73 lines
1.8 KiB
YAML
73 lines
1.8 KiB
YAML
---
|
|
- name: Check if certificates already exists
|
|
stat:
|
|
path: "{{ local_certs_path }}"
|
|
register: certificates_folder
|
|
delegate_to: localhost
|
|
become: no
|
|
tags:
|
|
- generate-certs
|
|
|
|
|
|
- block:
|
|
|
|
- name: Local action | Create local temporary directory for certificates generation
|
|
file:
|
|
path: "{{ local_certs_path }}"
|
|
mode: 0755
|
|
state: directory
|
|
|
|
- name: Local action | Check that the generation tool exists
|
|
stat:
|
|
path: "{{ local_certs_path }}/wazuh-certs-tool.sh"
|
|
register: tool_package
|
|
|
|
- name: Local action | Download certificates generation tool
|
|
get_url:
|
|
url: "{{ certs_gen_tool_url }}"
|
|
dest: "{{ local_certs_path }}/wazuh-certs-tool.sh"
|
|
when: not tool_package.stat.exists
|
|
|
|
- name: Local action | Prepare the certificates generation template file
|
|
template:
|
|
src: "templates/config.yml.j2"
|
|
dest: "{{ local_certs_path }}/config.yml"
|
|
mode: 0644
|
|
register: tlsconfig_template
|
|
|
|
- name: Display config.yml contents
|
|
command: cat {{ local_certs_path }}/config.yml
|
|
register: command_output
|
|
|
|
- name: Print config.yml
|
|
debug:
|
|
msg: "{{command_output.stdout}}"
|
|
|
|
- name: Local action | Generate the node & admin certificates in local
|
|
command: >-
|
|
bash {{ local_certs_path }}/wazuh-certs-tool.sh -A
|
|
become: yes
|
|
|
|
- name: Get Certificate files
|
|
find:
|
|
paths: "{{ local_certs_path }}/wazuh-certificates"
|
|
patterns: "*"
|
|
register: certificate_files
|
|
become: yes
|
|
|
|
- name: Change Certificates Ownership
|
|
file:
|
|
path: "{{ item.path }}"
|
|
owner: "{{ ansible_effective_user_id }}"
|
|
group: "{{ ansible_effective_user_id }}"
|
|
become: yes
|
|
with_items: "{{ certificate_files.files }}"
|
|
|
|
run_once: true
|
|
delegate_to: localhost
|
|
become: no
|
|
tags:
|
|
- generate-certs
|
|
when:
|
|
- not certificates_folder.stat.exists
|