Mike Reeves 3e02001544 Open postgres port for import role in DOCKER-USER firewall ...

When so-postgres was wired in (868cd1187), the import role's firewall
defaults were missed while every other manager-class role (manager,
managerhype, managersearch, standalone, eval) had postgres added to
their DOCKER-USER manager-hostgroup portgroups. As a result, on a
fresh import install the so-postgres container starts but tcp/5432 is
dropped at DOCKER-USER, so soc/kratos/telegraf can't reach it.

Add postgres alongside the existing influxdb entry so import nodes
match the other roles.

2026-04-29 08:48:45 -04:00

..

_beacons

…

_modules

Remove non-Oracle Linux 9 support from salt states

2026-03-16 16:58:39 -04:00

_runners

merge 2.4/dev

2025-12-02 11:16:08 -06:00

backup

Move postgres backup script and cron to the postgres states

2026-04-21 09:42:41 -04:00

bpf

update helpLink references for new documentation

2026-03-18 09:46:45 -04:00

ca

Add so-postgres Salt states and integration wiring

2026-04-08 10:58:52 -04:00

common

drop platform/digest pull resolution

2026-04-28 14:54:25 -04:00

cron

…

desktop

the great ssl refactor

2025-12-11 17:30:06 -05:00

docker

Change so-postgres final_octet to 47

2026-04-21 09:33:47 -04:00

docker_clean

…

elastalert

new elastalert options advanced

2026-03-19 17:19:42 -04:00

elastic-fleet-package-registry

ensure bool sliders for each state:enabled annotation

2026-03-19 12:35:38 -04:00

elasticagent

ensure bool sliders for each state:enabled annotation

2026-03-19 12:35:38 -04:00

elasticfleet

check current fleet policy cert against cert on disk

2026-04-28 13:34:39 -05:00

elasticsearch

typo

2026-04-24 09:24:58 -05:00

firewall

Open postgres port for import role in DOCKER-USER firewall

2026-04-29 08:48:45 -04:00

global

Remove helpLink for influxdb in soc_global.yaml

2026-04-23 13:56:41 -04:00

healthcheck

…

host

update helpLink references for new documentation

2026-03-18 09:46:45 -04:00

hydra

ensure bool sliders for each state:enabled annotation

2026-03-19 12:35:38 -04:00

hypervisor

merge 2.4/dev

2025-12-02 11:16:08 -06:00

idh

Remove hardcoded path

2026-03-23 16:26:56 -04:00

influxdb

define options in annotation files

2026-04-09 10:18:36 -04:00

kafka

define options in annotation files

2026-04-09 10:18:36 -04:00

kibana

update kibana discardCorruptObjects version

2026-04-22 20:38:13 -05:00

kratos

readonly soc and kratos enabled

2026-04-24 13:56:35 -04:00

libvirt

create libvirt volumes directory

2025-10-30 11:02:36 -04:00

logrotate

remove steno

2026-03-06 15:45:36 -05:00

logstash

ensure bool sliders for each state:enabled annotation

2026-03-19 12:35:38 -04:00

manager

Merge pull request #15749 from Security-Onion-Solutions/feature/postgres

2026-04-28 10:15:47 -04:00

motd

…

nginx

Merge pull request #15658 from Security-Onion-Solutions/jertel/wip

2026-03-23 09:55:31 -04:00

ntp

update helpLink references for new documentation

2026-03-18 09:46:45 -04:00

orch

Split postgres auth from per-minion telegraf creds

2026-04-22 10:55:15 -04:00

patch

ensure bool sliders for patch

2026-03-19 14:39:10 -04:00

pcap

cleanup steno. sensor run pcap.cleanup

2026-03-10 16:09:32 -04:00

pipeline

…

postgres

Split postgres auth from per-minion telegraf creds

2026-04-22 10:55:15 -04:00

reactor

fix sominion_setup reactor

2026-04-27 14:30:41 -04:00

redis

ensure bool sliders for each state:enabled annotation

2026-03-19 12:35:38 -04:00

registry

ensure bool sliders for each state:enabled annotation

2026-03-19 12:35:38 -04:00

repo/client

Remove non-Oracle Linux 9 support from salt states

2026-03-16 16:58:39 -04:00

salt

Move per-minion telegraf cred provisioning into so-minion

2026-04-21 15:34:15 -04:00

sensor

update helpLink references for new documentation

2026-03-18 09:46:45 -04:00

sensoroni

ensure bool sliders sensoroni

2026-03-19 14:41:49 -04:00

setup/virt

…

soc

Merge pull request #15749 from Security-Onion-Solutions/feature/postgres

2026-04-28 10:15:47 -04:00

ssl

dont remove ca in ssl.remove

2026-01-07 14:14:57 -05:00

stig

update stig profile v1r3

2026-03-23 14:04:48 -05:00

storage

remove .log extension

2025-10-14 11:03:00 -04:00

strelka

ensure bool sliders strelka

2026-03-19 14:46:49 -04:00

suricata

define options in annotation files

2026-04-09 10:18:36 -04:00

systemd

…

tcpreplay

…

telegraf

Split postgres auth from per-minion telegraf creds

2026-04-22 10:55:15 -04:00

utility

…

vars

Move telegraf_output from global pillar to telegraf pillar

2026-04-20 16:03:02 -04:00

versionlock

update helpLink references for new documentation

2026-03-18 09:46:45 -04:00

vm

…

zeek

Fix JA4+ license link in soc_zeek.yaml

2026-04-06 10:12:37 -04:00

allowed_states.map.jinja

Merge pull request #15749 from Security-Onion-Solutions/feature/postgres

2026-04-28 10:15:47 -04:00

schedule.sls

…

top.sls

Add so-postgres Salt states and integration wiring

2026-04-08 10:58:52 -04:00