Nathan Young
45ef5a467c
Add SSL keystore and truststore
2019-10-11 16:09:05 +01:00
Jan Dreyer
d04905e75f
removing duplicate stuff
...
moving es_apt_key_id to correct position
2019-09-21 23:41:37 +02:00
Jan Dreyer
14d3a41edd
merge upstream
2019-09-21 23:36:21 +02:00
VerboEse
212c4e1389
make repository key id configurable via variable
2019-09-21 23:31:30 +02:00
Julien Mailleret
1befe6c0d9
stop trying to create users file as it's already created by the official package
2019-09-18 10:57:58 +02:00
Julien Mailleret
9bac169862
use files permissions from official package
2019-09-18 10:57:07 +02:00
Julien Mailleret
6a1b886753
use default permissions from official package for plugin directory
2019-09-18 10:53:43 +02:00
Julien Mailleret
79470cb344
replace hardcoded /etc/elasticsearch dir by the good variable
2019-09-18 10:04:50 +02:00
Julien Mailleret
c8b666bd79
remove /etc/elasticsearch/security directory creation
...
This directory isn't used anywhere in this ansible-role
2019-09-18 09:51:45 +02:00
Julien Mailleret
08a8a467b6
fix missing permissions
2019-09-16 12:31:07 +02:00
Julien Mailleret
8e1cafacf5
add some comment to better identify user migration tasks from elasticsearch < 6.3
2019-09-16 10:46:43 +02:00
Julien Mailleret
e45c902e5e
clean unused task related to multi-instance directories
2019-09-16 10:46:43 +02:00
Julien Mailleret
407dddcae1
hardcode elasticsearch-users command instead of es_xpack_users_command
...
This variable was introduce to match legacy x-pack/users command before 6.3.
2019-09-16 10:46:43 +02:00
Julien Mailleret
08512fc17e
fix typo
...
I think this typo was here since https://github.com/elastic/ansible-elasticsearch/pull/129/commits/048fd636025a00379d2549c36f8b4bd271a8f832
2019-09-16 10:46:37 +02:00
Julien Mailleret
27a524cd07
remove x-pack dir creation
2019-09-16 10:43:32 +02:00
Julien Mailleret
0f601259c6
clean es_xpack_conf_subdir variable
...
This variable was added to manage specific x-pack dir with version < 6.3
2019-09-16 10:43:32 +02:00
Julien Mailleret
abaf124639
cleanup unused es_version_changed fact
2019-09-16 10:43:32 +02:00
Julien Mailleret
d5e414b9aa
clean code related to xpack plugin install
...
We don't need this anymore as X-Pack is now already included in elasticsearch since 6.3.
2019-09-16 10:43:32 +02:00
Aeva
6811cde9db
Merge branch 'master' into AddSSLSupport
2019-09-07 13:04:22 -07:00
Łukasz Różok
fd3ceedd8c
Remove ES version lock on RedHat when es_version_hold: false
2019-09-06 11:09:24 +02:00
Łukasz Różok
7562990df9
Remove ES version hold on Debian when es_version_hold: false
2019-09-05 13:50:41 +02:00
Julien Mailleret
38390a5742
Merge branch 'master' into AddSSLSupport
2019-09-04 11:37:04 +02:00
Titan Lien
651bfdf0fa
alwasy gather the es_major_version variables
2019-08-06 16:00:14 +02:00
Aeva
6f93938c48
Merge branch 'master' into AddSSLSupport
2019-07-24 13:22:21 -07:00
Aeva Black
d7efa2048a
Add SSL/TLS support
...
This commit introduces SSL/TLS support for the elastic search transport
layer. It assumes certificates are generated externally, and only
handles uploading and configuring the server accordingly.
2019-07-23 08:17:39 -07:00
Ludovic Petetin
5bac5a4dbf
Use ini_file module for systemd overriding config file, better task naming and fix variable indentation
2019-07-22 15:19:00 +02:00
Ludovic Petetin
5994840c75
Create overriding systemd directory only if using systemd and memory lock is enabled
2019-07-22 14:42:26 +02:00
Ludovic Petetin
b73cd06c14
Set limitMEMLOCK for OS using systemd
2019-07-22 12:28:40 +02:00
Julien Mailleret
718b3936f1
remove http.port recommendation
2019-07-12 11:59:07 +02:00
Julien Mailleret
71c405f86d
Merge branch 'master' into option_add_repo
2019-07-11 23:06:59 +02:00
Julien Mailleret
872b06de62
Merge branch 'master' into not_so_basic
2019-07-10 09:21:09 +02:00
Michael Russell
582c79c607
Add back in force_basic_auth for all http requests
...
Related: #576
This is needed when using security for 6.x. All other http requests
still have this parameter added.
2019-07-09 21:26:10 +02:00
Kevin Tibi
812faf9596
Add option for disable the addition of official repository
2019-07-03 17:24:50 +02:00
Ludovic Petetin
c52eed7aa1
Set userid and groupid between ElasticSearch removal and installation
2019-06-28 14:15:03 +02:00
Julien Mailleret
5b1d028bd2
fix ''dict object has no attribute dict_keys" issue with python3 ( #578 )
...
In Python2, the dict.keys(), dict.values(), and dict.items() methods returns a list. Jinja2 returns that to Ansible via a string representation that Ansible can turn back into a list. In Python3, those methods return a dictionary view object.
resource: https://docs.ansible.com/ansible/2.4/playbooks_python_version.html#dictionary-views
2019-06-07 15:54:10 +02:00
Julien Mailleret
2cb020a4c2
Remove multi instances support ( #566 )
...
* remove multi instances support
The goal is to stop supporting installation of more than one node in the same host. This commit update the Ansible role README documentation and remove the multi instances kitchen test.
* remove systemd and init.d templates
As we no more need to support more than one node on the same host, we no more need to override init files provided by elasticsearch official packages.
* remove file script feature
File scripts have been removed since elasticsearch 6.0 (https://www.elastic.co/guide/en/elasticsearch/reference/6.0/breaking_60_scripting_changes.html#_file_scripts_removed )
* remove custom user and custom group
ES_USER and ES_GROUP settings are no longer supported (https://www.elastic.co/guide/en/elasticsearch/reference/6.0/breaking_60_packaging_changes.html#_configuring_custom_user_and_group_for_package_is_no_longer_allowed )
* add upgrade procedure
* use same task for license activation with and without authentication
2019-06-03 14:18:09 +02:00
Julien Mailleret
a879b74def
[xpack] use elasticsearch default xpack features ( #560 )
...
- Stop forcing es_xpack_features variable in order to let elasticsearch install default features described in http://localhost:9200/_xpack
- Change xpack test scope to be able to test default xpack install
- xpack scenario will test xpack install with default features
- xpack upgrade scenario will fully test security feature
- oss-to-xpack-upgrade will test installing only other specific features
- Cleanup some duplicate serverspec tests
- Remove `system_key`feature (deprecated in 5.6 and removed in 6.0 - [Breaking Changes 6.0.0](https://www.elastic.co/guide/en/elasticsearch/reference/6.0/breaking-6.0.0-xes.html ))
- Cleanup some ansible code (especially in `when` conditions)
2019-05-29 12:10:11 +02:00
Julien Mailleret
1585ec2c1c
remove file script feature
...
File scripts have been removed since elasticsearch 6.0 (https://www.elastic.co/guide/en/elasticsearch/reference/6.0/breaking_60_scripting_changes.html#_file_scripts_removed )
2019-05-27 18:16:50 +02:00
Hamish Forbes
d00bd5f3f1
Configurable instance_suffix
2019-05-15 14:14:02 +01:00
Julien Mailleret
a677218fa8
[templates] simplify template install task
2019-05-09 19:39:09 +02:00
Julien Mailleret
a1c81884e2
[7.x] add support for elasticsearch 7.x and remove support for 5.x ( #558 )
...
- add support for elasticsearch 7.x
- remove support for elasticsearch 5.x
- update kitchen-ansible configuration (install ansible and jmespath dependencies using os repositories)
- replace geoip plugin in tests as this one is now embeded in elasticsearch since 6.7.0 (cf. https://www.elastic.co/guide/en/elasticsearch/plugins/6.7/ingest-geoip.html )
- update discovery configuration for 7.x (in ES 7.x, discovery.zen.ping.unicast.hosts is replaced by discovery.seed_hosts and transport.tcp.port is replaced by transport.port, also discovery.seed_hosts is disabled on master nodes to avoid "master_not_discovered_exception" error when creating templates in the same play)
- update index template structure for 7.x
- update security realms settings for 7.x (cf. https://www.elastic.co/guide/en/elasticsearch/reference/current/breaking-changes-7.0.html#include-realm-type-in-setting )
2019-05-09 09:06:02 +02:00
Nathan Young
07258e5be5
Fix template conditional
2019-03-29 09:16:01 +11:00
Michael Russell
7ef5021d01
Merge pull request #529 from branen/es_repo_base
...
Template out the base of repo URLs
2019-03-20 18:40:38 +10:00
Grzegorz Nowak
785ce1cd26
add a few more 'check_mode:no' props for compatiblity with --check mode of ansible
2019-03-14 09:24:06 +01:00
Branen Salmon
59de0102a8
Merge branch 'master' into es_repo_base
2019-03-12 09:56:36 -04:00
Michael Russell
8aa1aa1ebf
Merge pull request #523 from SlothOfAnarchy/filter-deprecation-fix
...
Refactor deprecated version_compare filter calls
2019-03-11 22:26:37 +09:00
lde
c5beecf0b2
Merge branch 'master' into master
2019-03-11 14:14:55 +01:00
Michel Weitbrecht
0c5a6b7a81
Merge branch 'master' into filter-deprecation-fix
2019-03-11 14:12:57 +01:00
Michael Russell
b040c4562e
Merge branch 'master' into filter-deprecation-fix
2019-03-11 21:49:16 +09:00
Grzegorz Nowak
c4b51482c1
make playbook (tested for debians) compatible with the mode
2019-02-28 14:33:53 +01:00