securityonion/salt/hypervisor/map.jinja

{# Copyright Security Onion Solutions LLC and/or licensed to Security Onion Solutions LLC under one
   or more contributor license agreements. Licensed under the Elastic License 2.0 as shown at 
   https://securityonion.net/license; you may not use this file except in compliance with the
   Elastic License 2.0. 
   
   Note: Per the Elastic License 2.0, the second limitation states:

    "You may not move, change, disable, or circumvent the license key functionality
     in the software, and you may not remove or obscure any functionality in the
     software that is protected by the license key." #}

{% if 'hvn' in salt['pillar.get']('features', []) %}

{# Import defaults.yaml for model hardware capabilities #}
{% import_yaml 'hypervisor/defaults.yaml' as DEFAULTS %}

{# Get hypervisor nodes from pillar #}
{% set NODES = salt['pillar.get']('hypervisor:nodes', {}) %}

{# Build enhanced HYPERVISORS structure #}
{% set HYPERVISORS = {} %}
{% do salt.log.info('salt/hypervisor/map.jinja: NODES content: ' ~ NODES | tojson) %}
{% for role, hypervisors in NODES.items() %}
  {% do salt.log.info('salt/hypervisor/map.jinja: Processing role: ' ~ role) %}
  {% do HYPERVISORS.update({role: {}}) %}
  {% for hypervisor, config in hypervisors.items() %}
    {% do salt.log.info('salt/hypervisor/map.jinja: Processing hypervisor: ' ~ hypervisor ~ ' with config: ' ~ config | tojson) %}
    {# Get model from cached grains using Salt runner #}
    {% set grains = salt.saltutil.runner('cache.grains', tgt=hypervisor ~ '_*', tgt_type='glob') %}
    {% set model = '' %}
    {% if grains %}
      {% set minion_id = grains.keys() | first %}
      {% set model = grains[minion_id].get('sosmodel', '') %}
    {% endif %}
    {% set model_config = DEFAULTS.hypervisor.model.get(model, {}) %}
    
    {# Get VM list from VMs file #}
    {% set vms = {} %}
    {% set vm_list = [] %}
    {% set vm_list_file = 'hypervisor/hosts/' ~ hypervisor ~ 'VMs' %}
    {% do salt.log.info('salt/hypervisor/map.jinja: VM list file: ' ~ vm_list_file) %}
    {% import_json vm_list_file as vm_list %}
    {% if vm_list %}
      {% do salt.log.info('salt/hypervisor/map.jinja: VM list content: ' ~ vm_list | tojson) %}
    {% else %}
      {# we won't get here if the vm_list_file doesn't exist because we will get TemplateNotFound on the import_json #}
      {% do salt.log.info('salt/hypervisor/map.jinja: VM list empty: ' ~ vm_list_file) %}
    {% endif %}
    
    {# Load status and configuration for each VM #}
    {% for vm in vm_list %}
      {# Get VM details from list entry #}
      {% set hostname = vm.get('hostname', '') %}
      {% set role = vm.get('role', '') %}
      {% do salt.log.info('salt/hypervisor/map.jinja: Processing VM - hostname: ' ~ hostname ~ ', role: ' ~ role) %}
      
      {# Load VM configuration from config file #}
      {% set vm_file = 'hypervisor/hosts/' ~ hypervisor ~ '/' ~ hostname ~ '_' ~ role %}
      {% do salt.log.info('salt/hypervisor/map.jinja: VM config file: ' ~ vm_file) %}
      {% import_json vm_file as vm_state %}
      {% if vm_state %}
        {% do salt.log.info('salt/hypervisor/map.jinja: VM config content: ' ~ vm_state | tojson) %}
        {% set vm_data = {'config': vm_state.config} %}
        
        {# Load VM status from status file #}
        {% set status_file = vm_file ~ '.status' %}
        {% do salt.log.info('salt/hypervisor/map.jinja: VM status file: ' ~ status_file) %}
        {% import_json status_file as status_data %}
        {% if status_data %}
          {% do salt.log.info('salt/hypervisor/map.jinja: VM status content: ' ~ status_data | tojson) %}
          {% do vm_data.update({'status': status_data}) %}
        {% else %}
          {% do salt.log.info('salt/hypervisor/map.jinja: Status file empty: ' ~ status_file) %}
          {% do vm_data.update({
            'status': {
              'status': '',
              'details': null,
              'timestamp': ''
            }
          }) %}
        {% endif %}
        {% do vms.update({hostname: vm_data}) %}
      {% else %}
        {% do salt.log.info('salt/hypervisor/map.jinja: Config file empty: ' ~ vm_file) %}
      {% endif %}
    {% endfor %}
    
    {# Merge node config with model capabilities and VM states #}
    {% do HYPERVISORS[role].update({
      hypervisor: {
        'config': config,
        'model': model,
        'hardware': model_config.get('hardware', {}),
        'vms': vms
      }
    }) %}
  {% endfor %}
{% endfor %}

{% else %}

{% do salt.log.error(
  'Hypervisor nodes are a feature supported only for customers with a valid license.'
  'Contact Security Onion Solutions, LLC via our website at https://securityonionsolutions.com'
  'for more information about purchasing a license to enable this feature.'
) %}

{% endif %}