change default admin password for thehive

group_vars/all/users.yml

@@ -28,13 +28,13 @@ THEHIVE_KIBANA_USER:
 
 
 THEHIVE_USERS:
-  - kiril:
-    username: "kiril"
-    name: "Kiril"
-    surname: "Kiroski"
+  - user1:
+    username: "user1"
+    name: "User1"
+    surname: "SOC"
     roles: '["read", "write", "admin"]'
-  - temur:
-    username: "temur"
-    name: "Temur"
-    surname: "Maisuradze"
+  - user2:
+    username: "user2"
+    name: "User2"
+    surname: "SOC"
     roles: '["read", "write", "admin"]'

roles/thehive/tasks/adminuser.yml

@@ -28,3 +28,13 @@
 - name: copy API key to local file
   local_action: copy content="{{adminuserapikey}}" dest=secrets/tokens/thehive_secret_key
 
+- name: copy json file for admin pass
+  remote_user: root
+  template:
+    src: adminpass.json
+    dest: /tmp/adminpass.json
+
+- name: change password for admin user
+  shell: "curl -X POST http://127.0.0.1:9000/api/v1/user/{{ adminuserid }}/password/set -b /tmp/cookie.txt -c /tmp/cookie.txt -H 'Content-Type: application/json' -d @/tmp/adminpass.json"
+  args:
+    warn: false

roles/thehive/templates/adminpass.json

+{"password":"{{lookup('password', '{{playbook_dir}}/secrets/passwords/thehive_adminpass')}}"}