---
- name: "▶️ Run securityadmin.sh inside the indexer container"
ansible.builtin.shell:
cmd: >-
container exec -e JAVA_HOME=/usr/share/wazuh-indexer/jdk {{ WAZUH_INDEXER_CONTAINER_ADDRESS }}
/usr/share/wazuh-indexer/plugins/opensearch-security/tools/securityadmin.sh
-cd {{ WAZUH_INDEXER_SECURITY_DIR_CONTAINER }}/
-icl
-key {{ WAZUH_INDEXER_CERTS_DIR_CONTAINER }}/admin-key.pem
-cert {{ WAZUH_INDEXER_CERTS_DIR_CONTAINER }}/admin.pem
-cacert {{ WAZUH_INDEXER_CERTS_DIR_CONTAINER }}/root-ca.pem
-nhnv
chdir: "{{ WAZUH_INSTANCE_DIR }}"
register: wazuh_securityadmin
changed_when: "'Done with success' in wazuh_securityadmin.stdout"
failed_when: wazuh_securityadmin.rc != 0 or 'Done with success' not in wazuh_securityadmin.stdout
retries: 10
delay: 10
until: wazuh_securityadmin.rc == 0
