Skip to content

Commit 185a01f

Browse files
authored
fixed permission gaps with updating kibana-security.yml (#364)
add permissions and waiting for check. Findings 30,35,39
1 parent 9fbdaff commit 185a01f

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

roles/kibana/tasks/kibana-security.yml

+6
Original file line numberDiff line numberDiff line change
@@ -45,6 +45,8 @@
4545
src: /etc/kibana/certs
4646
dest: "/etc/kibana/certs_{{ ansible_date_time.iso8601_micro }}"
4747
mode: preserve
48+
owner: root
49+
group: root
4850
remote_src: true
4951
when: kibana_check_cert_path.stat.exists
5052
register: kibana_move_cert_directory
@@ -72,6 +74,8 @@
7274
src: "{{ elasticstack_ca_dir }}/{{ ansible_hostname }}-kibana.p12"
7375
dest: "{{ elasticstack_ca_dir }}/{{ ansible_hostname }}-kibana.p12_{{ ansible_date_time.iso8601_micro }}"
7476
mode: preserve
77+
owner: root
78+
group: root
7579
remote_src: true
7680
when: kibana_check_cert_file.stat.exists
7781
register: kibana_move_cert_file
@@ -99,6 +103,8 @@
99103
src: "{{ lookup('config', 'DEFAULT_LOCAL_TMP') | dirname }}/{{ ansible_hostname }}-kibana.p12"
100104
dest: "{{ lookup('config', 'DEFAULT_LOCAL_TMP') | dirname }}/{{ ansible_hostname }}-kibana.p12_{{ ansible_date_time.iso8601_micro }}"
101105
mode: preserve
106+
owner: root
107+
group: root
102108
when: kibana_check_temporary_cert.stat.exists
103109
register: kibana_move_cert_file
104110

0 commit comments

Comments
 (0)