feat: add HTTP BasicAuth config for Solr

tasks/rosetta/configure_rosetta_prerequisites.yml

@@ -82,3 +82,26 @@
     dest: "/exlibris/dps/d4_1/system.dir/conf/global.properties"
     state: link
   when: ansible_hostname in "appdev"
+
+- name: create directory for Solr config file
+  ansible.builtin.file:
+    path: "/exlibris/dps/d4_1/solr/server/solr/"
+    state: directory
+    mode: "0755"
+    owner: "{{ vault_rosetta_user }}"
+    group: "{{ vault_rosetta_group }}"
+  when: ("-test" in ansible_hostname) or
+        ("-mol" in ansible_hostname)
+
+- name: >
+    Deploy modified security.json file for Testsystem so CI/CD tests can be run
+    against Solr. Credentials are taken from an Ansible Vault.
+  ansible.builtin.template:
+    src: "exlibris/dps/d4_1/solr/server/solr/security.json.j2"
+    dest: "/exlibris/dps/d4_1/solr/server/solr/security.json"
+    backup: true
+    mode: "0664"
+    owner: "{{ vault_rosetta_user }}"
+    group: "{{ vault_rosetta_group }}"
+  when: ("-test" in ansible_hostname) or
+        ("-mol" in ansible_hostname)

templates/exlibris/dps/d4_1/solr/server/solr/security.json.j2

+{
+  "authentication":{
+    "class":"solr.BasicAuthPlugin",
+    "blockUnknown":true,
+    "credentials":{
+      "slr":"{{ vault_solr_passwords.slr[ansible_hostname] }}",
+      "Test_WebServices":"{{ vault_solr_passwords.Test_WebServices }}",
+      "check_ie_sample": "{{ vault_solr_passwords.check_ie_sample }}"},
+    "":{"v":0}},
+  "authorization":{
+    "class":"solr.RuleBasedAuthorizationPlugin",
+    "user-role":{
+      "slr":"admin",
+      "Test_WebServices":["onlyareader"]},
+      "check_ie_sample":["onlyareader"]},
+    "permissions":[
+      {
+        "name":"read",
+        "role":[
+          "admin",
+          "onlyareader"],
+        "index":1},
+      {
+        "name":"all",
+        "role":["admin"],
+        "index":2}],
+    "":{"v":0}}}