mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2026-08-24 08:28:21 +02:00
Josh Patterson
d3da6b3939
The per-minion highstate schedule moved from 15 minutes to 120 minutes (salt:schedule:highstate_interval_minutes), so after soup upgrades the manager, non-manager minions could otherwise sit on the old version for up to ~2.5 hours (interval + splay) before their scheduled highstate applies the new code. Add so-grid-highstate, a detached best-effort driver soup fires at the end of an upgrade. It uses the existing orch.push_batch runner to highstate the grid in role tiers (searchnodes/heavynodes -> receivers -> the rest), skips single-node grids, and when Salt itself was upgraded first runs an untiered pass and waits for minions to reconnect on the new salt-minion before the tiered pass. soup gains a push_grid_highstate() helper (guarded, launched via setsid nohup so an SSH drop can't kill it) called on both the hotfix and full-upgrade paths, wires the previously-dead -b flag through as --batch (now accepting N or N%), and updates the distributed-deployment message to reflect the active push.