mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2026-10-29 08:28:29 +01:00
Mike Reeves
11c8fe3093
Anchor the grid CA and blocklist the eMudhra roots in the host trust store (new ca.trust state, also used by the desktop role), then mount the extracted store into each container instead of the frozen copies made by so-catrust. Containers restart when the host trust changes.
14 lines
453 B
YAML+Jinja
14 lines
453 B
YAML+Jinja
# Copyright Security Onion Solutions LLC and/or licensed to Security Onion Solutions LLC under one
|
|
# or more contributor license agreements. Licensed under the Elastic License 2.0 as shown at
|
|
# https://securityonion.net/license; you may not use this file except in compliance with the
|
|
# Elastic License 2.0.
|
|
|
|
{% from 'vars/globals.map.jinja' import GLOBALS %}
|
|
|
|
include:
|
|
{% if GLOBALS.is_manager %}
|
|
- ca.server
|
|
{% endif %}
|
|
- ca.trustca
|
|
- ca.trust
|