afmarulanda/wazuh-ansible-4.8.1
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

repo gpg key id as a paramater

Browse Source
This commit is contained in:
joschneider 2020-01-21 10:56:59 +01:00
parent 7e9f59388a
commit 6361eacbf0
10 changed files with 10 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
roles/elastic-stack/ansible-elasticsearch/defaults/main.yml
View File

@ -11,6 +11,7 @@ elasticrepo:
apt: 'https://artifacts.elastic.co/packages/7.x/apt'
yum: 'https://artifacts.elastic.co/packages/7.x/yum'
gpg: 'https://artifacts.elastic.co/GPG-KEY-elasticsearch'
kid: '46095ACC8548582C1A2699A9D27D666CD88E42B4'
# Cluster Settings
single_node: true

2
roles/elastic-stack/ansible-elasticsearch/tasks/Debian.yml
View File

@ -31,7 +31,7 @@
- name: Debian/Ubuntu | Add Elasticsearch GPG key.
apt_key:
url: "{{ elasticrepo.gpg }}"
id: 46095ACC8548582C1A2699A9D27D666CD88E42B4
id: "{{ elasticrepo.kid }}"
state: present
- name: Debian/Ubuntu | Install Elastic repo

1
roles/elastic-stack/ansible-kibana/defaults/main.yml
View File

@ -13,6 +13,7 @@ elasticrepo:
apt: 'https://artifacts.elastic.co/packages/7.x/apt'
yum: 'https://artifacts.elastic.co/packages/7.x/yum'
gpg: 'https://artifacts.elastic.co/GPG-KEY-elasticsearch'
kid: '46095ACC8548582C1A2699A9D27D666CD88E42B4'
# API credentials
wazuh_api_credentials:

2
roles/elastic-stack/ansible-kibana/tasks/Debian.yml
View File

@ -11,7 +11,7 @@
- name: Debian/Ubuntu | Add Elasticsearch GPG key
apt_key:
url: "{{ elasticrepo.gpg }}"
id: 46095ACC8548582C1A2699A9D27D666CD88E42B4
id: "{{ elasticrepo.kid }}"
state: present
- name: Debian/Ubuntu | Install Elastic repo

1
roles/wazuh/ansible-filebeat/defaults/main.yml
View File

@ -54,3 +54,4 @@ elasticrepo:
apt: 'https://artifacts.elastic.co/packages/7.x/apt'
yum: 'https://artifacts.elastic.co/packages/7.x/yum'
gpg: 'https://artifacts.elastic.co/GPG-KEY-elasticsearch'
kid: '46095ACC8548582C1A2699A9D27D666CD88E42B4'

2
roles/wazuh/ansible-filebeat/tasks/Debian.yml
View File

@ -11,7 +11,7 @@
- name: Debian/Ubuntu | Add Elasticsearch apt key.
apt_key:
url: "{{ elasticrepo.gpg }}"
id: 46095ACC8548582C1A2699A9D27D666CD88E42B4
id: "{{ elasticrepo.kid }}"
state: present
- name: Debian/Ubuntu | Add Filebeat repository.

1
roles/wazuh/ansible-wazuh-agent/defaults/main.yml
View File

@ -60,6 +60,7 @@ wazuh_agent_config:
apt: 'deb https://packages.wazuh.com/3.x/apt/ stable main'
yum: 'https://packages.wazuh.com/3.x/yum/'
gpg: 'https://packages.wazuh.com/key/GPG-KEY-WAZUH'
kid: '0DCFCA5547B19D2A6099506096B3EE5F29111145'
active_response:
ar_disabled: 'no'
ca_store: '/var/ossec/etc/wpk_root.pem'

2
roles/wazuh/ansible-wazuh-agent/tasks/Debian.yml
View File

@ -25,7 +25,7 @@
- name: Debian/Ubuntu | Installing Wazuh repository key
apt_key:
url: "{{ wazuh_agent_config.repo.gpg }}"
id: 0DCFCA5547B19D2A6099506096B3EE5F29111145
id: "{{ wazuhrepo.kid }}"
when:
- not (ansible_distribution == "Ubuntu" and ansible_distribution_major_version | int == 14)
- not wazuh_agent_sources_installation.enabled

1
roles/wazuh/ansible-wazuh-manager/defaults/main.yml
View File

@ -52,6 +52,7 @@ wazuh_manager_config:
apt: 'deb https://packages.wazuh.com/3.x/apt/ stable main'
yum: 'https://packages.wazuh.com/3.x/yum/'
gpg: 'https://packages.wazuh.com/key/GPG-KEY-WAZUH'
kid: '0DCFCA5547B19D2A6099506096B3EE5F29111145'
json_output: 'yes'
alerts_log: 'yes'
logall: 'no'

2
roles/wazuh/ansible-wazuh-manager/tasks/Debian.yml
View File

@ -28,7 +28,7 @@
- name: Debian/Ubuntu | Installing Wazuh repository key
apt_key:
url: "{{ wazuh_manager_config.repo.gpg }}"
id: 0DCFCA5547B19D2A6099506096B3EE5F29111145
id: "{{ wazuhrepo.kid }}"
when:
- not (ansible_distribution == "Ubuntu" and ansible_distribution_major_version | int == 14)
- not wazuh_manager_sources_installation.enabled or not wazuh_api_sources_installation.enabled