From 0699c8fe21d12d84f4cc7c369688baf2c1f65966 Mon Sep 17 00:00:00 2001 From: dfolcha Date: Thu, 26 Aug 2021 15:08:18 +0200 Subject: [PATCH] Add admin key pair to production development --- VERSION | 2 +- production-cluster.yml | 2 ++ .../elastic_opendistro/elasticsearch-node1.yml | 2 +- .../elastic_opendistro/elasticsearch-node2.yml | 2 +- .../elastic_opendistro/elasticsearch-node3.yml | 2 +- production_cluster/ssl_certs/certs.yml | 7 ++++++- 6 files changed, 12 insertions(+), 5 deletions(-) diff --git a/VERSION b/VERSION index 156da5c1..be0692cf 100644 --- a/VERSION +++ b/VERSION @@ -1,2 +1,2 @@ WAZUH-DOCKER_VERSION="4.2.0" -REVISION="41100" +REVISION="40212" diff --git a/production-cluster.yml b/production-cluster.yml index bf3d4386..2296fb9a 100644 --- a/production-cluster.yml +++ b/production-cluster.yml @@ -86,6 +86,8 @@ services: - ./production_cluster/ssl_certs/root-ca.pem:/usr/share/elasticsearch/config/root-ca.pem - ./production_cluster/ssl_certs/node1.key:/usr/share/elasticsearch/config/node1.key - ./production_cluster/ssl_certs/node1.pem:/usr/share/elasticsearch/config/node1.pem + - ./production_cluster/ssl_certs/admin.pem:/usr/share/elasticsearch/config/admin.pem + - ./production_cluster/ssl_certs/admin.key:/usr/share/elasticsearch/config/admin.key - ./production_cluster/elastic_opendistro/elasticsearch-node1.yml:/usr/share/elasticsearch/config/elasticsearch.yml - ./production_cluster/elastic_opendistro/internal_users.yml:/usr/share/elasticsearch/plugins/opendistro_security/securityconfig/internal_users.yml diff --git a/production_cluster/elastic_opendistro/elasticsearch-node1.yml b/production_cluster/elastic_opendistro/elasticsearch-node1.yml index c343818e..4f9a628d 100644 --- a/production_cluster/elastic_opendistro/elasticsearch-node1.yml +++ b/production_cluster/elastic_opendistro/elasticsearch-node1.yml @@ -20,7 +20,7 @@ opendistro_security.nodes_dn: - 'CN=node2,OU=Ops,O=Example\, Inc.,DC=example,DC=com' - 'CN=node3,OU=Ops,O=Example\, Inc.,DC=example,DC=com' - 'CN=filebeat,OU=Ops,O=Example\, Inc.,DC=example,DC=com' -opendistro_security.authcz.admin_dn: [] +opendistro_security.authcz.admin_dn: ['CN=admin,OU=Ops,O=Example\, Inc.,DC=example,DC=com'] opendistro_security.audit.type: internal_elasticsearch opendistro_security.enable_snapshot_restore_privilege: true opendistro_security.check_snapshot_restore_write_privileges: true diff --git a/production_cluster/elastic_opendistro/elasticsearch-node2.yml b/production_cluster/elastic_opendistro/elasticsearch-node2.yml index 3e9bae49..e368461e 100644 --- a/production_cluster/elastic_opendistro/elasticsearch-node2.yml +++ b/production_cluster/elastic_opendistro/elasticsearch-node2.yml @@ -20,7 +20,7 @@ opendistro_security.nodes_dn: - 'CN=node2,OU=Ops,O=Example\, Inc.,DC=example,DC=com' - 'CN=node3,OU=Ops,O=Example\, Inc.,DC=example,DC=com' - 'CN=filebeat,OU=Ops,O=Example\, Inc.,DC=example,DC=com' -opendistro_security.authcz.admin_dn: [] +opendistro_security.authcz.admin_dn: ['CN=admin,OU=Ops,O=Example\, Inc.,DC=example,DC=com'] opendistro_security.audit.type: internal_elasticsearch opendistro_security.enable_snapshot_restore_privilege: true opendistro_security.check_snapshot_restore_write_privileges: true diff --git a/production_cluster/elastic_opendistro/elasticsearch-node3.yml b/production_cluster/elastic_opendistro/elasticsearch-node3.yml index 574bce5c..14717a81 100644 --- a/production_cluster/elastic_opendistro/elasticsearch-node3.yml +++ b/production_cluster/elastic_opendistro/elasticsearch-node3.yml @@ -20,7 +20,7 @@ opendistro_security.nodes_dn: - 'CN=node2,OU=Ops,O=Example\, Inc.,DC=example,DC=com' - 'CN=node3,OU=Ops,O=Example\, Inc.,DC=example,DC=com' - 'CN=filebeat,OU=Ops,O=Example\, Inc.,DC=example,DC=com' -opendistro_security.authcz.admin_dn: [] +opendistro_security.authcz.admin_dn: ['CN=admin,OU=Ops,O=Example\, Inc.,DC=example,DC=com'] opendistro_security.audit.type: internal_elasticsearch opendistro_security.enable_snapshot_restore_privilege: true opendistro_security.check_snapshot_restore_write_privileges: true diff --git a/production_cluster/ssl_certs/certs.yml b/production_cluster/ssl_certs/certs.yml index f7dad185..486e4178 100644 --- a/production_cluster/ssl_certs/certs.yml +++ b/production_cluster/ssl_certs/certs.yml @@ -27,4 +27,9 @@ nodes: - name: filebeat dn: CN=filebeat,OU=Ops,O=Example\, Inc.,DC=example,DC=com dns: - - wazuh + - wazuh + +clients: + - name: admin + dn: CN=admin,OU=Ops,O=Example\, Inc.,DC=example,DC=com + admin: true