From b94748732548951ee151cf19847b278ea116707d Mon Sep 17 00:00:00 2001 From: CuFa <46934023+orsifacundo@users.noreply.github.com> Date: Wed, 9 Jun 2021 16:39:39 -0300 Subject: [PATCH 1/5] Update certs.yml --- production_cluster/ssl_certs/certs.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/production_cluster/ssl_certs/certs.yml b/production_cluster/ssl_certs/certs.yml index f7dad185..a4afcd45 100644 --- a/production_cluster/ssl_certs/certs.yml +++ b/production_cluster/ssl_certs/certs.yml @@ -28,3 +28,8 @@ nodes: dn: CN=filebeat,OU=Ops,O=Example\, Inc.,DC=example,DC=com dns: - wazuh + +clients: + - name: admin + dn: CN=admin,OU=Ops,O=Example\, Inc.,DC=example,DC=com + admin: true From 04309afadacca51776e5ce7d18b4e824bb044f2e Mon Sep 17 00:00:00 2001 From: CuFa <46934023+orsifacundo@users.noreply.github.com> Date: Wed, 9 Jun 2021 16:40:39 -0300 Subject: [PATCH 2/5] Update production-cluster.yml --- production-cluster.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/production-cluster.yml b/production-cluster.yml index fa1bf78f..9ec9ce92 100644 --- a/production-cluster.yml +++ b/production-cluster.yml @@ -86,6 +86,8 @@ services: - ./production_cluster/ssl_certs/root-ca.pem:/usr/share/elasticsearch/config/root-ca.pem - ./production_cluster/ssl_certs/node1.key:/usr/share/elasticsearch/config/node1.key - ./production_cluster/ssl_certs/node1.pem:/usr/share/elasticsearch/config/node1.pem + - ./production_cluster/ssl_certs/admin.pem:/usr/share/elasticsearch/config/admin.pem + - ./production_cluster/ssl_certs/admin.key:/usr/share/elasticsearch/config/admin.key - ./production_cluster/elastic_opendistro/elasticsearch-node1.yml:/usr/share/elasticsearch/config/elasticsearch.yml - ./production_cluster/elastic_opendistro/internal_users.yml:/usr/share/elasticsearch/plugins/opendistro_security/securityconfig/internal_users.yml From 4ae07e1d77b85a0ddbe0ef3c4f9bb6f5e04a3054 Mon Sep 17 00:00:00 2001 From: CuFa <46934023+orsifacundo@users.noreply.github.com> Date: Wed, 9 Jun 2021 16:41:09 -0300 Subject: [PATCH 3/5] Update elasticsearch-node1.yml --- production_cluster/elastic_opendistro/elasticsearch-node1.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/production_cluster/elastic_opendistro/elasticsearch-node1.yml b/production_cluster/elastic_opendistro/elasticsearch-node1.yml index c343818e..4f9a628d 100644 --- a/production_cluster/elastic_opendistro/elasticsearch-node1.yml +++ b/production_cluster/elastic_opendistro/elasticsearch-node1.yml @@ -20,7 +20,7 @@ opendistro_security.nodes_dn: - 'CN=node2,OU=Ops,O=Example\, Inc.,DC=example,DC=com' - 'CN=node3,OU=Ops,O=Example\, Inc.,DC=example,DC=com' - 'CN=filebeat,OU=Ops,O=Example\, Inc.,DC=example,DC=com' -opendistro_security.authcz.admin_dn: [] +opendistro_security.authcz.admin_dn: ['CN=admin,OU=Ops,O=Example\, Inc.,DC=example,DC=com'] opendistro_security.audit.type: internal_elasticsearch opendistro_security.enable_snapshot_restore_privilege: true opendistro_security.check_snapshot_restore_write_privileges: true From 64bac445070e56c619080a53bbb1b07866d45a43 Mon Sep 17 00:00:00 2001 From: CuFa <46934023+orsifacundo@users.noreply.github.com> Date: Wed, 9 Jun 2021 16:41:19 -0300 Subject: [PATCH 4/5] Update elasticsearch-node2.yml --- production_cluster/elastic_opendistro/elasticsearch-node2.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/production_cluster/elastic_opendistro/elasticsearch-node2.yml b/production_cluster/elastic_opendistro/elasticsearch-node2.yml index 3e9bae49..e368461e 100644 --- a/production_cluster/elastic_opendistro/elasticsearch-node2.yml +++ b/production_cluster/elastic_opendistro/elasticsearch-node2.yml @@ -20,7 +20,7 @@ opendistro_security.nodes_dn: - 'CN=node2,OU=Ops,O=Example\, Inc.,DC=example,DC=com' - 'CN=node3,OU=Ops,O=Example\, Inc.,DC=example,DC=com' - 'CN=filebeat,OU=Ops,O=Example\, Inc.,DC=example,DC=com' -opendistro_security.authcz.admin_dn: [] +opendistro_security.authcz.admin_dn: ['CN=admin,OU=Ops,O=Example\, Inc.,DC=example,DC=com'] opendistro_security.audit.type: internal_elasticsearch opendistro_security.enable_snapshot_restore_privilege: true opendistro_security.check_snapshot_restore_write_privileges: true From 3f3a688d4a4649021197e9603ef20d4d8f7a06f3 Mon Sep 17 00:00:00 2001 From: CuFa <46934023+orsifacundo@users.noreply.github.com> Date: Wed, 9 Jun 2021 16:41:32 -0300 Subject: [PATCH 5/5] Update elasticsearch-node3.yml --- production_cluster/elastic_opendistro/elasticsearch-node3.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/production_cluster/elastic_opendistro/elasticsearch-node3.yml b/production_cluster/elastic_opendistro/elasticsearch-node3.yml index 574bce5c..14717a81 100644 --- a/production_cluster/elastic_opendistro/elasticsearch-node3.yml +++ b/production_cluster/elastic_opendistro/elasticsearch-node3.yml @@ -20,7 +20,7 @@ opendistro_security.nodes_dn: - 'CN=node2,OU=Ops,O=Example\, Inc.,DC=example,DC=com' - 'CN=node3,OU=Ops,O=Example\, Inc.,DC=example,DC=com' - 'CN=filebeat,OU=Ops,O=Example\, Inc.,DC=example,DC=com' -opendistro_security.authcz.admin_dn: [] +opendistro_security.authcz.admin_dn: ['CN=admin,OU=Ops,O=Example\, Inc.,DC=example,DC=com'] opendistro_security.audit.type: internal_elasticsearch opendistro_security.enable_snapshot_restore_privilege: true opendistro_security.check_snapshot_restore_write_privileges: true