Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

log01 / rsyslog: install the ca cert and use it in the file

Browse source 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2023-05-04 11:36:32 -07:00
parent 3907db1bc2
commit afb783d989
2 changed files with 9 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
roles/base/files/rsyslog/rsyslog.conf.log01.iad2.fedoraproject.org
View file

@ -219,4 +219,4 @@ local6.* ?m_audit;MergeFormat
$DefaultNetstreamDriver gtls # use gtls netstream driver $DefaultNetstreamDriver gtls # use gtls netstream driver
$ActionSendStreamDriverMode 1 # require TLS for the connection $ActionSendStreamDriverMode 1 # require TLS for the connection
$ActionSendStreamDriverAuthMode anon # server is NOT authenticated $ActionSendStreamDriverAuthMode anon # server is NOT authenticated
$DefaultNetstreamDriverCAFile {{private}}/files/splunk-certs/2022-IT-Root-CA.pem $DefaultNetstreamDriverCAFile /etc/pki/tls/certs/2022-IT-Root-CA.pem

8
roles/base/tasks/main.yml
View file

@ -230,6 +230,14 @@
notify: notify:
- flush journald tmpfiles to persistent store - flush journald tmpfiles to persistent store
- name: install rh ca for splunk
copy: src={{private}}/files/splunk-certs/2022-IT-Root-CA.pem dest=/etc/pki/tls/certs/2022-IT-Root-CA.pem
tags:
- rsyslogd
- config
- base
when: inventory_hostname.startswith('log01')
- name: ensure packages required for rsyslog are installed - name: ensure packages required for rsyslog are installed
package: name={{ item }} state=present package: name={{ item }} state=present
with_items: with_items: