diff --git a/tasks/rosetta/configure_rosetta_prerequisites.yml b/tasks/rosetta/configure_rosetta_prerequisites.yml index a90c80d9af6a3bd531f0e2bcb0f6e6e83e99ab3b..5f9c2566baa4ead7a36ba0c8a70a5dd7078dcbce 100644 --- a/tasks/rosetta/configure_rosetta_prerequisites.yml +++ b/tasks/rosetta/configure_rosetta_prerequisites.yml @@ -82,3 +82,26 @@ dest: "/exlibris/dps/d4_1/system.dir/conf/global.properties" state: link when: ansible_hostname in "appdev" + +- name: create directory for Solr config file + ansible.builtin.file: + path: "/exlibris/dps/d4_1/solr/server/solr/" + state: directory + mode: "0755" + owner: "{{ vault_rosetta_user }}" + group: "{{ vault_rosetta_group }}" + when: ("-test" in ansible_hostname) or + ("-mol" in ansible_hostname) + +- name: > + Deploy modified security.json file for Testsystem so CI/CD tests can be run + against Solr. Credentials are taken from an Ansible Vault. + ansible.builtin.template: + src: "exlibris/dps/d4_1/solr/server/solr/security.json.j2" + dest: "/exlibris/dps/d4_1/solr/server/solr/security.json" + backup: true + mode: "0664" + owner: "{{ vault_rosetta_user }}" + group: "{{ vault_rosetta_group }}" + when: ("-test" in ansible_hostname) or + ("-mol" in ansible_hostname) diff --git a/templates/exlibris/dps/d4_1/solr/server/solr/security.json.j2 b/templates/exlibris/dps/d4_1/solr/server/solr/security.json.j2 new file mode 100644 index 0000000000000000000000000000000000000000..f6a27f1e1af206406420c313794cff562dda61cb --- /dev/null +++ b/templates/exlibris/dps/d4_1/solr/server/solr/security.json.j2 @@ -0,0 +1,27 @@ +{ + "authentication":{ + "class":"solr.BasicAuthPlugin", + "blockUnknown":true, + "credentials":{ + "slr":"{{ vault_solr_passwords.slr[ansible_hostname] }}", + "Test_WebServices":"{{ vault_solr_passwords.Test_WebServices }}", + "check_ie_sample": "{{ vault_solr_passwords.check_ie_sample }}"}, + "":{"v":0}}, + "authorization":{ + "class":"solr.RuleBasedAuthorizationPlugin", + "user-role":{ + "slr":"admin", + "Test_WebServices":["onlyareader"]}, + "check_ie_sample":["onlyareader"]}, + "permissions":[ + { + "name":"read", + "role":[ + "admin", + "onlyareader"], + "index":1}, + { + "name":"all", + "role":["admin"], + "index":2}], + "":{"v":0}}}