# Configure Shield with Puppet

**URL:** https://discuss.elastic.co/t/configure-shield-with-puppet/41668
**Category:** Elasticsearch
**Tags:** elastic-stack-security
**Created:** [February 12, 2016, 10:28pm UTC](https://discuss.elastic.co/t/configure-shield-with-puppet/41668 "2016-02-12T22:28:01Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![megaforce1020](https://avatars.discourse-cdn.com/v4/letter/m/ecae2f/32.png) [@megaforce1020](https://discuss.elastic.co/u/megaforce1020)
#### Post date: [February 12, 2016, 10:28pm UTC](https://discuss.elastic.co/t/configure-shield-with-puppet/41668/1 "2016-02-12T22:28:01Z")

</div>

I am using puppet to build out my elasticsearch and I've got it mostly configure by following the documentation in the puppet forge elasticsearch site. One thing that I've noticed is the lack of documentation on being able to configure the Shield plugin with puppet. There is documentation and I can use puppet to get the Shield plugin installed, but I would like to also leverage puppet to configure shield files such as role\_mapping, roles, users, etc. Does anyone have any idea to do this? I'm still fairly new in terms of puppet

---

<div class="post-metadata">

### Author: ![dfr0](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dfr0/32/6433_2.png) [@dfr0](https://discuss.elastic.co/u/dfr0)
#### Post date: [March 22, 2016, 3:48am UTC](https://discuss.elastic.co/t/configure-shield-with-puppet/41668/2 "2016-03-22T03:48:57Z")

</div>

Hi megaforce

i've integrated kibana, logstash and elasticsearch on my environment with puppet.

I created many sentences "exec" for each configuration on my manifest, for example:

exec {'exec\_install\_kibana\_shield':  
command =\> "${elk::params::LN\_WWW}/${elk::params::DIR\_KIBANA}/${elk::params::KIBANA\_SHIELD}",  
user =\> 'root',  
unless =\> "ls ${elk::params::KIBANA\_INSTALLED\_PLUGINS}/${elk::params::SHIELD\_PLUGIN\_KIBANA}",  
notify =\> Service['service\_kibana'],

I'm use the hiera on my puppet infraestructure.

The sort names are definited on my yaml files, example:

KIBANA\_INSTALLED\_PLUGINS: '/var/www/kibana/installedPlugins'  
DIR\_PLUGIN\_LICENSE: '/usr/share/elasticsearch/plugins/license'  
SHIELD\_PLUGIN\_KIBANA: 'shield'

I hope that help you.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 1:45pm UTC](https://discuss.elastic.co/t/configure-shield-with-puppet/41668/3 "2017-07-06T13:45:54Z")

</div>