Mike Reeves 02394acf69 Use the host CA trust store for sensor, strelka and idh containers ...

Mount the host trust store into zeek, suricata, tcpreplay, the strelka
containers and idh, and restart them when it changes. Point the Python
requests clients in strelka-backend and idh at it instead of certifi.

Remove the frozen /opt/so/conf/ca bundles from every node in ca.trust
rather than only on the manager in soup.

2026-10-27 16:24:33 -04:00

..

_beacons

Revert "Fix/auto apply state queue"

2026-10-05 17:43:08 -04:00

_modules

…

_runners

…

backup

use so-config-backup script in soup

2026-06-01 11:52:35 -05:00

bpf

…

ca

Use the host CA trust store for sensor, strelka and idh containers

2026-10-27 16:24:33 -04:00

common

new destination timeout annotation; fix fp

2026-10-08 10:46:15 -04:00

cron

…

desktop

Use the host CA trust store for all grid containers

2026-10-27 15:08:21 -04:00

docker

upgrade docker to 29.8.1 and containerd.io to 2.3.6

2026-10-02 12:03:04 -04:00

docker_clean

prune images if so-docker-prune exists

2026-05-08 10:13:15 -04:00

elastalert

Use the host CA trust store for all grid containers

2026-10-27 15:08:21 -04:00

elastic-fleet-package-registry

Use the host CA trust store for all grid containers

2026-10-27 15:08:21 -04:00

elasticagent

Use the host CA trust store for all grid containers

2026-10-27 15:08:21 -04:00

elasticfleet

Use the host CA trust store for all grid containers

2026-10-27 15:08:21 -04:00

elasticsearch

Use the host CA trust store for all grid containers

2026-10-27 15:08:21 -04:00

firewall

Isolate the Kratos admin API on a dedicated soauth docker network

2026-09-09 16:09:00 -04:00

global

Move global.push config to salt.auto_apply

2026-06-24 15:17:48 -04:00

healthcheck

…

host

…

hydra

Use the host CA trust store for all grid containers

2026-10-27 15:08:21 -04:00

hypervisor

FIX: install /usr/sbin management scripts as root

2026-09-16 10:34:20 -04:00

idh

Use the host CA trust store for sensor, strelka and idh containers

2026-10-27 16:24:33 -04:00

influxdb

Use the host CA trust store for all grid containers

2026-10-27 15:08:21 -04:00

kafka

Use the host CA trust store for all grid containers

2026-10-27 15:08:21 -04:00

kibana

Use the host CA trust store for all grid containers

2026-10-27 15:08:21 -04:00

kratos

Use the host CA trust store for all grid containers

2026-10-27 15:08:21 -04:00

libvirt

FIX: install /usr/sbin management scripts as root

2026-09-16 10:34:20 -04:00

logrotate

Merge remote-tracking branch 'origin/3/dev' into rotatehype

2026-08-28 09:26:36 -04:00

logstash

Use the host CA trust store for all grid containers

2026-10-27 15:08:21 -04:00

manager

Use the host CA trust store for sensor, strelka and idh containers

2026-10-27 16:24:33 -04:00

motd

…

nginx

Use the host CA trust store for all grid containers

2026-10-27 15:08:21 -04:00

ntp

…

orch

Revert "Fix/auto apply state queue"

2026-10-05 17:43:08 -04:00

patch

ensure bool sliders for patch

2026-03-19 14:39:10 -04:00

pcap

…

pipeline

…

postgres

Use the host CA trust store for all grid containers

2026-10-27 15:08:21 -04:00

reactor

Revert "Fix/auto apply state queue"

2026-10-05 17:43:08 -04:00

redis

Use the host CA trust store for all grid containers

2026-10-27 15:08:21 -04:00

registry

Use the host CA trust store for all grid containers

2026-10-27 15:08:21 -04:00

repo/client

add missing comma

2026-10-02 12:03:04 -04:00

salt

FIX: install /usr/sbin management scripts as root

2026-09-16 10:34:20 -04:00

sensor

FIX: install /usr/sbin management scripts as root

2026-09-16 10:34:20 -04:00

sensoroni

Use the host CA trust store for all grid containers

2026-10-27 15:08:21 -04:00

setup/virt

Write setup-complete marker on non-manager nodes

2026-08-19 11:39:47 -04:00

soc

Use the host CA trust store for all grid containers

2026-10-27 15:08:21 -04:00

ssl

…

stig

stg profile update - breaks so-elastic-agent / so-elastic-fleet containers

2026-10-08 09:54:35 -05:00

storage

…

strelka

Use the host CA trust store for sensor, strelka and idh containers

2026-10-27 16:24:33 -04:00

suricata

Use the host CA trust store for sensor, strelka and idh containers

2026-10-27 16:24:33 -04:00

systemd

…

tcpreplay

Use the host CA trust store for sensor, strelka and idh containers

2026-10-27 16:24:33 -04:00

telegraf

Use the host CA trust store for all grid containers

2026-10-27 15:08:21 -04:00

vars

Isolate the Hydra admin API on the soauth docker network

2026-09-17 16:58:49 -04:00

versionlock

…

vm

…

zeek

Use the host CA trust store for sensor, strelka and idh containers

2026-10-27 16:24:33 -04:00

allowed_states.map.jinja

remove outdated eval script and associated salt utility state

2026-07-01 11:12:39 -05:00

top.sls

Merge remote-tracking branch 'origin/3/dev' into saltthangs

2026-07-02 10:27:54 -04:00