From 674cea7938097b8e6be83e3fd67c521d586edba8 Mon Sep 17 00:00:00 2001 From: Samuel Mutel Date: Wed, 4 Nov 2020 12:33:44 +0100 Subject: [PATCH] Improve the documentation for TLS (#728) Co-authored-by: Julien Mailleret <8582351+jmlrt@users.noreply.github.com> --- docs/ssl-tls-setup.md | 29 +++++++++++++++++++++++++++-- 1 file changed, 27 insertions(+), 2 deletions(-) diff --git a/docs/ssl-tls-setup.md b/docs/ssl-tls-setup.md index d08a0ea..b948e8e 100644 --- a/docs/ssl-tls-setup.md +++ b/docs/ssl-tls-setup.md @@ -68,8 +68,8 @@ $ bin/elasticsearch-certutil cert --ca ./my-ca.p12 --out ./my-keystore.p12 --pas xpack.security.authc.realms.file.file1.order: 0 xpack.security.authc.realms.native.native1.order: 1 es_heap_size: 1g - es_api_basic_auth_username: elastic - es_api_basic_auth_password: changeme + es_api_basic_auth_username: "elastic" # This is the default user created by the installation of elasticsearch + es_api_basic_auth_password: "changeme" # This is the default password created by the installation of elasticsearch es_enable_http_ssl: true es_enable_transport_ssl: true es_ssl_keystore: "files/certs/my-keystore.p12" @@ -78,3 +78,28 @@ $ bin/elasticsearch-certutil cert --ca ./my-ca.p12 --out ./my-keystore.p12 --pas es_ssl_truststore_password: "truststore_password" es_validate_certs: no ``` + +## Changing the default password of elastic user + +To change the default password of user elastic: + +* Add this line to your playbook: + +``` +vars: + es_api_basic_auth_username: "elastic" + es_api_basic_auth_password: "changeme" + es_users: + native: + elastic: + password: "" +``` + +* Deploy your playbook +* Update your playbook with: + +``` +vars: + es_api_basic_auth_username: "elastic" + es_api_basic_auth_password: "" +```