Add version 2.4.201 to discussion template

suppress config diffs to avoid false positive errors
exempt kratos online check
2026-01-17 05:31:34 +01:00 · 2026-01-15 14:38:40 -05:00 · 2026-01-06 12:50:18 -05:00 · 2026-01-06 09:47:35 -05:00 · 2025-12-24 14:39:55 -05:00 · 2025-12-16 12:08:14 -07:00
7 changed files with 10 additions and 2 deletions
--- a/.github/DISCUSSION_TEMPLATE/2-4.yml
+++ b/.github/DISCUSSION_TEMPLATE/2-4.yml
@@ -33,6 +33,8 @@ body:
        - 2.4.180
        - 2.4.190
        - 2.4.200
+        - 2.4.201
+        - 2.4.210
        - Other (please provide detail below)
    validations:
      required: true
--- a/2
+++ b/2
@@ -1 +1 @@
-2.4.200
+2.4.210
--- a/salt/common/tools/sbin/so-log-check
+++ b/salt/common/tools/sbin/so-log-check
@@ -129,6 +129,7 @@ if [[ $EXCLUDE_STARTUP_ERRORS == 'Y' ]]; then
    EXCLUDED_ERRORS="$EXCLUDED_ERRORS|responded with status-code 503" # telegraf getting 503 from ES during startup
    EXCLUDED_ERRORS="$EXCLUDED_ERRORS|process_cluster_event_timeout_exception" # logstash waiting for elasticsearch to start
    EXCLUDED_ERRORS="$EXCLUDED_ERRORS|not configured for GeoIP"     # SO does not bundle the maxminddb with Zeek
+    EXCLUDED_ERRORS="$EXCLUDED_ERRORS|HTTP 404: Not Found"          # Salt loops until Kratos returns 200, during startup Kratos may not be ready
 fi

 if [[ $EXCLUDE_FALSE_POSITIVE_ERRORS == 'Y' ]]; then
--- a/salt/kratos/config.sls
+++ b/salt/kratos/config.sls
@@ -75,6 +75,7 @@ kratosconfig:
    - group: 928
    - mode: 600
    - template: jinja
+    - show_changes: False
    - defaults:
        KRATOSMERGED: {{ KRATOSMERGED }}

--- a/salt/kratos/defaults.yaml
+++ b/salt/kratos/defaults.yaml
@@ -46,6 +46,7 @@ kratos:
          ui_url: https://URL_BASE/
        login:
          ui_url: https://URL_BASE/login/
+          lifespan: 60m
        error:
          ui_url: https://URL_BASE/login/
        registration:
--- a/salt/kratos/soc_kratos.yaml
+++ b/salt/kratos/soc_kratos.yaml
@@ -182,6 +182,10 @@ kratos:
            global: True
            advanced: True
            helpLink: kratos.html
+          lifespan: 
+            description: Defines the duration that a login form will remain valid.
+            global: True
+            helpLink: kratos.html
        error:
          ui_url: 
            description: User accessible URL containing the Security Onion login page. Leave as default to ensure proper operation.
--- a/salt/soc/soc_soc.yaml
+++ b/salt/soc/soc_soc.yaml
@@ -652,7 +652,6 @@ soc:
        assistant:
          apiUrl:
            description: The URL of the AI gateway.
-            advanced: True
            global: True
          healthTimeoutSeconds:
            description: Timeout in seconds for the Onion AI health check.
Author	SHA1	Message	Date
Jason Ertel	4f59e46235	Add version 2.4.201 to discussion template	2026-01-15 14:38:40 -05:00
Jason Ertel	5028729e4c	suppress config diffs to avoid false positive errors	2026-01-06 12:50:18 -05:00
Jason Ertel	2d705e7caa	exempt kratos online check	2026-01-06 09:47:35 -05:00
Jason Ertel	b05de22f58	expose login form lifespan in config scr	2025-12-24 14:39:55 -05:00
coreyogburn	1d63269883	Merge pull request #15323 from Security-Onion-Solutions/cogburn/non-advanced-apiurl Un-Advanced Assistant ApiUrl	2025-12-16 12:08:14 -07:00
Corey Ogburn	dd8027480b	Un-Advanced Assistant ApiUrl	2025-12-16 12:02:01 -07:00
Mike Reeves	c45bd77e44	Merge pull request #15320 from Security-Onion-Solutions/TOoSmOotH-patch-1 Update VERSION	2025-12-16 11:25:35 -05:00
Mike Reeves	032e0abd61	Update 2-4.yml	2025-12-16 11:23:53 -05:00
Mike Reeves	8509d1e454	Update VERSION	2025-12-16 11:23:12 -05:00
@@ -1 +1 @@
 .4.200
 .4.210