Merge pull request #15481 from Security-Onion-Solutions/cogburn/openai

Config Tweaks for AI
Merge pull request #15482 from Security-Onion-Solutions/jertel/wip
2026-02-16 04:03:35 +01:00 · 2026-02-13 11:50:04 -07:00 · 2026-02-12 16:08:54 -05:00 · 2026-02-12 16:04:04 -05:00 · 2026-02-12 13:19:57 -07:00 · 2026-02-09 12:22:02 -05:00
3 changed files with 13 additions and 11 deletions
--- a/salt/global/soc_global.yaml
+++ b/salt/global/soc_global.yaml
@@ -32,7 +32,7 @@ global:
    readonly: True
    advanced: True
  url_base:
-    description: Used for handling of authentication cookies. 
+    description: The base URL for the Security Onion Console. Must be accessible by all nodes in the grid, as well as all analysts. Also used for handling of authentication cookies. Can be an IP address or a hostname/FQDN. Do not include protocol (http/https) or port number.
    global: True
  airgap:
    description: Airgapped systems do not have network connectivity to the internet. This setting represents how this grid was configured during initial setup. While it is technically possible to manually switch systems between airgap and non-airgap, there are some nuances and additional steps involved. For that reason this setting is marked read-only. Contact your support representative for guidance if there is a need to change this setting.
--- a/salt/soc/defaults.yaml
+++ b/salt/soc/defaults.yaml
@@ -1518,6 +1518,7 @@ soc:
          anonymousCidr:
          apiKey:
        staticrbac:
+          defaultRole: ""
          roleFiles:
            - rbac/permissions
            - rbac/roles
@@ -2662,18 +2663,11 @@ soc:
          thresholdColorRatioMax: 1
          availableModels:
            - id: sonnet-4.5
-              displayName: Claude Sonnet 4.5 ($$$)
+              displayName: Claude Sonnet 4.5 
              origin: USA
              contextLimitSmall: 200000
              contextLimitLarge: 1000000
              lowBalanceColorAlert: 500000
              enabled: true
              adapter: SOAI
-            - id: qwen-235b
-              displayName: QWEN 235B ($)
-              origin: China
-              contextLimitSmall: 256000
-              contextLimitLarge: 256000
-              lowBalanceColorAlert: 500000
-              enabled: true
-              adapter: SOAI
+            
--- a/salt/soc/soc_soc.yaml
+++ b/salt/soc/soc_soc.yaml
@@ -455,6 +455,11 @@ soc:
            global: True
            advanced: True
            forcedType: int
+        staticrbac:
+          defaultRole:
+            description: "Default role for new users that have not been assigned a role. When a role is specified, an attempt will be made to permanently assign the role to the user once the user accesses SOC. The role name must match exactly the name of an existing RBAC role. Standard system roles include: limited-auditor, limited-analyst, auditor, analyst, superuser"
+            global: True
+            advanced: False
        strelkaengine:
          aiRepoUrl:
            description: URL to the AI repository. This is used to pull in AI models for use in Strelka rules.
@@ -660,10 +665,11 @@ soc:
            global: True
            advanced: True
          adapters:
-            description: Configuration for AI adapters used by the Onion AI assistant.
+            description: Configuration for AI adapters used by the Onion AI assistant. Please see documentation for help on which fields are required for which protocols.
            global: True
            advanced: True
            forcedType: "[]{}"
+            helpLink: assistant.html
            syntax: json
            uiElements:
            - field: name
@@ -750,6 +756,8 @@ soc:
            - field: lowBalanceColorAlert
              label: Low Balance Color Alert
              forcedType: int
+            - field: adapter
+              label: Adapter
              required: True
            - field: enabled
              label: Enabled
Author	SHA1	Message	Date
coreyogburn	4d6b2de374	Merge pull request #15481 from Security-Onion-Solutions/cogburn/openai Config Tweaks for AI	2026-02-13 11:50:04 -07:00
Jason Ertel	2d74002e9e	Merge pull request #15482 from Security-Onion-Solutions/jertel/wip clarify url_base description	2026-02-12 16:08:54 -05:00
Jason Ertel	04a757dde0	clarify url_base description	2026-02-12 16:04:04 -05:00
Corey Ogburn	e7e379ce82	Config Tweaks for AI Add missing adapter field to availableModels. Include call out to docs to help explain which fields are required for which adapters. TODO: update docs	2026-02-12 13:19:57 -07:00
Mike Reeves	fe0178b8ac	Merge pull request #15473 from Security-Onion-Solutions/TOoSmOotH-patch-3 Remove QWEN 235B model from defaults.yaml	2026-02-09 12:22:02 -05:00
Mike Reeves	0661c3af1a	Remove QWEN 235B model from defaults.yaml Removed QWEN 235B model and its associated details from defaults.yaml.	2026-02-09 11:47:58 -05:00
Jason Ertel	4778bd6680	Merge pull request #15472 from Security-Onion-Solutions/jertel/wip default roles	2026-02-09 09:48:46 -05:00
Jason Ertel	5033462098	default roles	2026-02-09 09:29:07 -05:00
Jorge Reyes	6b4b1d74fd	Merge pull request #15468 from Security-Onion-Solutions/reyesj2/iso-soup don't set is_airgap when using nonairgap_useiso: not a true airgap sy…	2026-02-06 13:16:51 -06:00
Jorge Reyes	dc4cd93c02	Merge pull request #15465 from Security-Onion-Solutions/reyesj2/iso-soup allow network installs to use ISO for faster soupin	2026-02-06 12:52:55 -06:00