From 11721ebe147f27ce33b921ce52f2a950ea375a94 Mon Sep 17 00:00:00 2001
From: manuasir <manuel.jimenez@wazuh.com>
Date: Wed, 26 Jun 2019 17:00:40 +0200
Subject: [PATCH] Added new tasks for xpack security

---
 .../elastic-stack/ansible-elasticsearch/tasks/main.yml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/roles/elastic-stack/ansible-elasticsearch/tasks/main.yml b/roles/elastic-stack/ansible-elasticsearch/tasks/main.yml
index bd7bc0d4..35c30aa9 100644
--- a/roles/elastic-stack/ansible-elasticsearch/tasks/main.yml
+++ b/roles/elastic-stack/ansible-elasticsearch/tasks/main.yml
@@ -112,6 +112,16 @@
     - wazuh_alerts_template_exits.status != 200
   tags: init
 
+- name: Check that the instances.yml file exists
+  stat:
+    path: /usr/share/elasticsearch/instances.yml
+  register: instances_exists
+  
+- name: Generating certificates for Elasticsearch security
+  shell: "/usr/share/elasticsearch/bin/elasticsearch-certutil cert ca --pem --in /usr/share/elasticsearch/instances.yml --out /usr/share/elasticsearch/certs.zip"
+  when: instances_exists
+  tags: xpack-security
+
 - import_tasks: "RMRedHat.yml"
   when: ansible_os_family == "RedHat"