Add cluster join functionality and Kaspersky agent configuration to PMG. Updated Makefile for cluster bootstrap command, enhanced README with new service details, and modified pillar states for KESL and KLN agent integration. Added verification and management for cluster-only services in Salt states.

This commit is contained in:
Ruslan Piatrovich
2026-06-10 17:06:22 +03:00
parent 7230484b44
commit 7373d5520f
10 changed files with 272 additions and 2 deletions
+33
View File
@@ -36,6 +36,14 @@ pmg:
- pmgdaemon
- pmgmirror
- pmgtunnel
pmg_cluster_only_services:
- pmgmirror
- pmgtunnel
cluster_join:
enabled: true
master_ip: 10.80.38.152
fingerprint: "4C:63:ED:BB:01:F0:63:5B:92:AC:37:D8:52:D9:0A:CB:5B:78:EE:3A:36:83:86:29:C8:19:D2:EC:CE:AC:88:EC"
password: ""
update_dist_upgrade: true
update_auto_reboot: false
update_reboot_delay_minutes: 1
@@ -83,6 +91,31 @@ pmg:
manager: 10.80.120.205
group: test_auditd_unix
kesl:
enabled: true
package_url: https://products.s.kaspersky-labs.com/endpoints/keslinux10/12.4.0.1225/multilanguage-INT-12.4.0.1225/167a2f9c5bdb4e869f4603fbc3a829c1/kesl_12.4.0-1225_amd64.deb
package_path: /opt/kesl_12.4.0-1225_amd64.deb
autoinstall_path: /etc/opt/kaspersky/kesl/autoinstall.ini
ksvla_mode: "No"
endpoint_agent_mode: "No"
eula_agreed: "Yes"
privacy_policy_agreed: "Yes"
use_ksn: "No"
group_clean: "No"
locale: ""
install_license: ""
updater_source: SCServer
update_execute: "No"
klnagent:
enabled: true
package_url: https://products.s.kaspersky-labs.com/administrationkit/ksc10/16.2.0.1023/russian-INT-29664057-ru/2129c97dba254c9fb8a4161f29a2241c/klnagent64_16.2.0-1023_amd64.deb
package_path: /opt/klnagent64_16.2.0-1023_amd64.deb
administration_server: 10.80.38.76
autoanswers_path: /etc/opt/kaspersky/klnagent64/autoanswers.conf
autoinstall: true
eula_accepted: true
qualys:
enabled: true
package_url: https://storage.yandexcloud.net/qualys-agent/QualysCloudAgent.deb