securityonion

mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-05-09 12:52:38 +02:00

Files

T

Mike Reeves dbf4fb66a4 Clean up postgres telegraf cred on so-minion delete

Paired with the add path in add_telegraf_to_minion: when a minion is
removed, drop its entry from the aggregate postgres pillar and drop the
matching so_telegraf_<safe> role from the database. Without this, stale
entries and DB roles accumulate over time.

Makes rotate-password and compromise-recovery both a clean delete+add:

  so-minion -o=delete -m=<id>
  so-minion -o=add    -m=<id>

The first call drops the role and clears the aggregate pillar; the
second generates a brand-new password.

The cleanup is best-effort — if so-postgres isn't running or the DROP
ROLE fails (e.g., the role owns unexpected objects), we log a warning
and continue so the minion delete itself never gets blocked by postgres
state. Admins can mop up stray roles manually if that happens.

2026-04-21 15:43:01 -04:00

so-allow

Move files out of common

2023-05-02 09:40:02 -04:00

so-client

fix health check for new hydra version

2026-03-16 18:43:36 -04:00

so-deny

Move files out of common

2023-05-02 09:40:02 -04:00

so-docker-refresh

Move files out of common