2018-06-19 10:39:16 +02:00
|
|
|
---
|
|
|
|
|
- name: Elasticsearch Xpack tests initial
|
|
|
|
|
hosts: localhost
|
2018-06-19 21:17:10 +02:00
|
|
|
post_tasks:
|
2018-06-19 10:39:16 +02:00
|
|
|
- include: elasticsearch/test/integration/debug.yml
|
|
|
|
|
roles:
|
2018-06-19 21:17:10 +02:00
|
|
|
- elasticsearch
|
2018-06-19 10:39:16 +02:00
|
|
|
vars:
|
2019-05-09 09:06:02 +02:00
|
|
|
es_config_6x:
|
2018-06-19 21:17:10 +02:00
|
|
|
http.port: 9200
|
|
|
|
|
xpack.security.authc.realms.file1.order: 0
|
2019-05-09 09:06:02 +02:00
|
|
|
xpack.security.authc.realms.file1.type: file
|
2018-06-19 21:17:10 +02:00
|
|
|
xpack.security.authc.realms.native1.order: 1
|
2019-05-09 09:06:02 +02:00
|
|
|
xpack.security.authc.realms.native1.type: native
|
|
|
|
|
es_config_7x:
|
|
|
|
|
http.port: 9200
|
|
|
|
|
xpack.security.authc.realms.file.file1.order: 0
|
|
|
|
|
xpack.security.authc.realms.native.native1.order: 1
|
|
|
|
|
es_config: "{{ es_config_7x if es_major_version == '7.x' else es_config_6x }}"
|
2018-06-19 10:39:16 +02:00
|
|
|
es_heap_size: "1g"
|
|
|
|
|
es_templates: true
|
2019-05-09 09:06:02 +02:00
|
|
|
es_major_version: "7.x"
|
|
|
|
|
es_version: "{{ '7.0.0' if es_major_version == '7.x' else '6.7.1' }}" # This is set to an older version than the current default to force an upgrade
|
2018-06-19 10:39:16 +02:00
|
|
|
es_xpack_license: "{{ lookup('file', '/tmp/license.json') }}"
|
|
|
|
|
es_plugins:
|
2019-05-09 09:06:02 +02:00
|
|
|
- plugin: ingest-attachment
|
2018-06-19 10:39:16 +02:00
|
|
|
es_xpack_features:
|
|
|
|
|
- security
|
|
|
|
|
- alerting
|
|
|
|
|
es_api_basic_auth_username: elastic
|
|
|
|
|
es_api_basic_auth_password: changeme
|
|
|
|
|
es_role_mapping:
|
|
|
|
|
power_user:
|
|
|
|
|
- "cn=admins,dc=example,dc=com"
|
|
|
|
|
user:
|
|
|
|
|
- "cn=users,dc=example,dc=com"
|
|
|
|
|
- "cn=admins,dc=example,dc=com"
|
|
|
|
|
es_users:
|
|
|
|
|
native:
|
|
|
|
|
kibana4_server:
|
|
|
|
|
password: changeMe
|
|
|
|
|
roles:
|
|
|
|
|
- kibana4_server
|
|
|
|
|
logstash_system:
|
|
|
|
|
#this should be successfully modified
|
|
|
|
|
password: aNewLogstashPassword
|
|
|
|
|
#this will be ignored
|
|
|
|
|
roles:
|
|
|
|
|
- kibana4_server
|
|
|
|
|
elastic:
|
|
|
|
|
password: elasticChanged
|
|
|
|
|
file:
|
|
|
|
|
es_admin:
|
|
|
|
|
password: changeMe
|
|
|
|
|
roles:
|
|
|
|
|
- admin
|
|
|
|
|
testUser:
|
|
|
|
|
password: changeMeAlso!
|
|
|
|
|
roles:
|
|
|
|
|
- power_user
|
|
|
|
|
- user
|
|
|
|
|
es_roles:
|
|
|
|
|
file:
|
|
|
|
|
admin:
|
|
|
|
|
cluster:
|
|
|
|
|
- all
|
|
|
|
|
indices:
|
|
|
|
|
- names: '*'
|
|
|
|
|
privileges:
|
|
|
|
|
- all
|
|
|
|
|
power_user:
|
|
|
|
|
cluster:
|
|
|
|
|
- monitor
|
|
|
|
|
indices:
|
|
|
|
|
- names: '*'
|
|
|
|
|
privileges:
|
|
|
|
|
- all
|
|
|
|
|
user:
|
|
|
|
|
indices:
|
|
|
|
|
- names: '*'
|
|
|
|
|
privileges:
|
|
|
|
|
- read
|
|
|
|
|
kibana4_server:
|
|
|
|
|
cluster:
|
|
|
|
|
- monitor
|
|
|
|
|
indices:
|
|
|
|
|
- names: '.kibana'
|
|
|
|
|
privileges:
|
|
|
|
|
- all
|
|
|
|
|
native:
|
|
|
|
|
logstash:
|
|
|
|
|
cluster:
|
|
|
|
|
- manage_index_templates
|
|
|
|
|
indices:
|
|
|
|
|
- names: 'logstash-*'
|
|
|
|
|
privileges:
|
|
|
|
|
- write
|
|
|
|
|
- delete
|
|
|
|
|
- create_index
|
|
|
|
|
#this will be ignored - its reserved
|
|
|
|
|
logstash_system:
|
|
|
|
|
cluster:
|
|
|
|
|
- manage_index_templates
|
|
|
|
|
indices:
|
|
|
|
|
- names: 'logstash-*'
|
|
|
|
|
privileges:
|
|
|
|
|
- write
|
|
|
|
|
- delete
|
|
|
|
|
- create_index
|
|
|
|
|
|
|
|
|
|
#modifies the installation. Changes es_admin password and upgrades ES. Tests confirm the correct version is installed.
|
|
|
|
|
- name: Elasticsearch Xpack modify
|
|
|
|
|
hosts: localhost
|
2018-06-19 21:17:10 +02:00
|
|
|
post_tasks:
|
2018-06-19 10:39:16 +02:00
|
|
|
- include: elasticsearch/test/integration/debug.yml
|
|
|
|
|
roles:
|
2018-06-19 21:17:10 +02:00
|
|
|
- elasticsearch
|
2018-06-19 10:39:16 +02:00
|
|
|
vars:
|
2019-05-09 09:06:02 +02:00
|
|
|
es_config_6x:
|
2018-06-19 21:17:10 +02:00
|
|
|
http.port: 9200
|
|
|
|
|
xpack.security.authc.realms.file1.order: 0
|
2019-05-09 09:06:02 +02:00
|
|
|
xpack.security.authc.realms.file1.type: file
|
2018-06-19 21:17:10 +02:00
|
|
|
xpack.security.authc.realms.native1.order: 1
|
2019-05-09 09:06:02 +02:00
|
|
|
xpack.security.authc.realms.native1.type: native
|
|
|
|
|
es_config_7x:
|
|
|
|
|
http.port: 9200
|
|
|
|
|
xpack.security.authc.realms.file.file1.order: 0
|
|
|
|
|
xpack.security.authc.realms.native.native1.order: 1
|
|
|
|
|
es_config: "{{ es_config_7x if es_major_version == '7.x' else es_config_6x }}"
|
2018-06-19 10:39:16 +02:00
|
|
|
es_heap_size: "1g"
|
|
|
|
|
es_templates: true
|
|
|
|
|
es_xpack_license: "{{ lookup('file', '/tmp/license.json') }}"
|
|
|
|
|
es_plugins:
|
|
|
|
|
- plugin: ingest-attachment
|
|
|
|
|
es_xpack_features:
|
|
|
|
|
- security
|
|
|
|
|
- alerting
|
|
|
|
|
es_api_basic_auth_username: elastic
|
|
|
|
|
es_api_basic_auth_password: elasticChanged
|
|
|
|
|
es_role_mapping:
|
|
|
|
|
power_user:
|
|
|
|
|
- "cn=admins,dc=example,dc=com"
|
|
|
|
|
user:
|
|
|
|
|
- "cn=users,dc=example,dc=com"
|
|
|
|
|
- "cn=admins,dc=example,dc=com"
|
|
|
|
|
es_users:
|
|
|
|
|
native:
|
|
|
|
|
kibana4_server:
|
|
|
|
|
password: changeMe
|
|
|
|
|
roles:
|
|
|
|
|
- kibana4_server
|
|
|
|
|
logstash_system:
|
|
|
|
|
#this will be ignored
|
|
|
|
|
roles:
|
|
|
|
|
- kibana4_server
|
|
|
|
|
file:
|
|
|
|
|
es_admin:
|
|
|
|
|
password: changeMeAgain
|
|
|
|
|
roles:
|
|
|
|
|
- admin
|
|
|
|
|
testUser:
|
|
|
|
|
password: changeMeAlso!
|
|
|
|
|
roles:
|
|
|
|
|
- power_user
|
|
|
|
|
- user
|