From 92ebe86ef6004511edfec6fe77ab8e17c44f4e94 Mon Sep 17 00:00:00 2001 From: neonmei Date: Thu, 12 Nov 2020 14:24:14 -0300 Subject: [PATCH] roles/wazuh-agent: move api_pass and authd_pass from role vars to defaults, lowering precedence required to override them --- roles/wazuh/ansible-wazuh-agent/defaults/main.yml | 4 ++++ roles/wazuh/ansible-wazuh-agent/vars/api_pass.yml | 3 --- roles/wazuh/ansible-wazuh-agent/vars/authd_pass.yml | 4 ---- 3 files changed, 4 insertions(+), 7 deletions(-) delete mode 100644 roles/wazuh/ansible-wazuh-agent/vars/api_pass.yml delete mode 100644 roles/wazuh/ansible-wazuh-agent/vars/authd_pass.yml diff --git a/roles/wazuh/ansible-wazuh-agent/defaults/main.yml b/roles/wazuh/ansible-wazuh-agent/defaults/main.yml index 38ff1151..9cf19515 100644 --- a/roles/wazuh/ansible-wazuh-agent/defaults/main.yml +++ b/roles/wazuh/ansible-wazuh-agent/defaults/main.yml @@ -32,6 +32,10 @@ wazuh_agent_sources_installation: user_agent_config_profile: null user_ca_store: "/var/ossec/wpk_root.pem" +# We recommend the use of ansible-vault to protect Wazuh, api, agentless and authd credentials. +# api_pass: 'changeme' +authd_pass: '' + wazuh_managers: - address: 127.0.0.1 port: 1514 diff --git a/roles/wazuh/ansible-wazuh-agent/vars/api_pass.yml b/roles/wazuh/ansible-wazuh-agent/vars/api_pass.yml deleted file mode 100644 index ad6e1164..00000000 --- a/roles/wazuh/ansible-wazuh-agent/vars/api_pass.yml +++ /dev/null @@ -1,3 +0,0 @@ ---- -# We recommend the use of Ansible Vault to protect Wazuh, api, agentless and authd credentials. -# api_pass: 'changeme' diff --git a/roles/wazuh/ansible-wazuh-agent/vars/authd_pass.yml b/roles/wazuh/ansible-wazuh-agent/vars/authd_pass.yml deleted file mode 100644 index c1f4da4f..00000000 --- a/roles/wazuh/ansible-wazuh-agent/vars/authd_pass.yml +++ /dev/null @@ -1,4 +0,0 @@ ---- -# We recommend the use of Ansible Vault to protect Wazuh, api, agentless and authd credentials. -# authd_pass: 'foobar' -authd_pass: '' \ No newline at end of file