afmarulanda/wazuh-ansible-4.8.1
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Changed task description

Browse Source
This commit is contained in:
Manuel J. Bernal 2020-05-11 13:56:03 +02:00
parent cf14f400ba
commit 9742c4984c
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
roles/opendistro/opendistro-elasticsearch/tasks/SecurityActions.yml
View File

@ -26,14 +26,14 @@
- admin.key - admin.key
- admin.pem - admin.pem
- name: Copy the opendistro security configuration file to cluster - name: Copy the OpenDistrosecurity configuration file to cluster
blockinfile: blockinfile:
block: "{{ lookup('file', '{{ local_certs_path }}/config/{{ inventory_hostname }}_elasticsearch_config_snippet.yml') }}" block: "{{ lookup('file', '{{ local_certs_path }}/config/{{ inventory_hostname }}_elasticsearch_config_snippet.yml') }}"
dest: "{{ opendistro_conf_path }}/elasticsearch.yml" dest: "{{ opendistro_conf_path }}/elasticsearch.yml"
insertafter: EOF insertafter: EOF
marker: "## {mark} Opendistro Security Node & Admin certificates configuration ##" marker: "## {mark} Opendistro Security Node & Admin certificates configuration ##"
- name: Prepare the opendistro security configuration file - name: Prepare the OpenDistrosecurity configuration file
replace: replace:
path: "{{ opendistro_conf_path }}/elasticsearch.yml" path: "{{ opendistro_conf_path }}/elasticsearch.yml"
regexp: 'searchguard' regexp: 'searchguard'
@ -45,7 +45,7 @@
name: elasticsearch name: elasticsearch
state: restarted state: restarted
- name: Copy the opendistro security internal users template - name: Copy the OpenDistrosecurity internal users template
template: template:
src: "templates/internal_users.yml.j2" src: "templates/internal_users.yml.j2"
dest: "{{ opendistro_sec_plugin_conf_path }}/internal_users.yml" dest: "{{ opendistro_sec_plugin_conf_path }}/internal_users.yml"
@ -58,13 +58,13 @@
{{ opendistro_sec_plugin_conf_path }}/internal_users.yml {{ opendistro_sec_plugin_conf_path }}/internal_users.yml
run_once: true run_once: true
- name: Set the kibanaserver user pasword - name: Set the kibanaserver role/user pasword
shell: > shell: >
sed -i 's,{{ opendistro_kibana_password }},'$(sh {{ opendistro_sec_plugin_tools_path }}/hash.sh -p {{ opendistro_kibana_password }} | tail -1)',' sed -i 's,{{ opendistro_kibana_password }},'$(sh {{ opendistro_sec_plugin_tools_path }}/hash.sh -p {{ opendistro_kibana_password }} | tail -1)','
{{ opendistro_sec_plugin_conf_path }}/internal_users.yml {{ opendistro_sec_plugin_conf_path }}/internal_users.yml
run_once: true run_once: true
- name: Initialize the opendistro security index in elasticsearch - name: Initialize the OpenDistrosecurity index in elasticsearch
command: > command: >
{{ opendistro_sec_plugin_tools_path }}/securityadmin.sh {{ opendistro_sec_plugin_tools_path }}/securityadmin.sh
-cacert {{ opendistro_conf_path }}/root-ca.pem -cacert {{ opendistro_conf_path }}/root-ca.pem