Mike Reeves 02394acf69 Use the host CA trust store for sensor, strelka and idh containers ...

Mount the host trust store into zeek, suricata, tcpreplay, the strelka
containers and idh, and restart them when it changes. Point the Python
requests clients in strelka-backend and idh at it instead of certifi.

Remove the frozen /opt/so/conf/ca bundles from every node in ca.trust
rather than only on the manager in soup.

2026-10-27 16:24:33 -04:00

..

openssh

…

plays

…

skins/http

…

tools/sbin

…

config.sls

…

defaults.yaml

…

disabled.sls

…

enabled.sls

Use the host CA trust store for sensor, strelka and idh containers

2026-10-27 16:24:33 -04:00

idh.conf.jinja

…

init.sls

…

opencanary_config.map.jinja

…

soc_idh.yaml

…

sostatus.sls

…