Support for all xpack features through generic install + improved tests

This commit is contained in:
Dale McDiarmid 2016-07-24 15:25:32 +01:00
parent fdf1bda155
commit 57fa9e432b
11 changed files with 87 additions and 53 deletions

View file

@ -74,8 +74,6 @@ suites:
es_plugins: es_plugins:
- plugin: lmenezes/elasticsearch-kopf - plugin: lmenezes/elasticsearch-kopf
version: master version: master
- plugin: license
- plugin: marvel-agent
provisioner: provisioner:
playbook: test/integration/package.yml playbook: test/integration/package.yml
- name: config-2x - name: config-2x
@ -90,8 +88,6 @@ suites:
es_plugins: es_plugins:
- plugin: lmenezes/elasticsearch-kopf - plugin: lmenezes/elasticsearch-kopf
version: master version: master
- plugin: license
- plugin: marvel-agent
provisioner: provisioner:
playbook: test/integration/multi.yml playbook: test/integration/multi.yml
- name: standard-1x - name: standard-1x

View file

@ -23,7 +23,7 @@
#Don't support xpack on versions < 2.0 #Don't support xpack on versions < 2.0
- fail: msg="Use of the xpack notation is not supported on versions < 2.0. Marvel-agent and watcher can be installed as plugins. Version > 2.0 is required for shield." - fail: msg="Use of the xpack notation is not supported on versions < 2.0. Marvel-agent and watcher can be installed as plugins. Version > 2.0 is required for shield."
when: es_enable_xpack and version_compare('2.0', '<') when: es_enable_xpack and es_version | version_compare('2.0', '<')
#Check if working with shield we have an es_api_basic_auth_username and es_api_basic_auth_username - otherwise any http calls wont work #Check if working with shield we have an es_api_basic_auth_username and es_api_basic_auth_username - otherwise any http calls wont work
- fail: msg="Enabling shield requires an es_api_basic_auth_username and es_api_basic_auth_password to be provided to allow cluster operations" - fail: msg="Enabling shield requires an es_api_basic_auth_username and es_api_basic_auth_password to be provided to allow cluster operations"

View file

@ -10,8 +10,8 @@
- set_fact: list_command="--list" - set_fact: list_command="--list"
when: es_version | version_compare('2.0', '<') when: es_version | version_compare('2.0', '<')
#List currently installed plugins #List currently installed plugins - ignore xpack if > v 2.0
- shell: "{{es_home}}/bin/plugin {{list_command}} | sed -n '1!p' | cut -d '-' -f2-" - shell: "{{es_home}}/bin/plugin {{list_command}} | sed -n '1!p' | cut -d '-' -f2-{% if {{es_version}} | version_compare('2.0', '>') %} | grep -vE 'shield|watcher|marvel-agent|graph'{% endif %}"
register: installed_plugins register: installed_plugins
changed_when: False changed_when: False
ignore_errors: yes ignore_errors: yes

View file

@ -0,0 +1,40 @@
---
- set_fact: es_version_changed=((elasticsearch_install_from_package is defined and elasticsearch_install_from_repo.changed) or (elasticsearch_install_from_package is defined and elasticsearch_install_from_package.changed))
#Test if feature is installed
- shell: "{{es_home}}/bin/plugin list | sed -n '1!p' | grep {{item}}"
register: feature_installed
changed_when: False
ignore_errors: yes
environment:
CONF_DIR: "{{ conf_dir }}"
ES_INCLUDE: "{{ instance_default_file }}"
#Remove Plugin if installed and its not been requested or the ES version has changed
- name: Remove {{item}} plugin
command: >
{{es_home}}/bin/plugin remove shield
register: xpack_state
failed_when: "'ERROR' in xpack_state.stdout"
changed_when: xpack_state.rc == 0
when: feature_installed.rc == 0 and (not es_enable_xpack or not '"{{item}}" in es_xpack_features' or es_version_changed)
notify: restart elasticsearch
environment:
CONF_DIR: "{{ conf_dir }}"
ES_INCLUDE: "{{ instance_default_file }}"
#Install plugin if not installed, or the es version has changed (so removed above), and its been requested
- name: Install {{item}} plugin
command: >
{{es_home}}/bin/plugin install {{item}}
register: xpack_state
failed_when: "'ERROR' in xpack_state.stdout"
changed_when: xpack_state.rc == 0
when: (feature_installed.rc == 1 or es_version_changed) and es_enable_xpack and "{{item}}" in es_xpack_features
notify: restart elasticsearch
environment:
CONF_DIR: "{{ conf_dir }}"
ES_INCLUDE: "{{ instance_default_file }}"

View file

@ -2,6 +2,8 @@
- set_fact: es_version_changed=((elasticsearch_install_from_package is defined and elasticsearch_install_from_repo.changed) or (elasticsearch_install_from_package is defined and elasticsearch_install_from_package.changed)) - set_fact: es_version_changed=((elasticsearch_install_from_package is defined and elasticsearch_install_from_repo.changed) or (elasticsearch_install_from_package is defined and elasticsearch_install_from_package.changed))
#enabling xpack installs the license. Not a xpack feature and does not need to be specified
#Check if license is installed #Check if license is installed
- name: Check License is installed - name: Check License is installed
shell: > shell: >
@ -26,7 +28,6 @@
CONF_DIR: "{{ conf_dir }}" CONF_DIR: "{{ conf_dir }}"
ES_INCLUDE: "{{ instance_default_file }}" ES_INCLUDE: "{{ instance_default_file }}"
#Install License if not installed, or it needs to be reinstalled due to ES change (above task will have removed), and its been requested. #Install License if not installed, or it needs to be reinstalled due to ES change (above task will have removed), and its been requested.
- name: Install license plugin - name: Install license plugin
command: > command: >
@ -40,11 +41,14 @@
CONF_DIR: "{{ conf_dir }}" CONF_DIR: "{{ conf_dir }}"
ES_INCLUDE: "{{ instance_default_file }}" ES_INCLUDE: "{{ instance_default_file }}"
#Include shield as we may need to remove it or change it due to es_version_changed #We loop on all as we may need to remove some features
- include: shield/elasticsearch-shield.yml - include: elasticsearch-xpack-install.yml
# when: '"shield" in es_xpack_features' with_items: "{{supported_xpack_features}}"
#Any other xpacks plugins requiring configuration to be entered here #Shield configuration
- include: shield/elasticsearch-shield.yml
#Add any feature specific configuration here
- name: Set Plugin Directory Permissions - name: Set Plugin Directory Permissions
file: state=directory path={{ es_home }}/plugins owner={{ es_user }} group={{ es_group }} recurse=yes file: state=directory path={{ es_home }}/plugins owner={{ es_user }} group={{ es_group }} recurse=yes

View file

@ -1,41 +1,5 @@
--- ---
#Shield specific configuration done here
#Test if shield is installed
- shell: "{{es_home}}/bin/plugin list | sed -n '1!p' | grep shield"
register: shield_installed
changed_when: False
ignore_errors: yes
environment:
CONF_DIR: "{{ conf_dir }}"
ES_INCLUDE: "{{ instance_default_file }}"
#Remove Shield if installed and its not been requested or the ES version has changed
- name: Remove shield plugin
command: >
{{es_home}}/bin/plugin remove shield
register: xpack_state
failed_when: "'ERROR' in xpack_state.stdout"
changed_when: xpack_state.rc == 0
when: shield_installed.rc == 0 and (not es_enable_xpack or not '"shield" in es_xpack_features' or es_version_changed)
notify: restart elasticsearch
environment:
CONF_DIR: "{{ conf_dir }}"
ES_INCLUDE: "{{ instance_default_file }}"
#Install Shield if not installed, or the es version has changed (so removed above), and its been requested
- name: Install shield plugin
command: >
{{es_home}}/bin/plugin install shield
register: xpack_state
failed_when: "'ERROR' in xpack_state.stdout"
changed_when: xpack_state.rc == 0
when: (shield_installed.rc == 1 or es_version_changed) and es_enable_xpack and '"shield" in es_xpack_features'
notify: restart elasticsearch
environment:
CONF_DIR: "{{ conf_dir }}"
ES_INCLUDE: "{{ instance_default_file }}"
#TODO: 1. Skip users with no password defined or error 2. Passwords | length > 6 #TODO: 1. Skip users with no password defined or error 2. Passwords | length > 6

View file

@ -78,7 +78,7 @@ shared_examples 'xpack::init' do |es_version|
end end
#Check shield and license plugins are installed #Check shield,watcher and license plugins are installed
describe file('/usr/share/elasticsearch/plugins/license') do describe file('/usr/share/elasticsearch/plugins/license') do
it { should be_directory } it { should be_directory }
it { should be_owned_by 'elasticsearch' } it { should be_owned_by 'elasticsearch' }
@ -102,6 +102,33 @@ shared_examples 'xpack::init' do |es_version|
it { should be_owned_by 'elasticsearch' } it { should be_owned_by 'elasticsearch' }
end end
describe file('/usr/share/elasticsearch/plugins/watcher') do
it { should be_directory }
it { should be_owned_by 'elasticsearch' }
end
describe command('curl -s localhost:9200/_nodes/plugins?pretty=true -u es_admin:changeMe | grep watcher') do
its(:exit_status) { should eq 0 }
end
#test we haven't installed graph or marvel-agent
describe file('/usr/share/elasticsearch/plugins/graph') do
it { should_not exist }
end
describe command('curl -s localhost:9200/_nodes/plugins?pretty=true -u es_admin:changeMe | grep graph') do
its(:exit_status) { should eq 1 }
end
describe file('/usr/share/elasticsearch/plugins/marvel-agent') do
it { should_not exist }
end
describe command('curl -s localhost:9200/_nodes/plugins?pretty=true -u es_admin:changeMe | grep marvel-agent') do
its(:exit_status) { should eq 1 }
end
#Test users file, users_roles and roles.yml #Test users file, users_roles and roles.yml
describe file('/etc/elasticsearch/shield_node/shield/users_roles') do describe file('/etc/elasticsearch/shield_node/shield/users_roles') do

View file

@ -2,7 +2,7 @@ require 'multi_spec'
describe 'Multi Tests v 2.x' do describe 'Multi Tests v 2.x' do
include_examples 'multi::init', "2.3.4", ["kopf","license","marvel-agent"] include_examples 'multi::init', "2.3.4", ["kopf"]
end end

View file

@ -2,5 +2,5 @@ require 'package_spec'
describe 'Package Tests v 2.x' do describe 'Package Tests v 2.x' do
include_examples 'package::init', "2.3.4", ["kopf","license","marvel-agent"] include_examples 'package::init', "2.3.4", ["kopf"]
end end

View file

@ -10,6 +10,7 @@
es_enable_xpack: true es_enable_xpack: true
es_xpack_features: es_xpack_features:
- shield - shield
- watcher
es_api_basic_auth_username: es_admin es_api_basic_auth_username: es_admin
es_api_basic_auth_password: changeMe es_api_basic_auth_password: changeMe
es_users: es_users:

View file

@ -3,3 +3,5 @@ es_package_url: "https://download.elastic.co/elasticsearch/elasticsearch/elastic
es_conf_dir: "/etc/elasticsearch" es_conf_dir: "/etc/elasticsearch"
sysd_script: "/usr/lib/systemd/system/elasticsearch.service" sysd_script: "/usr/lib/systemd/system/elasticsearch.service"
init_script: "/etc/init.d/elasticsearch" init_script: "/etc/init.d/elasticsearch"
#add supported features here
supported_xpack_features: ["watcher","marvel-agent","graph","shield"]