5aff0b59f4
The osquery tooling needed a little work to be fully automated and repeatable. This change tunes up the tools and makes the entire deployment process multi-node capable and repeatable. The osquery role was vendored because of bugs within their use of aarmor profiles and there was no way to disable them. The fleet use of commands for ssl creation have been removed. The ssl modules are now being used to generate all of the certificates. New pre-tasks have been added to check for required variables. If the required variables are not set the playbooks will fail early and notify the user of the issue. Change-Id: I88c2b40ed9d9a88a39bdf07b0dce2900fda50151 Signed-off-by: Kevin Carter <kevin.carter@rackspace.com>
40 lines
776 B
YAML
40 lines
776 B
YAML
---
|
|
|
|
################################## ALL HOSTS ##################################
|
|
all:
|
|
hosts:
|
|
# Local host
|
|
localhost:
|
|
ansible_connection: local
|
|
|
|
################################## REQUIRED ###################################
|
|
logging01:
|
|
ansible_host: 172.16.27.100
|
|
ansible_user: root
|
|
|
|
vars: {}
|
|
|
|
|
|
################################### GROUPS ####################################
|
|
|
|
# The hosts group is used to target physical host machines. Enter all physical
|
|
# host machines here.
|
|
hosts:
|
|
hosts:
|
|
logging01: {}
|
|
|
|
# This is the location where fleet(s) will live
|
|
fleet_all:
|
|
hosts:
|
|
logging01: {}
|
|
|
|
mariadb_all:
|
|
children:
|
|
fleet_all: {}
|
|
|
|
osquery_all:
|
|
hosts:
|
|
logging02:
|
|
ansible_host: 172.16.27.101
|
|
ansible_user: root
|