Add SSL/TLS support

This commit introduces SSL/TLS support for the elastic search transport
layer. It assumes certificates are generated externally, and only
handles uploading and configuring the server accordingly.
This commit is contained in:
Aeva Black 2019-06-27 13:53:23 -07:00
parent 5b1d028bd2
commit d7efa2048a
4 changed files with 53 additions and 0 deletions

View file

@ -0,0 +1,23 @@
---
- name: ensure certificate directory exists
file:
dest: "{{ es_ssl_certificate_path }}"
state: directory
- name: Upload HTTP SSL/TLS certificates
copy:
src: "{{ item }}"
dest: "{{ es_ssl_certificate_path }}/{{ item | basename }}"
with_items:
- "{{ es_ssl_key }}"
- "{{ es_ssl_certificate }}"
when: es_enable_http_ssl|bool or es_enable_transport_ssl|bool
- local_action: stat path="{{ role_path }}/files/{{ es_ssl_certificate_authority }}"
register: es_cafile
- name: Upload SSL Certificate Authority
copy:
src: "{{ es_ssl_certificate_authority }}"
dest: "{{ es_ssl_certificate_path }}/{{ es_ssl_certificate_authority | basename }}"
when: es_cafile.stat.exists|bool and es_cafile.stat.isreg|bool