mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-15 21:52:47 +01:00
086ebe1a7c
Setup config.map.jinja to update broker / controller / combined node types Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
66 lines
3.0 KiB
Django/Jinja
66 lines
3.0 KiB
Django/Jinja
{# Copyright Security Onion Solutions LLC and/or licensed to Security Onion Solutions LLC under one
|
|
or more contributor license agreements. Licensed under the Elastic License 2.0 as shown at
|
|
https://securityonion.net/license; you may not use this file except in compliance with the
|
|
Elastic License 2.0. #}
|
|
{% from 'kafka/map.jinja' import KAFKAMERGED %}
|
|
{% from 'vars/globals.map.jinja' import GLOBALS %}
|
|
|
|
{% set KAFKA_NODES_PILLAR = salt['pillar.get']('kafka:nodes') %}
|
|
|
|
{# Create list of KRaft controllers #}
|
|
{% set controllers = [] %}
|
|
{% for node, values in KAFKA_NODES_PILLAR.items() %}
|
|
{% if 'controller' in values['role'] %}
|
|
{% do controllers.append(values.nodeid ~ "@" ~ node ~ ":9093") %}
|
|
{% endif %}
|
|
{% endfor %}
|
|
|
|
{% set kafka_controller_quorum_voters = ','.join(controllers) %}
|
|
|
|
{# By default all Kafka eligible nodes are given the role of broker, except for
|
|
grid MANAGER (broker,controller) until overridden through SOC UI #}
|
|
{% set node_type = salt['pillar.get']('kafka:nodes:'+ GLOBALS.hostname + ':role') %}
|
|
|
|
{# Generate server.properties for 'broker' , 'controller', 'broker,controller' node types
|
|
anything above this line is a configuration needed for ALL Kafka nodes #}
|
|
{% if node_type == 'broker' %}
|
|
{% do KAFKAMERGED.config.broker.update({'advertised_x_listeners': 'BROKER://'+ GLOBALS.node_ip +':9092' }) %}
|
|
{% do KAFKAMERGED.config.broker.update({'controller_x_quorum_x_voters': kafka_controller_quorum_voters }) %}
|
|
{% do KAFKAMERGED.config.broker.update({'node_x_id': salt['pillar.get']('kafka:nodes:'+ GLOBALS.hostname +':nodeid') }) %}
|
|
|
|
{% endif %}
|
|
|
|
{% if node_type == 'controller' %}
|
|
{% do KAFKAMERGED.config.controller.update({'controller_x_quorum_x_voters': kafka_controller_quorum_voters }) %}
|
|
{% do KAFKAMERGED.config.controller.update({'node_x_id': salt['pillar.get']('kafka:nodes:'+ GLOBALS.hostname +':nodeid') }) %}
|
|
|
|
{% endif %}
|
|
|
|
{# Kafka nodes of this type are not recommended for use outside of development / testing. #}
|
|
{% if node_type == 'broker,controller' %}
|
|
{% do KAFKAMERGED.config.broker.update({'advertised_x_listeners': 'BROKER://'+ GLOBALS.node_ip +':9092' }) %}
|
|
{% do KAFKAMERGED.config.broker.update({'controller_x_quorum_x_voters': kafka_controller_quorum_voters }) %}
|
|
{% do KAFKAMERGED.config.broker.update({'node_x_id': salt['pillar.get']('kafka:nodes:'+ GLOBALS.hostname +':nodeid') }) %}
|
|
{% do KAFKAMERGED.config.broker.update({'process_x_roles': 'broker,controller' }) %}
|
|
|
|
{% do KAFKAMERGED.config.broker.update({
|
|
'listeners':
|
|
KAFKAMERGED.config.broker.listeners
|
|
+ ','
|
|
+ KAFKAMERGED.config.controller.listeners })
|
|
%}
|
|
|
|
{% do KAFKAMERGED.config.broker.update({
|
|
'listener_x_security_x_protocol_x_map':
|
|
KAFKAMERGED.config.broker.listener_x_security_x_protocol_x_map
|
|
+ ','
|
|
+ KAFKAMERGED.config.controller.listener_x_security_x_protocol_x_map })
|
|
%}
|
|
|
|
{% endif %}
|
|
|
|
{% if 'broker' in node_type %}
|
|
{% set KAFKACONFIG = KAFKAMERGED.config.broker %}
|
|
{% else %}
|
|
{% set KAFKACONFIG = KAFKAMERGED.config.controller %}
|
|
{% endif %} |