Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Become: false for operation /tmp/opensearch-nodecerts #51

Merged
merged 5 commits into from
May 2, 2022
Merged

Become: false for operation /tmp/opensearch-nodecerts #51

Show file tree
Hide file tree
Changes from 3 commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
1934b1a
Become: false for operation /tmp/opensearch-nodecerts
patsevanton Apr 8, 2022
baf3929
become: false for Cleanup local temporary directory
patsevanton Apr 8, 2022
ba91102
readme: run the playbook as ec2-user, add --become
patsevanton Apr 8, 2022
83c575e
Add examples: hosts_ec2-user and hosts_root_user
patsevanton Apr 24, 2022
f81e8e6
Add examples hosts for centos and ubuntu
patsevanton Apr 26, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -45,7 +45,7 @@ In `inventories/opensearch/hosts` file, you can configure the node details.

In AWS EC2,
```
os1 ansible_host=<Elastic/Public IP> address ansible_user=root ip=<Private IP address>
os1 ansible_host=<Elastic/Public IP> address ansible_user=ec2-user ip=<Private IP address>
```

#### Multi-node Installation
Expand Down Expand Up @@ -82,8 +82,8 @@ cluster_type: single-node
### Install


# Deploy with ansible playbook - run the playbook as root
ansible-playbook -i inventories/opensearch/hosts opensearch.yml --extra-vars "admin_password=Test@123 kibanaserver_password=Test@6789"
# Deploy with ansible playbook - run the playbook as ec2-user
ansible-playbook -i inventories/opensearch/hosts opensearch.yml --extra-vars "admin_password=Test@123 kibanaserver_password=Test@6789" --become

You should set the reserved users(`admin` and `kibanaserver`) password using `admin_password` and `kibanaserver_password` variables.

Expand Down
7 changes: 7 additions & 0 deletions roles/linux/opensearch/tasks/security.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,7 @@
state: directory
run_once: true
register: configuration
become: false

- name: Security Plugin configuration | Download certificates generation tool
local_action:
Expand All @@ -17,11 +18,13 @@
dest: /tmp/opensearch-nodecerts/search-guard-tlstool.tar.gz
run_once: true
when: configuration.changed
become: false

- name: Security Plugin configuration | Extract the certificates generation tool
local_action: command chdir=/tmp/opensearch-nodecerts tar -xvf search-guard-tlstool.tar.gz
run_once: true
when: configuration.changed
become: false

- name: Security Plugin configuration | Make the executable file
local_action:
Expand All @@ -30,6 +33,7 @@
mode: a+x
run_once: true
when: configuration.changed
become: false

- name: Security Plugin configuration | Prepare the certificates generation template file
local_action:
Expand All @@ -38,12 +42,14 @@
dest: /tmp/opensearch-nodecerts/config/tlsconfig.yml
run_once: true
when: configuration.changed
become: false

- name: Security Plugin configuration | Generate the node & admin certificates in local
local_action:
module: command /tmp/opensearch-nodecerts/tools/sgtlstool.sh -c /tmp/opensearch-nodecerts/config/tlsconfig.yml -ca -crt -t /tmp/opensearch-nodecerts/config/
run_once: true
when: configuration.changed
become: false

- name: Security Plugin configuration | Copy the node & admin certificates to opensearch nodes
copy:
Expand Down Expand Up @@ -154,3 +160,4 @@
state: absent
run_once: true
when: configuration.changed
become: false