5aff0b59f4
The osquery tooling needed a little work to be fully automated and repeatable. This change tunes up the tools and makes the entire deployment process multi-node capable and repeatable. The osquery role was vendored because of bugs within their use of aarmor profiles and there was no way to disable them. The fleet use of commands for ssl creation have been removed. The ssl modules are now being used to generate all of the certificates. New pre-tasks have been added to check for required variables. If the required variables are not set the playbooks will fail early and notify the user of the issue. Change-Id: I88c2b40ed9d9a88a39bdf07b0dce2900fda50151 Signed-off-by: Kevin Carter <kevin.carter@rackspace.com>
10 lines
470 B
Plaintext
10 lines
470 B
Plaintext
haproxy_extra_services:
|
|
- service:
|
|
haproxy_service_name: kolide-fleet
|
|
haproxy_ssl: False
|
|
haproxy_backend_nodes: "{{ groups['fleet_all'] | default([]) }}" # Fleet nodes
|
|
haproxy_port: 6443 # This is set using the "kolide_fleet_port" variable
|
|
haproxy_check_port: 443 # This is set using the "kolide_fleet_port" variable
|
|
haproxy_backend_port: 443 # This is set using the "kolide_fleet_port" variable
|
|
haproxy_balance_type: tcp
|