5aff0b59f4
The osquery tooling needed a little work to be fully automated and repeatable. This change tunes up the tools and makes the entire deployment process multi-node capable and repeatable. The osquery role was vendored because of bugs within their use of aarmor profiles and there was no way to disable them. The fleet use of commands for ssl creation have been removed. The ssl modules are now being used to generate all of the certificates. New pre-tasks have been added to check for required variables. If the required variables are not set the playbooks will fail early and notify the user of the issue. Change-Id: I88c2b40ed9d9a88a39bdf07b0dce2900fda50151 Signed-off-by: Kevin Carter <kevin.carter@rackspace.com>
36 lines
1.2 KiB
YAML
36 lines
1.2 KiB
YAML
---
|
|
# Kolide Fleet vars
|
|
kolide_fleet_db_name: fleet
|
|
kolide_fleet_db_user: fleet
|
|
#kolide_fleet_db_password: fleetSecrete
|
|
|
|
kolide_fleet_address: "127.0.0.1:{{ kolide_fleet_port }}"
|
|
kolide_fleet_version: "2.0.0-rc5"
|
|
kolide_fleet_url: "https://github.com/kolide/fleet/releases/download"
|
|
|
|
kolide_fleet_admin_email: admin@openstack.org
|
|
#kolide_fleet_admin_password: AdminSecrete
|
|
|
|
kolide_fleet_ssl_cert: /etc/ssl/certs/fleet.cert
|
|
kolide_fleet_ssl_key: /etc/ssl/private/fleet.key
|
|
|
|
kolide_fleet_ssl_protocol: "{{ ssl_protocol | default('ALL -SSLv2 -SSLv3') }}"
|
|
kolide_fleet_ssl_cipher_suite: "{{ ssl_cipher_suite | default('ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!DSS') }}"
|
|
|
|
#kolide_fleet_osquery_enroll_secret: "{{ kolide_fleet_enroll_secret }}"
|
|
# MariaDB/Gallera Variables
|
|
#mariadb_root_password: fleetSecrete
|
|
mariadb_bind_address: "0.0.0.0"
|
|
mariadb_root_remote: 1
|
|
mariadb_root_user: root
|
|
mariadb_databases:
|
|
- name: "{{ kolide_fleet_db_name }}"
|
|
|
|
mariadb_users:
|
|
- name: "{{ kolide_fleet_db_user }}"
|
|
password: "{{ kolide_fleet_db_password }}"
|
|
priv: " {{ kolide_fleet_db_name }}.*:ALL"
|
|
host: "%"
|
|
|
|
galera_root_password: "{{ mariadb_root_password }}"
|