Audit log bugfix

Set 0700 to the /var/log/elasticsearch directory
Add new parameter to set the seze of the audit log files: audit_log_file_size

Depends-On: I32c515003e747293ac504672557e9862c0a24764
Change-Id: Icc8cf427f3476f5a5d9941f61da8488c5b6c6aab
Signed-off-by: simicza <szilveszter.simicza@nokia.com>

diff --git a/SPECS/infra-charts.spec b/SPECS/infra-charts.spec
index 4fac4e4..aeebbb6 100644 (file)
--- a/SPECS/infra-charts.spec
+++ b/SPECS/infra-charts.spec
@@ -15,7 +15,7 @@
 %define COMPONENT infra-charts
 %define RPM_NAME caas-%{COMPONENT}
 %define RPM_MAJOR_VERSION 1.0.0
-%define RPM_MINOR_VERSION 22
+%define RPM_MINOR_VERSION 23
 
 Name:           %{RPM_NAME}
 Version:        %{RPM_MAJOR_VERSION}

diff --git a/ansible/roles/pre_config_all/tasks/main.yml b/ansible/roles/pre_config_all/tasks/main.yml
index ce07505..98a3e8d 100644 (file)
--- a/ansible/roles/pre_config_all/tasks/main.yml
+++ b/ansible/roles/pre_config_all/tasks/main.yml
@@ -138,6 +138,7 @@
     owner: "{{ caas.uid.elasticsearch }}"
     group: "{{ caas.uid.elasticsearch }}"
     state: directory
+    mode: 0700
   become_user: "root"
   when: (nodetype is defined) and (nodetype | search('caas_master'))
 

diff --git a/cm_config/caas.yaml b/cm_config/caas.yaml
index 521e37a..6f1d784 100644 (file)
--- a/cm_config/caas.yaml
+++ b/cm_config/caas.yaml
@@ -74,6 +74,7 @@ danmnet_default_network_id: flannel
 danmnet_default_network_type: flannel
 caas_chart_path: "{{ caas_base_directory }}/infra-charts"
 caas_policy_directory: "{{ caas_base_directory }}/policies"
+audit_log_file_size: 100
 kubernetes_service_url: kubernetes.default.svc
 prometheus_port: 9090
 prometheus_url: prometheus.kube-system.svc.{{ dns_domain }}