diff --git a/molecule/default/converge.yml b/molecule/default/converge.yml index ef634b65..62c15859 100644 --- a/molecule/default/converge.yml +++ b/molecule/default/converge.yml @@ -1,11 +1,23 @@ --- -- name: Converge +- name: ConvergeCerts + hosts: localhost + roles: + - role: ../../roles/wazuh/wazuh-indexer + perform_installation: false + vars: + instances: + node1: + name: node-1 # Important: must be equal to indexer_node_name. + ip: 127.0.0.1 + role: indexer + tags: + - generate-certs +- name: ConvergeInstall hosts: all roles: - role: ../../roles/wazuh/ansible-wazuh-manager vars: - - { role: ../../roles/wazuh/ansible-filebeat, filebeat_output_elasticsearch_hosts: "elasticsearch_centos7:9200" } - vars: + - { role: ../../roles/wazuh/ansible-filebeat-oss, filebeat_output_indexer_hosts: "indexer_centos7:9200" } pre_tasks: - name: (converge) fix missing packages in cloud images apt: diff --git a/roles/wazuh/ansible-filebeat-oss/defaults/main.yml b/roles/wazuh/ansible-filebeat-oss/defaults/main.yml index 15d21b1f..5e47eb65 100644 --- a/roles/wazuh/ansible-filebeat-oss/defaults/main.yml +++ b/roles/wazuh/ansible-filebeat-oss/defaults/main.yml @@ -3,6 +3,8 @@ filebeat_version: 7.10.2 wazuh_template_branch: v4.3.0 +filebeat_node_name: node-1 + filebeat_output_indexer_hosts: - "localhost:9200" @@ -18,7 +20,7 @@ filebeat_security: true filebeat_ssl_dir: /etc/pki/filebeat # Local path to store the generated certificates (Opensearch security plugin) -local_certs_path: ./indexer/certificates +local_certs_path: "{{ playbook_dir }}/indexer/certificates" filebeatrepo: apt: 'deb https://packages.wazuh.com/4.x/apt/ stable main' diff --git a/roles/wazuh/wazuh-indexer/tasks/local_actions.yml b/roles/wazuh/wazuh-indexer/tasks/local_actions.yml index 2329d25e..69784a45 100644 --- a/roles/wazuh/wazuh-indexer/tasks/local_actions.yml +++ b/roles/wazuh/wazuh-indexer/tasks/local_actions.yml @@ -44,13 +44,22 @@ find: paths: "{{ local_certs_path }}/wazuh-certificates" patterns: "*" + become: yes register: certificate_files + - name: Change certificates directory ownership + file: + path: "{{ local_certs_path }}/wazuh-certificates" + state: directory + mode: '777' + become: yes + - name: Change Certificates Ownership file: path: "{{ item.path }}" owner: "{{ ansible_effective_user_id }}" group: "{{ ansible_effective_user_id }}" + mode: '777' become: yes with_items: "{{ certificate_files.files }}"