afmarulanda/wazuh-ansible-4.8.1
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Import root-ca.pem for Kibana and configure it in kibana.yml

Browse Source
This commit is contained in:
Jose M 2020-06-26 12:49:40 +02:00
parent 799827aa88
commit 2adca9533e
No known key found for this signature in database
GPG Key ID: 790179D6924E10FF
2 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
roles/opendistro/opendistro-kibana/tasks/security_actions.yml
View File

@ -6,6 +6,7 @@
dest: /usr/share/kibana dest: /usr/share/kibana
mode: 0644 mode: 0644
with_items: with_items:
- "root-ca.pem"
- "{{ kibana_node_name }}_http.key" - "{{ kibana_node_name }}_http.key"
- "{{ kibana_node_name }}_http.pem" - "{{ kibana_node_name }}_http.pem"
tags: tags:

3
roles/opendistro/opendistro-kibana/templates/opendistro_kibana.yml.j2
View File

@ -14,10 +14,11 @@ server.host: {{ kibana_server_host }}
elasticsearch.hosts: "https://{{ elasticsearch_network_host }}:{{ elasticsearch_http_port }}" elasticsearch.hosts: "https://{{ elasticsearch_network_host }}:{{ elasticsearch_http_port }}"
elasticsearch.username: {{ opendistro_kibana_user }} elasticsearch.username: {{ opendistro_kibana_user }}
elasticsearch.password: {{ opendistro_kibana_password }} elasticsearch.password: {{ opendistro_kibana_password }}
elasticsearch.ssl.verificationMode: certificate
server.ssl.enabled: true server.ssl.enabled: true
server.ssl.certificate: "/usr/share/kibana/{{ kibana_node_name }}_http.pem" server.ssl.certificate: "/usr/share/kibana/{{ kibana_node_name }}_http.pem"
server.ssl.key: "/usr/share/kibana/{{ kibana_node_name }}_http.key" server.ssl.key: "/usr/share/kibana/{{ kibana_node_name }}_http.key"
elasticsearch.ssl.certificateAuthorities: ["/usr/share/kibana/root-ca.pem"]
elasticsearch.ssl.verificationMode: full
{% else %} {% else %}
elasticsearch.hosts: "http://{{ elasticsearch_network_host }}:{{ elasticsearch_http_port }}" elasticsearch.hosts: "http://{{ elasticsearch_network_host }}:{{ elasticsearch_http_port }}"