent regen installer script in post_to_3.2.0
2026-06-02 15:25:55 -05:00
reyesj2
559465b407
run elastic agent gen installers script in post_to_3.2.0
2026-06-02 15:18:00 -05:00
reyesj2
f9c2579261
remove logstash pipeline rename from hotfix moving to up_to_3.2.0
2026-06-02 15:18:00 -05:00
Jorge Reyes and GitHub
33699a914b
Merge pull request #15952 from Security-Onion-Solutions/reyesj2-patch-3
...
use so-config-backup script in soup
2026-06-02 15:02:27 -05:00
Jorge Reyes and GitHub
0c2d8f8973
Merge pull request #15951 from Security-Onion-Solutions/reyesj2-patch-2
...
check if there is a version or hotfix to upgrade to before verifiying elasticsearch compatibility
2026-06-02 15:02:10 -05:00
reyesj2
f2996fb888
use so-config-backup script in soup
2026-06-01 11:52:35 -05:00
reyesj2
3c533cccbc
and after free space check
2026-06-01 11:28:59 -05:00
reyesj2
79da9f9f2c
check if there is a version or hotfix to upgrade to before verifiying elasticsearch compatibility
2026-06-01 11:26:52 -05:00
Josh Patterson
9a70a06b3b
Merge remote-tracking branch 'origin/3/dev' into jertel/wip
2026-05-28 13:55:12 -04:00
Josh Patterson
bb8ae91d91
fix so-soc postgres bootstrap
2026-05-27 16:39:52 -04:00
reyesj2
b2a82fec29
fix_logstash_0013_lumberjack_pipeline_name
...
Before removing from apply_hotfix function first verify that older installs < 3.1.0 are still upgradable when referencing 'so/0013_input_lumberjack_fleet.conf' via pillar. Failure to do so will prevent logstash from starting
2026-05-27 13:24:23 -05:00
Josh Patterson
79987f3659
bootstrap so-soc db in postgres during soup
2026-05-27 13:55:30 -04:00
reyesj2
0b4a4de609
always run logstash pipeline rename
2026-05-27 12:21:22 -05:00
reyesj2
0834998cca
usuable for next soup
2026-05-27 09:52:29 -05:00
reyesj2
473f93f0ee
check for stale logstash pipeline name in pillars
2026-05-27 09:33:15 -05:00
reyesj2
d72219c586
use multiple or combined input
2026-05-22 20:04:21 -05:00
reyesj2
b485be4602
separate salt-key command from main es version compatiblity loop
2026-05-20 14:12:58 -05:00
reyesj2
7d13007aa9
block soup if all ES nodes are not online and reporting their ES version for compatibility check
2026-05-20 10:03:37 -05:00
reyesj2
d7a1b67095
use pipefail on heavynode versino command to pass through error
2026-05-20 09:16:57 -05:00
reyesj2
6c8997b28a
verify all heavynodes and all searchnodes are at compatible ES version before attempting an elasticsearch upgrade
2026-05-19 22:27:31 -05:00
reyesj2
ef79c63858
Merge branch '3/dev' of github.com:Security-Onion-Solutions/securityonion into reyesj2/strelkalnk
2026-05-12 15:20:09 -05:00
reyesj2
01fb1aa156
check pillars for ScanLNK and rename to ScanLnk
2026-05-12 15:19:44 -05:00
reyesj2
f637dc62d1
use temp files to prevent jq arg too long
2026-05-12 13:29:32 -05:00
reyesj2
86966d2778
reauthorize unhealthy transform jobs using kibana 9.3.3 auth flow
2026-05-01 12:44:08 -05:00
reyesj2
39d0947102
update default elastic agent logging level to warning
2026-04-29 17:38:40 -05:00
Mike Reeves and GitHub
fa8162de02
Merge pull request #15749 from Security-Onion-Solutions/feature/postgres
...
Add so-postgres Salt states and infrastructure
2026-04-28 10:15:47 -04:00
Mike Reeves
0ecc7ae594
soup: drop --local from postgres.telegraf_users reconcile
...
The manager's /etc/salt/minion (written by so-functions:configure_minion)
has no file_roots, so salt-call --local falls back to Salt's default
/srv/salt and fails with "No matching sls found for 'postgres.telegraf_users'
in env 'base'". || true was silently swallowing the error, which meant the
DB roles for the pillar entries just populated by the so-telegraf-cred
backfill loop never actually got created.
Route through salt-master instead; its file_roots already points at the
default/local salt trees.
2026-04-23 11:25:44 -04:00
Mike Reeves
eadad6c163
soup: bootstrap postgres pillar stubs and secret on 3.0.0 upgrade
...
pillar/top.sls now references postgres.soc_postgres / postgres.adv_postgres
unconditionally, but make_some_dirs only runs at install time so managers
upgrading from 3.0.0 have no local/pillar/postgres/ and salt-master fails
pillar render on the first post-upgrade restart. Similarly, secrets_pillar
is a no-op on upgrade (secrets.sls already exists), so secrets:postgres_pass
never gets seeded and the postgres container's POSTGRES_PASSWORD_FILE and
SOC's PG_ADMIN_PASS would land empty after highstate.
Add ensure_postgres_local_pillar and ensure_postgres_secret to up_to_3.1.0
so the stubs and secret exist before masterlock/salt-master restart. Both
are idempotent and safe to re-run.
2026-04-23 10:01:38 -04:00
Jason Ertel
reyesj2
Josh PattersonandGitHub
Mike ReevesandGitHub
Mike Reeves