d7aa7ab228
Merge pull request #15961 from Security-Onion-Solutions/reyesj2/fleet-autoconfigure
...
respect elasticfleet enable_auto_configuration setting for so-elastic…
2026-06-08 15:09:58 -05:00
fe0b68d24c
Merge pull request #15958 from Security-Onion-Solutions/reyesj2-patch-template
...
fix elasticsearch template generation issue
2026-06-08 15:07:49 -05:00
6ad345730b
respect elasticfleet enable_auto_configuration setting for so-elastic-fleet-urls-update
2026-06-08 15:02:57 -05:00
ac907ba45f
fix elasticsearch template generation issue
2026-06-05 16:42:08 -05:00
cb3631da81
Move setup-complete marker from /opt/so/conf to /opt/so/state
...
The setup-complete marker is a runtime-state file, not config, so move it
to /opt/so/state/setup-complete. Updates both writers (mark_setup_complete
in setup/so-functions and the upgrade-path state in minion/init.sls) and the
three readers (so-boot-highstate.service ConditionPathExists, boot_highstate.sls
enable gate, and the so-user_sync cron gate).
2026-06-04 15:07:27 -04:00
f5d63f585e
Merge remote-tracking branch 'origin/3/dev' into nostartupstates
2026-06-04 09:19:01 -04:00
13f8be40b5
so-boot-highstate: wait for docker before running highstate
...
Add docker.service to After= and Wants= so the boot-time highstate
starts after docker is up. Uses Wants (soft) so highstate still runs
if docker fails to start.
2026-06-04 08:46:35 -04:00
2d653b6f1b
does not need to be jinja template
2026-06-03 15:46:58 -04:00
34fee25b0c
Merge remote-tracking branch 'origin/3/dev' into nostartupstates
2026-06-03 15:44:41 -04:00
a767c79641
restore soup db init
2026-06-03 10:39:37 -04:00
61e72c89e4
postgres updates
2026-06-03 09:49:53 -04:00
d9fb7313f9
merge
2026-06-03 09:30:05 -04:00
7ca2313255
move to securityonion db
2026-06-03 09:05:23 -04:00
534f0e639d
Merge pull request #15954 from Security-Onion-Solutions/reyesj2-patch-4
...
run elastic agent regen installer script in post_to_3.2.0
2026-06-02 15:25:55 -05:00
559465b407
run elastic agent gen installers script in post_to_3.2.0
2026-06-02 15:18:00 -05:00
f9c2579261
remove logstash pipeline rename from hotfix moving to up_to_3.2.0
2026-06-02 15:18:00 -05:00
33699a914b
Merge pull request #15952 from Security-Onion-Solutions/reyesj2-patch-3
...
use so-config-backup script in soup
2026-06-02 15:02:27 -05:00
0c2d8f8973
Merge pull request #15951 from Security-Onion-Solutions/reyesj2-patch-2
...
check if there is a version or hotfix to upgrade to before verifiying elasticsearch compatibility
2026-06-02 15:02:10 -05:00
f2996fb888
use so-config-backup script in soup
2026-06-01 11:52:35 -05:00
3c533cccbc
and after free space check
2026-06-01 11:28:59 -05:00
79da9f9f2c
check if there is a version or hotfix to upgrade to before verifiying elasticsearch compatibility
2026-06-01 11:26:52 -05:00
9a70a06b3b
Merge remote-tracking branch 'origin/3/dev' into jertel/wip
2026-05-28 13:55:12 -04:00
bb8ae91d91
fix so-soc postgres bootstrap
2026-05-27 16:39:52 -04:00
93ffce98d7
add onionconfig and postgres modules to soc config
2026-05-27 15:07:25 -04:00
b2a82fec29
fix_logstash_0013_lumberjack_pipeline_name
...
Before removing from apply_hotfix function first verify that older installs < 3.1.0 are still upgradable when referencing 'so/0013_input_lumberjack_fleet.conf' via pillar. Failure to do so will prevent logstash from starting
2026-05-27 13:24:23 -05:00
79987f3659
bootstrap so-soc db in postgres during soup
2026-05-27 13:55:30 -04:00
0b4a4de609
always run logstash pipeline rename
2026-05-27 12:21:22 -05:00
0834998cca
usuable for next soup
2026-05-27 09:52:29 -05:00
473f93f0ee
check for stale logstash pipeline name in pillars
2026-05-27 09:33:15 -05:00
16055c4d88
Merge remote-tracking branch 'origin/3/dev' into jertel/wip
2026-05-27 09:18:33 -04:00
d72219c586
use multiple or combined input
2026-05-22 20:04:21 -05:00
901cbf03e4
Merge pull request #15907 from Security-Onion-Solutions/reyesj2/es-verify-compat
...
Verify compatibility for all ES nodes in the cluster
2026-05-20 14:16:41 -05:00
b485be4602
separate salt-key command from main es version compatiblity loop
2026-05-20 14:12:58 -05:00
7d13007aa9
block soup if all ES nodes are not online and reporting their ES version for compatibility check
2026-05-20 10:03:37 -05:00
d7a1b67095
use pipefail on heavynode versino command to pass through error
2026-05-20 09:16:57 -05:00
6c8997b28a
verify all heavynodes and all searchnodes are at compatible ES version before attempting an elasticsearch upgrade
2026-05-19 22:27:31 -05:00
d0aa33a255
sync elastic agent packages to fleet nodes
2026-05-19 10:50:17 -05:00
e89c820b65
Revert "use -verify flag during grid agent install to ensure agent health"
2026-05-16 09:59:14 -05:00
9ac05a6ad1
Merge pull request #15895 from Security-Onion-Solutions/reyesj2/agentinstall
...
use -verify flag during grid agent install to ensure agent health
2026-05-15 12:58:09 -05:00
ce566ba174
exclude fps
2026-05-15 11:36:46 -04:00
2635a60a8c
Merge pull request #15896 from Security-Onion-Solutions/quickfixes2
...
Make so-postgres-backup fail-safe against silent corruption
2026-05-15 09:32:15 -04:00
244a73b7a2
Make so-postgres-backup fail-safe against silent corruption
...
The dump pipeline returned gzip's exit status, so a pg_dumpall that
died mid-stream still produced a valid .gz holding a truncated dump,
written straight to the final filename. The idempotency check then
blocked retries for the day and the corrupt file counted toward
retention, evicting a good backup each day until none remained.
- set -o pipefail so a failed pg_dumpall fails the pipeline
- dump to a .tmp file and atomically rename only after success, so
the final filename appears only for a complete backup
- gzip -t integrity check before publishing
- trap-based cleanup of the temp file; sweep stale temps at startup
- run retention only after a successful backup, with a glob
restricted to finished backups
- log timestamped OK/ERROR outcomes to /opt/so/log/postgres/backup.log
2026-05-15 08:48:54 -04:00
e45ad45d73
Merge branch '3/dev' into jertel/wip
2026-05-14 18:33:40 -04:00
1189621ec5
Merge pull request #15893 from Security-Onion-Solutions/quickfixes2
2026-05-14 18:21:30 -04:00
d2524a593f
use -verify flag during grid agent install to ensure agent health
2026-05-14 17:12:02 -05:00
64731c73ba
Fix psql :var substitution in telegraf role and retention SQL
...
psql does not substitute :var references inside dollar-quoted strings,
so the DO blocks in the user and retention subcommands were receiving
literal colons and failing (silently for user, via hide_output: True).
Rewrite the conditional CREATE/ALTER ROLE with SELECT format(...) \\gexec
and guard the retention UPDATE with \\gset + \\if.
2026-05-14 17:17:49 -04:00
024fece607
Tweak for nginx upgrade
2026-05-14 17:08:57 -04:00
249b126312
Quote telegraf role env vars to survive YAML-special chars in passwords
2026-05-14 17:08:51 -04:00
8e38bff0c3
Rename telegraf_postgres.sh to so-telegraf-postgres
2026-05-14 16:55:53 -04:00
b9f2d56932
Consolidate telegraf postgres SQL into multi-mode script
...
Replace inline psql heredocs in telegraf_users.sls with subcommand
dispatcher telegraf_postgres.sh: create_db, group_role, user, retention.
2026-05-14 16:37:08 -04:00
Jorge Reyes
Josh Patterson
Jason Ertel
Mike Reeves
Mike Reeves
Josh Brower