openstack-ansible-ops/osquery/vars/variables.yml
Kevin Carter 1e40cef199
More cleanup of the osquery role
This cleanup should make things easier to integrate with OSA
while also better supporting a stand alone deployment.

Change-Id: I7321981a9ced7bf2e807a25cadde5463b39eef8f
Signed-off-by: Kevin Carter <kevin.carter@rackspace.com>
2018-10-16 17:38:04 -05:00

37 lines
1.3 KiB
YAML

---
kolide_fleet_enable: true
kolide_fleet_ssl_cert: /etc/ssl/certs/fleet.cert
kolide_fleet_ssl_key: /etc/ssl/private/fleet.key
kolide_fleet_ssl_ca_cert: /etc/ssl/certs/fleet-ca.pem
kolide_fleet_ssl_ca_key: /etc/ssl/private/fleet-ca.key
kolide_fleet_ssl_pem: /etc/ssl/private/fleet.pem
# Osquery vars
osquery_enroll_secret_file: /etc/osquery/osquery_enroll_secret
osquery_debug_packages_install: false
osquery_config_plugin: 'filesystem'
osquery_logger_plugin: 'filesystem'
osquery_rsyslog: false
osquery_flags:
- "--tls_server_certs={{ kolide_fleet_ssl_cert }}"
- "--tls_hostname={{ hostvars[groups['kolide-fleet_all'][0]]['ansible_host'] }}:443"
- "--host_identifier=hostname"
- "--enroll_tls_endpoint=/api/v1/osquery/enroll"
- "--config_plugin=tls"
- "--config_tls_endpoint=/api/v1/osquery/config"
- "--config_tls_refresh=10"
- "--disable_distributed=false"
- "--distributed_plugin=tls"
- "--distributed_interval=10"
- "--distributed_tls_max_attempts=3"
- "--distributed_tls_read_endpoint=/api/v1/osquery/distributed/read"
- "--distributed_tls_write_endpoint=/api/v1/osquery/distributed/write"
- "--logger_plugin=tls"
- "--logger_tls_endpoint=/api/v1/osquery/log"
- "--logger_tls_period=10"
- "--enroll_secret_path={{ osquery_enroll_secret_file }}"