Commit graph

394 commits

Author SHA1 Message Date
Bernhard Flühmann
9d3627431b
Cleanup remove keystore entries (#771) 2021-03-03 13:48:25 +01:00
Julien Mailleret
30fcd95d51
Fix "list native roles" task (#779)
This commit fix "List Native Roles" task with Elasticsearch 7.11.0+
by removing the unused `body_format` parameter from `uri` module.

This parameter isn't used with a GET method but make request fail with
`request [GET /_security/role] does not support having a body` error
with Elasticsearch 7.11.0+.
2021-02-22 17:02:41 +01:00
Julien Mailleret
e2caeb84b3
Remove OSS support for version >= 7.11.0 (#770)
This commit is removing the option to install Elasticsearch OSS
distribution for version >= 7.11.0.

This is due to Elasticsearch recent license change.
See https://www.elastic.co/blog/licensing-change for more details.

- Add notice to breaking changes and update documentation
- Fail the deployment if trying to install OSS >= 7.11.0
- Remove OSS tests for 7.x except the upgrade test from last OSS version
  to default distribution
2021-02-05 16:23:55 +01:00
Bernhard Flühmann
78e805e6cb
Ad support for elasticsearch-keystore entries (#769) 2021-02-03 18:37:52 +01:00
rubar çelik
69c8997a83
Update elasticsearch-Debian.yml (#761)
Co-authored-by: Julien Mailleret <8582351+jmlrt@users.noreply.github.com>
2021-02-03 15:10:13 +01:00
Julien Mailleret
e1fd7d770d
Fix java install path when system has multiple java (#753)
This commit fix the command to get Java install path when the system has
multiple java installed

Fix #721
2021-01-06 18:22:27 +01:00
Robin Opletal
5b3976cd20
Fix idempotency for both supported CentOS versions (#747)
* Fix idempotency for version lock broken in CentOS8
2020-12-03 08:59:44 -06:00
Julien Mailleret
c91892ac92
fix some typos (#740) 2020-11-04 16:14:49 +01:00
Samuel Mutel
fdfaa5c888
Add an option to not upload SSL/TLS certs (#727) 2020-10-12 10:02:25 +02:00
Luke Snyder
a933f3c90e
Use run_once for api related tasks (#716)
Co-authored-by: Luke Snyder <lksnyder0@gmail.com>
2020-09-07 15:57:11 +02:00
Wade Rossmann
50bf641b8c
Properly quote password in shell command (#715) 2020-08-26 08:42:43 +02:00
Andris Strazdiņš
f339345a0b
Update elasticsearch-security-file.yml (#705)
Without become option stat operation for old users file will work only if user is in elasticsearch group, but copying of old file will fail because user have no write access in elasticsearch config dir.
2020-07-16 16:42:41 +02:00
SuRaMoN
d99c0c86c5
Fixed running ansible in check mode (#701)
Co-authored-by: Julien Mailleret <8582351+jmlrt@users.noreply.github.com>
2020-06-29 13:46:51 +02:00
anisf
9539712bd7
add AMZN Linux 2 support (#703) 2020-06-26 09:42:23 +02:00
Julien Mailleret
cab03ece10
xpack features refactoring (#653)
- rename es_enable_xpack variable to oss_version
  this variable name should be more explicit and consistent with the xpack changes made in 6.3
  es_enable_xpack can still be used but is deprecated and will be removed in a later version.
- remove es_xpack-features variables
  this variable was not working anymore since 6.3 [0]

[0]: https://github.com/elastic/ansible-elasticsearch/issues/608
2020-06-12 18:15:03 +02:00
Alberto Martínez Ballesteros
4420df6927
Use a template to write override.conf file (#697) 2020-05-27 14:56:03 +02:00
Sylvain Baubeau
20d2a8fe6e
stop using deprecated version_compare (#659) 2020-05-06 13:41:00 +02:00
Duy Nguyen
96055923f3
Update elasticsearch-security-file.yml
Refactor template tasks
2020-03-06 15:19:09 +08:00
Duy Nguyen
c4e00fdc5f
Update elasticsearch-security.yml
Refactor template task for copying roles files
2020-03-06 15:15:28 +08:00
Duy Nguyen
9193660334
Update tasks/xpack/elasticsearch-xpack.yml
Co-Authored-By: Julien Mailleret <julien.mailleret@elastic.co>
2020-03-04 22:01:00 +08:00
Duy Nguyen
b1acff4820
Update tasks/xpack/elasticsearch-xpack.yml
Co-Authored-By: Julien Mailleret <julien.mailleret@elastic.co>
2020-03-04 22:00:50 +08:00
Duy Nguyen
444d9f473b
Update elasticsearch-xpack.yml
Refactor file module and fix file mode syntax to support octal number format
2020-03-04 14:56:35 +08:00
Philipp Gassmann
ff9f2c9f56
fix check mode
fix error while evaluating conditional (es_version_locked.stdout|int > 0): 'dict object' has no attribute 'stdout'
2020-02-10 15:49:22 +01:00
Julien Mailleret
12ffadbae5
Merge pull request #669 from retentionscience/gs/missing-become
Several tasks in elasticsearch-ssl.yml missing become
2020-01-31 15:32:56 +01:00
Julien Mailleret
7f92658fdc
Merge pull request #671 from stuvusIT/enhancement/no-whitespace-before-newline
tasks/snapshot-release.yml: No whitespace before newline
2020-01-31 15:25:31 +01:00
haslersn
886a50c77f tasks/snapshot-release.yml: No whitespace before newline 2020-01-29 20:08:21 +01:00
Garrick Staples
bd48a3567e
Merge branch 'master' into gs/missing-become 2020-01-28 14:24:55 -08:00
Garrick Staples
14ac4b53ad Several tasks in elasticsearch-ssl.yml missing become 2020-01-28 14:23:22 -08:00
Julien Mailleret
888480cb75
Merge branch 'master' into fix-es_java_opts-646 2019-12-19 07:21:52 +01:00
Julien Mailleret
f1b79129f1
add proxy options to ES_JAVA_OPTS when defined with es_proxy_host 2019-12-18 11:57:02 +01:00
Julien Mailleret
1116d4ddf4
fix when condition for es_ssl_certificate_authority
bool ansible filter can only be used for strings matching "true" or "false"
2019-12-18 11:30:25 +01:00
Julien Mailleret
11bf8d2d54
set templates task to run only if es_templates is true 2019-12-11 13:40:15 +01:00
Julien Mailleret
ea4d6cf43a
ansible code simplification after review 2019-12-02 14:15:00 +01:00
Julien Mailleret
bc7fc40b34
fix files mode syntax
From Ansible doc (https://docs.ansible.com/ansible/latest/modules/template_module.html#template-module)
For those used to /usr/bin/chmod remember that modes are actually octal numbers. You must either add a leading zero so that Ansible's YAML parser knows it is an octal number (like 0644 or 01777) or quote it (like '644' or '1777') so Ansible receives a string and can do its own conversion from string into number.
Giving Ansible a number without following one of these rules will end up with a decimal number which will have unexpected results.
2019-11-28 07:54:25 +01:00
Julien Mailleret
04438f9110
allow to deploy custom config files 2019-11-27 11:50:26 +01:00
Julien Mailleret
6217e9485e
stop overriding log4j configuration
The log4j configuration template provided by this ansible role doesn't reflect current log4j configuration in elasticsearch 6.x and 7.x.
Also this template doesn't contain any variable so everything is hardcoded inside.
As we don't need to override any value inside, let's use standard elasticsearch log4j configuration file provided by elasticsearch package and stop overriding it with this role.
2019-11-26 23:31:59 +01:00
pemontto
6b1e5c2b63
Fix permissions of cert directory and files 2019-10-31 10:55:40 +00:00
pemontto
70143c6327
Add es_license_api variable 2019-10-31 10:54:53 +00:00
pemontto
a2c4012197
Update and document unmanaged user vars 2019-10-28 14:25:52 +00:00
pemontto
7fd243827c
Add configurable native realm sleep 2019-10-25 10:10:42 +01:00
pemontto
b59262cb34
Fix deprecated license URL 2019-10-18 18:27:55 +01:00
pemontto
3707af1488
Fix conditional for password removal 2019-10-18 17:51:44 +01:00
pemontto
57fa4e5176
Add option to enable xpack trial 2019-10-18 16:54:46 +01:00
pemontto
8d72d86ab8
Fix es_same_keystore conditional 2019-10-16 16:39:31 +01:00
pemontto
e01af7977f
Better support for different truststores 2019-10-16 16:36:43 +01:00
pemontto
2b0343e135
URL encode items in path 2019-10-16 16:36:17 +01:00
pemontto
27e3cff9a2
Add option to keep existing users 2019-10-15 15:37:39 +01:00
pemontto
7196557c09
Update tests 2019-10-13 16:18:55 +01:00
Nathan Young
e2ffdce380
Add ability to use key and truststore passwords 2019-10-12 00:57:49 +01:00
Nathan Young
d0064c6a88
Add option for invalid certificates 2019-10-12 00:03:47 +01:00