Skip to content

Commit

Permalink
Allow the user to customize the certificates attributes in indexer se…
Browse files Browse the repository at this point in the history
…curity plugin

In indexer security plugin for the nodes_dn field.
Remove the Wazuh OU, O, L, C default attributes when certificates are managed by the user.
Instead, only use the CN with the node name.
  • Loading branch information
poloz-lab committed Aug 4, 2022
1 parent 5b10733 commit 0cecd38
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions templates/wazuh_indexer_yml.erb
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,11 @@ plugins.security.check_snapshot_restore_write_privileges: true
plugins.security.enable_snapshot_restore_privilege: true
plugins.security.nodes_dn:
<% @indexer_cluster_initial_master_nodes.each do |node| -%>
<% if @manage_certs -%>
- "CN=<%= node %>,OU=Wazuh,O=Wazuh,L=California,C=US"
<% else -%>
- "CN=<%= node %>"
<% end -%>
<% end -%>
plugins.security.restapi.roles_enabled:
- "all_access"
Expand Down

0 comments on commit 0cecd38

Please sign in to comment.