afmarulanda/wazuh-ansible-4.8.1
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Updated this PR with the new changes of indexer-ism-init script

Browse Source
This commit is contained in:
c-bordon 2023-11-08 13:00:30 -03:00
parent a69937e533
commit 9835b2f3bc
No known key found for this signature in database
GPG Key ID: E723BAA51FA52642
5 changed files with 8 additions and 29 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
roles/wazuh/vars/repo.yml
View File

@ -16,8 +16,3 @@ certs_gen_tool_version: 4.8
# Url of certificates generator tool # Url of certificates generator tool
certs_gen_tool_url: "https://packages.wazuh.com/{{ certs_gen_tool_version }}/wazuh-certs-tool.sh" certs_gen_tool_url: "https://packages.wazuh.com/{{ certs_gen_tool_version }}/wazuh-certs-tool.sh"
rollover_alias_tool_version: 4.8
# Url of certificates generator tool
rollover_alias_url: "https://packages.wazuh.com/{{ rollover_alias_tool_version }}/indexerRolloverInit.sh"

5
roles/wazuh/vars/repo_pre-release.yml
View File

@ -16,8 +16,3 @@ certs_gen_tool_version: 4.8
# Url of certificates generator tool # Url of certificates generator tool
certs_gen_tool_url: "https://packages-dev.wazuh.com/{{ certs_gen_tool_version }}/wazuh-certs-tool.sh" certs_gen_tool_url: "https://packages-dev.wazuh.com/{{ certs_gen_tool_version }}/wazuh-certs-tool.sh"
rollover_alias_tool_version: 4.8
# Url of certificates generator tool
rollover_alias_url: "https://packages-dev.wazuh.com/{{ rollover_alias_tool_version }}/indexerRolloverInit.sh"

5
roles/wazuh/vars/repo_staging.yml
View File

@ -15,8 +15,3 @@ certs_gen_tool_version: 4.8
# Url of certificates generator tool # Url of certificates generator tool
certs_gen_tool_url: "https://packages-dev.wazuh.com/{{ certs_gen_tool_version }}/wazuh-certs-tool.sh" certs_gen_tool_url: "https://packages-dev.wazuh.com/{{ certs_gen_tool_version }}/wazuh-certs-tool.sh"
rollover_alias_tool_version: 4.8
# Url of certificates generator tool
rollover_alias_url: "https://packages-dev.wazuh.com/{{ rollover_alias_tool_version }}/indexerRolloverInit.sh"

1
roles/wazuh/wazuh-indexer/defaults/main.yml
View File

@ -28,6 +28,7 @@ domain_name: wazuh.com
indexer_sec_plugin_conf_path: /etc/wazuh-indexer/opensearch-security indexer_sec_plugin_conf_path: /etc/wazuh-indexer/opensearch-security
indexer_sec_plugin_tools_path: /usr/share/wazuh-indexer/plugins/opensearch-security/tools indexer_sec_plugin_tools_path: /usr/share/wazuh-indexer/plugins/opensearch-security/tools
indexer_bin_path: /usr/share/wazuh-indexer/bin
indexer_conf_path: /etc/wazuh-indexer indexer_conf_path: /etc/wazuh-indexer
indexer_index_path: /var/lib/wazuh-indexer/ indexer_index_path: /var/lib/wazuh-indexer/

21
roles/wazuh/wazuh-indexer/tasks/security_actions.yml
View File

@ -52,7 +52,7 @@
{{ indexer_sec_plugin_tools_path }}/hash.sh -p '{{ indexer_admin_password }}' {{ indexer_sec_plugin_tools_path }}/hash.sh -p '{{ indexer_admin_password }}'
register: indexer_admin_password_hashed register: indexer_admin_password_hashed
no_log: '{{ indexer_nolog_sensible | bool }}' no_log: '{{ indexer_nolog_sensible | bool }}'
- name: Set the Admin user password - name: Set the Admin user password
replace: replace:
path: "{{ indexer_sec_plugin_conf_path }}/internal_users.yml" path: "{{ indexer_sec_plugin_conf_path }}/internal_users.yml"
@ -60,7 +60,7 @@
replace: "{{ indexer_password_hash | quote }}" replace: "{{ indexer_password_hash | quote }}"
vars: vars:
indexer_password_hash: "{{ indexer_admin_password_hashed.stdout_lines | last }}" indexer_password_hash: "{{ indexer_admin_password_hashed.stdout_lines | last }}"
# this can also be achieved with password_hash, but it requires dependencies on the controller # this can also be achieved with password_hash, but it requires dependencies on the controller
- name: Hash the kibanaserver role/user pasword - name: Hash the kibanaserver role/user pasword
shell: | shell: |
@ -68,7 +68,7 @@
{{ indexer_sec_plugin_tools_path }}/hash.sh -p '{{ dashboard_password }}' {{ indexer_sec_plugin_tools_path }}/hash.sh -p '{{ dashboard_password }}'
register: indexer_kibanaserver_password_hashed register: indexer_kibanaserver_password_hashed
no_log: '{{ indexer_nolog_sensible | bool }}' no_log: '{{ indexer_nolog_sensible | bool }}'
- name: Set the kibanaserver user password - name: Set the kibanaserver user password
replace: replace:
path: "{{ indexer_sec_plugin_conf_path }}/internal_users.yml" path: "{{ indexer_sec_plugin_conf_path }}/internal_users.yml"
@ -76,7 +76,7 @@
replace: "{{ indexer_password_hash | quote }}" replace: "{{ indexer_password_hash | quote }}"
vars: vars:
indexer_password_hash: "{{ indexer_kibanaserver_password_hashed.stdout_lines | last }}" indexer_password_hash: "{{ indexer_kibanaserver_password_hashed.stdout_lines | last }}"
- name: Initialize the Opensearch security index in Wazuh indexer - name: Initialize the Opensearch security index in Wazuh indexer
command: > command: >
sudo -u wazuh-indexer OPENSEARCH_PATH_CONF={{ indexer_conf_path }} sudo -u wazuh-indexer OPENSEARCH_PATH_CONF={{ indexer_conf_path }}
@ -94,18 +94,11 @@
register: result register: result
until: result.rc == 0 until: result.rc == 0
- name: Download Rollover alias script
get_url:
url: "{{ rollover_alias_url }}"
dest: "{{ indexer_conf_path }}/indexerRolloverAlias.sh"
mode: 744
- name: Initialize Rollover alias - name: Initialize Rollover alias
command: > command: >
{{ indexer_conf_path }}/indexerRolloverAlias.sh {{ indexer_bin_path }}/indexer-ism-init.sh
environment: -p {{ indexer_admin_password }}
INDEXER_PASSWORD: "{{ indexer_admin_password }}" -i {{ target_address }}
INDEXER_HOSTNAME: "{{ target_address }}"
become: yes become: yes
become_user: root become_user: root