Josh Patterson
c755c8bc61
Gracefully skip SSL cert states when the CA is unavailable
...
The *.ssl x509.certificate_managed states hard-failed the state run when
the CA/manager minion was unreachable (ca_server did not respond), and the
paired private_key_managed states then failed on the prereq requisite. The
- timeout: 30 on these states was a no-op (Salt has no per-state timeout
requisite; only retry accepts until/attempts/interval/splay).
Add an onlyif CA-reachability gate to every certificate_managed state so the
state is skipped as a clean success when the CA does not answer a peer
test.ping within 3s and the cert already exists. When the cert is missing
(initial provisioning) the state still runs so the existing retry waits for
the CA. The reachability command is centralized as CA.reachable_cmd in
ca/map.jinja, and the master peer config now permits test.ping. The no-op
- timeout: 30 is removed from all cert states.
2026-07-16 13:46:12 -04:00
reyesj2
af53dcda1b
Remove references to kafkanode
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2024-04-11 15:32:00 -04:00
reyesj2
446f1ffdf5
merge 2.4/dev
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2024-03-25 13:55:48 -04:00
Josh Brower
feabb7c51f
Merge remote-tracking branch 'origin/2.4/dev' into feature/fleet-artifacts
2024-02-10 10:57:46 -05:00
m0duspwnens
5903ae596c
move suricata rules to /opt/so/rules/nids/suri
2024-02-09 09:47:23 -05:00
Josh Brower
503a09f150
Merge remote-tracking branch 'origin/2.4/dev' into feature/fleet-artifacts
2024-02-08 09:45:21 -05:00
m0duspwnens
f97d0f2f36
add /opt/so/rules/ to files_roots
2024-02-07 09:25:56 -05:00
Josh Brower
cfc33b1a34
Sync Elastic Agent Artifacts
2024-01-28 10:12:25 -05:00
reyesj2
8cf29682bb
Update to merge in 2.4/dev
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2023-11-29 13:41:23 -05:00
reyesj2
86dc7cc804
Kafka init
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2023-11-29 13:34:25 -05:00
Mike Reeves
b3b67acf07
Add memory restrictions
2023-11-01 15:11:54 -04:00
m0duspwnens
3d34a49e44
change to new local ports file
2023-02-08 13:21:48 -05:00
m0duspwnens
31daeef30d
2.4 fw changes
2023-02-08 11:01:26 -05:00
Jason Ertel
9885f418fa
move Kratos DB to /nsm
2022-12-14 14:22:55 -05:00
Josh Patterson and GitHub
02f1d24ea6
remove minion hg
2022-09-23 08:40:25 -04:00
m0duspwnens
06d3681cec
2.4/firewall
2022-09-22 13:39:10 -04:00
m0duspwnens
2995ae32bd
2.4 fw changes
2022-09-22 10:49:26 -04:00
Mike Reeves
2bd9dd80e2
Move In Day
2022-09-07 09:06:25 -04:00
Josh Brower
ac8e06e79b
Initial support - IDH Node
2022-02-08 09:08:52 -05:00
m0duspwnens
96666ab307
add receiver node
2021-12-07 10:19:32 -05:00
Wes Lambert
a9b250c0f4
Add EG firewall config
2021-10-13 21:37:59 +00:00
m0duspwnens
7b68c1bc9b
fix typo
2021-06-01 17:45:52 -04:00
m0duspwnens
867613669d
changes for syncing users
2021-06-01 17:01:03 -04:00
m0duspwnens
bfaffbc87e
add reactor and beacon for sqlite db
2021-06-01 11:15:28 -04:00
m0duspwnens
f07e583013
increase salt logging to info
2021-01-08 16:33:38 -05:00
m0duspwnens
6172268661
move salt master config file, copy salt-master service file and enable service restarts - https://github.com/Security-Onion-Solutions/securityonion/issues/1489
2020-10-09 13:27:46 -04:00
m0duspwnens
76c98200f3
analyst node changes
2020-10-01 16:21:51 -04:00
Doug Burks and GitHub
13ce439678
Update README
2020-08-29 06:52:26 -04:00
Doug Burks and GitHub
c21b347549
Update README
2020-08-29 04:46:00 -04:00
Doug Burks and GitHub
f6f990ca9f
Update README
2020-08-28 16:44:41 -04:00
m0duspwnens
aa60ec8e5a
remove space
2020-08-27 15:07:45 -04:00
m0duspwnens
dbb1390c42
move README to /
2020-08-27 14:32:51 -04:00
m0duspwnens
5a0df27193
rename importpcap node to import
2020-08-12 10:27:15 -04:00
m0duspwnens
86b118ba1a
add importpcap to local assigned hostgroups yaml
2020-08-07 15:00:32 -04:00
m0duspwnens
3cf31e2460
https://github.com/Security-Onion-Solutions/securityonion/issues/404
2020-07-09 11:27:06 -04:00
weslambert and GitHub
bbc752b6d9
Fix my typo
2020-07-02 13:32:19 -04:00
Wes Lambert
ed60d48c81
Add ES REST API option for so-allow
2020-06-29 18:49:16 +00:00
Wes Lambert
f7eacc2b05
Add FW config for Strelka frontend
2020-06-23 18:47:23 +00:00
m0duspwnens
51e500f521
add firewall rules for fleet standalone
2020-06-15 13:50:37 -04:00
m0duspwnens
e25560bf6b
add missing roles fire firewall
2020-06-12 15:37:43 -04:00
m0duspwnens
d02bff22ac
adding fw rules to master nodes for wazuh and syslog
2020-06-12 11:27:28 -04:00
m0duspwnens
f92ad7d671
handle undefined local values - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/641
2020-06-10 16:34:37 -04:00
m0duspwnens
f89baff3d7
adding ability to assign hostgroup to single minion - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/641
2020-06-10 14:05:19 -04:00
m0duspwnens
7957b51409
change master roots priority to local
2020-05-29 10:57:43 -04:00
m0duspwnens
fafb469b5c
change from default to local - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/749
2020-05-26 11:59:00 -04:00
m0duspwnens
d0242c1da6
update references of /opt/so/saltstack to /opt/so/saltstack/default. use var default_salt_dir where appropriate - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/749
2020-05-21 10:54:47 -04:00
m0duspwnens
57570fb740
move salt logs to /opt/so/logs - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/530
2020-04-09 13:27:32 -04:00
m0duspwnens
ec60b7a2d4
changing back from beacon to scheduled jobs for healthcheck
2020-04-02 15:22:20 -04:00
m0duspwnens
9acaa514cf
monitoring zeek - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/90
2020-04-01 13:06:37 -04:00
Josh Brower
9bcba41882
Feature/Fleet-Standalone
2020-03-24 20:57:24 -04:00
Josh Patterson
reyesj2
Josh Brower
Mike Reeves
Jason Ertel
Wes Lambert
Doug BurksandGitHub