Commit Graph

176 Commits

Author SHA1 Message Date
m0duspwnens
c49b134122 move so-catrust 2023-05-15 16:43:47 -04:00
m0duspwnens
6320528263 move so-catrust 2023-05-15 14:08:30 -04:00
m0duspwnens
6909d3ed14 move cacertz and capemz to ssl state 2023-05-09 12:16:18 -04:00
Josh Brower
1ab72e9288 Fix cert gen 2023-04-19 10:23:13 -04:00
Josh Brower
36c96c4beb Remove dep vars 2023-04-19 10:02:24 -04:00
Josh Brower
d79ad53daf Merge pull request #10153 from Security-Onion-Solutions/fleet-sa
FEATURE: Dedicated Fleet Node
2023-04-19 09:12:30 -04:00
Josh Brower
8cccaef664 mkdirs as needed 2023-04-17 12:28:07 -04:00
Josh Brower
1944d09978 Logstash certs fixup 2023-04-17 11:34:57 -04:00
Josh Brower
a7d282b412 Firewall fixup 2023-04-15 18:33:44 -04:00
m0duspwnens
d83266c546 remove unrecognized keyword arguments 2023-04-04 09:58:44 -04:00
m0duspwnens
6039a1430e x509 changes for salt 3006 2023-04-04 08:55:10 -04:00
Josh Brower
af392681e3 Merge remote-tracking branch 'remotes/origin/2.4/dev' into fleet-sa 2023-04-03 07:27:04 -04:00
Mike Reeves
4944365341 Change the salt dir for elastic fleet 2023-03-17 11:02:02 -04:00
Mike Reeves
12398bdf24 add m2crypto 2023-02-17 13:34:21 -05:00
Mike Reeves
c6919a09da replace centos 2023-02-17 11:26:11 -05:00
Josh Brower
29aa6dceed Add logstash 2023-01-27 07:49:21 -05:00
Josh Brower
334a0d7b1c Start using so-elastic-agent container 2022-09-14 10:33:27 -04:00
Josh Brower
6945596eee Tweak elastic agent ssl gen 2022-09-14 08:10:42 -04:00
Josh Brower
bf14612258 Change out Elastic Fleet certs 2022-09-13 15:58:53 -04:00
Mike Reeves
2bd9dd80e2 Move In Day 2022-09-07 09:06:25 -04:00
Josh Brower
7a9cb6d110 Initial support - IDH Node 2022-02-07 16:49:11 -05:00
Josh Patterson
a02fb37493 Update init.sls 2022-02-02 09:18:02 -05:00
m0duspwnens
e63f35a223 change to test 2022-01-27 15:19:33 -05:00
m0duspwnens
487ac24306 revert back to getting ca from mine 2021-12-28 11:16:01 -05:00
m0duspwnens
f2adcf4ca5 ensure /etc/pki is created and simplify ca logic for non manager in ssl state 2021-12-28 10:41:57 -05:00
m0duspwnens
a46a876ec6 add managersearch to list 2021-12-16 13:48:41 -05:00
m0duspwnens
841b91e052 exclude elasticsearch and managerssl keys and certs from receiver 2021-12-14 16:05:47 -05:00
m0duspwnens
d94496bb90 remove minio_key and add missing endif 2021-12-09 13:24:20 -05:00
m0duspwnens
c2a952796c Merge remote-tracking branch 'remotes/origin/sans' into issue/6469 2021-12-09 13:13:18 -05:00
Mike Reeves
b92cbb01b3 SSL modifications 2021-12-09 13:13:01 -05:00
m0duspwnens
ecc8594d44 prevent so-receiver from getting extra keys/certs 2021-12-08 13:32:56 -05:00
m0duspwnens
59464af10c filebeat certs for logstash on so-receiver 2021-12-08 09:41:17 -05:00
m0duspwnens
1ef63f3a23 ssl things for so-receiver 2021-12-08 09:08:46 -05:00
Dustin Lee
8a394380cb add subjectAltName to filebeat.crt
IP SAN is required for Endgame integration w/Logstash when DNS resolution is unavailable
2021-11-30 16:24:08 -05:00
Mike Reeves
731bbabe4c Update init.sls 2021-11-15 17:00:34 -05:00
Mike Reeves
eefc9cfcb6 Enable Subject Alt Name for registry 2021-11-08 16:50:43 -05:00
William Wernert
a5cba5ecf8 Merge branch 'dev' into foxtrot 2021-10-29 10:01:46 -04:00
m0duspwnens
d7e5377a44 more requires 2021-10-22 16:46:45 -04:00
m0duspwnens
9f6407fcb0 fix dupe ids 2021-10-22 14:26:04 -04:00
m0duspwnens
f61400680d fix dupe ids 2021-10-22 14:22:15 -04:00
m0duspwnens
fed8bfac67 more requires on docker containers 2021-10-22 14:10:59 -04:00
William Wernert
352e30f9e1 Add CUSTOM_FLEET_HOSTNAME to subjectAltName of fleet.key
Resolves #4319
2021-10-22 11:16:29 -04:00
m0duspwnens
f93c6146f5 docker binds requires 2021-10-21 15:24:55 -04:00
Mike Reeves
481ffb1cda Fix Grain 2021-09-20 18:12:18 -04:00
Mike Reeves
50b78681f2 Ubuntu 20.04 Support 2021-09-20 17:24:47 -04:00
m0duspwnens
9c2ead16cc common name changes, allow cert to be managed regardless of expire date for heavy node 2021-07-07 10:22:37 -04:00
m0duspwnens
0627ca2fc2 use heavynode hostname for certs if heavynode. changes to logstash pipeline for redis if heavynode 2021-07-06 15:32:39 -04:00
weslambert
ce0b064972 Add conditional for heavynode for redis and elasticsearch 2021-07-06 14:21:29 -04:00
m0duspwnens
d9cb018a7d merge with dev, resolve conflicts 2021-04-28 10:19:01 -04:00
m0duspwnens
1d8e065902 fix salt retries - https://github.com/Security-Onion-Solutions/securityonion/issues/3948 2021-04-22 08:35:50 -04:00