Custom user configuration updated

playbooks/wazuh-opensearch-production-ready.yml

@@ -119,7 +119,7 @@
               hidden: 'no'
         wazuh_api_users:
           - username: custom-user
-            password: SecretPassword!
+            password: SecretPassword1!
         filebeat_output_indexer_hosts:
                 - "{{ hostvars.wi1.private_ip }}"
                 - "{{ hostvars.wi2.private_ip }}"

roles/wazuh/ansible-wazuh-manager/files/create_user.py

@@ -97,6 +97,6 @@ if __name__ == "__main__":
             password=password,
         )
     # disable unused default users
-    for def_user in ['wazuh', 'wazuh-wui']:
+    #for def_user in ['wazuh', 'wazuh-wui']:
-        if def_user != username:
+    #    if def_user != username:
-            disable_user(initial_users[def_user])
+    #        disable_user(initial_users[def_user])

roles/wazuh/ansible-wazuh-manager/tasks/main.yml

@@ -260,6 +260,15 @@
         group: wazuh
         mode: 0644
 
+    - name: Create admin.json
+      template:
+        src: templates/admin.json.j2
+        dest: "{{ wazuh_dir }}/api/configuration/admin.json"
+        owner: wazuh
+        group: wazuh
+        mode: 0644
+      no_log: true
+
     - name: Execute create_user script
       script:
         chdir: "{{ wazuh_dir }}/framework/scripts/"

roles/wazuh/ansible-wazuh-manager/templates/admin.json.j2

@@ -0,0 +1,4 @@
+
+{% for api in wazuh_api_users %}
+{"username":"{{ api['username'] }}", "password": "{{ api['password'] }}"}
+{% endfor %}