afmarulanda/wazuh-ansible-4.8.1
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add copy block to import node's certificate with custom CA name

Browse Source
This commit is contained in:
Jose M 2019-08-05 15:05:49 +02:00
parent 09647b731b
commit af0e2f0756
1 changed files with 15 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
roles/elastic-stack/ansible-elasticsearch/tasks/xpack_security.yml
View File

@ -108,7 +108,6 @@
when:
- node_certs_generator
- name: Unzip generated certs.zip
unarchive:
src: "{{master_certs_destination}}/certs.zip"
@ -143,6 +142,20 @@
- "{{master_certs_destination}}/{{elasticsearch_node_name}}/{{ elasticsearch_node_name }}.key"
- "{{master_certs_destination}}/{{elasticsearch_node_name}}/{{ elasticsearch_node_name }}.crt"
- "{{master_certs_destination}}/ca/ca.crt"
when:
- generate_CA
tags: xpack-security
- name: Copying node's certificate from master (Custom CA)
copy:
src: "{{item}}"
dest: "{{node_certs_destination}}/"
with_items:
- "{{master_certs_destination}}/{{elasticsearch_node_name}}/{{ elasticsearch_node_name }}.key"
- "{{master_certs_destination}}/{{elasticsearch_node_name}}/{{ elasticsearch_node_name }}.crt"
- "{{master_certs_destination}}/ca/{{ca_cert_name}}"
when:
- not generate_CA
tags: xpack-security
- name: Set elasticsearch bootstrap password