CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Turn on Xpack SSL

Browse Source
This commit is contained in:
Mike Reeves
2021-01-21 09:49:31 -05:00
parent 71e0014115
commit 35c741ae63
1 changed files with 9 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
salt/elasticsearch/files/elasticsearch.yml
View File

@@ -7,6 +7,7 @@
{%- else %} {%- else %}
{%- set ESCLUSTERNAME = salt['pillar.get']('elasticsearch:esclustername') %} {%- set ESCLUSTERNAME = salt['pillar.get']('elasticsearch:esclustername') %}
{%- endif %} {%- endif %}
{%- set NODE_ROLES = salt['pillar.get']('elasticsearch:node_roles', ['data', 'ingest']) %}
cluster.name: "{{ ESCLUSTERNAME }}" cluster.name: "{{ ESCLUSTERNAME }}"
network.host: 0.0.0.0 network.host: 0.0.0.0
@@ -27,13 +28,16 @@ cluster.routing.allocation.disk.watermark.flood_stage: 98%
{%- if FEATURES is sameas true %} {%- if FEATURES is sameas true %}
#xpack.security.enabled: false #xpack.security.enabled: false
#xpack.security.http.ssl.enabled: false #xpack.security.http.ssl.enabled: false
#xpack.security.transport.ssl.enabled: false xpack.security.transport.ssl.enabled: false
xpack.security.transport.ssl.verification_mode: certificate
xpack.security.transport.ssl.key: /usr/share/elasticsearch/config/elasticsearch.key
xpack.security.transport.ssl.certificate: /usr/share/elasticsearch/config/elasticsearch.crt
xpack.security.transport.ssl.certificate_authorities: [ "/usr/share/elasticsearch/config/ca.crt" ]
xpack.security.transport.ssl.verification_mode: none
#xpack.security.http.ssl.key: /usr/share/elasticsearch/config/elasticsearch.key #xpack.security.http.ssl.key: /usr/share/elasticsearch/config/elasticsearch.key
#xpack.security.http.ssl.certificate: /usr/share/elasticsearch/config/elasticsearch.crt #xpack.security.http.ssl.certificate: /usr/share/elasticsearch/config/elasticsearch.crt
#xpack.security.http.ssl.certificate_authorities: /usr/share/elasticsearch/config/ca.crt #xpack.security.http.ssl.certificate_authorities: /usr/share/elasticsearch/config/ca.crt
#xpack.security.transport.ssl.key: /usr/share/elasticsearch/config/elasticsearch.key
#xpack.security.transport.ssl.certificate: /usr/share/elasticsearch/config/elasticsearch.crt
#xpack.security.transport.ssl.certificate_authorities: /usr/share/elasticsearch/config/ca.crt
#xpack.security.transport.ssl.verification_mode: none #xpack.security.transport.ssl.verification_mode: none
#xpack.security.http.ssl.client_authentication: none #xpack.security.http.ssl.client_authentication: none
#xpack.security.authc: #xpack.security.authc:
@@ -55,7 +59,7 @@ discovery.seed_hosts:
{%- endfor %} {%- endfor %}
{%- endif %} {%- endif %}
{%- else %} {%- else %}
node.roles: [ data, ingest ] node.roles: [ {{ NODE_ROLES }} ]
node.attr.box_type: {{ NODE_ROUTE_TYPE }} node.attr.box_type: {{ NODE_ROUTE_TYPE }}
discovery.seed_hosts: discovery.seed_hosts:
- {{ grains.master }} - {{ grains.master }}