Commit graph

31 commits

Author SHA1 Message Date
Andris Strazdiņš
f339345a0b
Update elasticsearch-security-file.yml (#705)
Without become option stat operation for old users file will work only if user is in elasticsearch group, but copying of old file will fail because user have no write access in elasticsearch config dir.
2020-07-16 16:42:41 +02:00
Duy Nguyen
96055923f3
Update elasticsearch-security-file.yml
Refactor template tasks
2020-03-06 15:19:09 +08:00
pemontto
a2c4012197
Update and document unmanaged user vars 2019-10-28 14:25:52 +00:00
pemontto
27e3cff9a2
Add option to keep existing users 2019-10-15 15:37:39 +01:00
Julien Mailleret
1befe6c0d9
stop trying to create users file as it's already created by the official package 2019-09-18 10:57:58 +02:00
Julien Mailleret
9bac169862
use files permissions from official package 2019-09-18 10:57:07 +02:00
Julien Mailleret
08a8a467b6
fix missing permissions 2019-09-16 12:31:07 +02:00
Julien Mailleret
8e1cafacf5
add some comment to better identify user migration tasks from elasticsearch < 6.3 2019-09-16 10:46:43 +02:00
Julien Mailleret
e45c902e5e
clean unused task related to multi-instance directories 2019-09-16 10:46:43 +02:00
Julien Mailleret
407dddcae1
hardcode elasticsearch-users command instead of es_xpack_users_command
This variable was introduce to match legacy x-pack/users command before 6.3.
2019-09-16 10:46:43 +02:00
Julien Mailleret
08512fc17e
fix typo
I think this typo was here since https://github.com/elastic/ansible-elasticsearch/pull/129/commits/048fd636025a00379d2549c36f8b4bd271a8f832
2019-09-16 10:46:37 +02:00
Julien Mailleret
0f601259c6
clean es_xpack_conf_subdir variable
This variable was added to manage specific x-pack dir with version < 6.3
2019-09-16 10:43:32 +02:00
Julien Mailleret
5b1d028bd2
fix ''dict object has no attribute dict_keys" issue with python3 (#578)
In Python2, the dict.keys(), dict.values(), and dict.items() methods returns a list. Jinja2 returns that to Ansible via a string representation that Ansible can turn back into a list. In Python3, those methods return a dictionary view object.
resource: https://docs.ansible.com/ansible/2.4/playbooks_python_version.html#dictionary-views
2019-06-07 15:54:10 +02:00
Julien Mailleret
2cb020a4c2
Remove multi instances support (#566)
* remove multi instances support
The goal is to stop supporting installation of more than one node in the same host. This commit update the Ansible role README documentation and remove the multi instances kitchen test.

* remove systemd and init.d templates
As we no more need to support more than one node on the same host, we no more need to override init files provided by elasticsearch official packages.

* remove file script feature
File scripts have been removed since elasticsearch 6.0 (https://www.elastic.co/guide/en/elasticsearch/reference/6.0/breaking_60_scripting_changes.html#_file_scripts_removed)

* remove custom user and custom group
ES_USER and ES_GROUP settings are no longer supported (https://www.elastic.co/guide/en/elasticsearch/reference/6.0/breaking_60_packaging_changes.html#_configuring_custom_user_and_group_for_package_is_no_longer_allowed)

* add upgrade procedure

* use same task for license activation with and without authentication
2019-06-03 14:18:09 +02:00
Grzegorz Nowak
785ce1cd26 add a few more 'check_mode:no' props for compatiblity with --check mode of ansible 2019-03-14 09:24:06 +01:00
Michael Russell
ec3465a60c
Only attempt to copy the old users file if it actually exists 2018-11-27 12:50:49 +01:00
Michael Russell
f221381929
Copy the old deprecated users file when upgrading
In 6.5 Elasticsearch finds the old file which breaks the way the ansible
playbook is detecting the installed users. This means that after an
upgrade to 6.5 the users still actually exist but the playbook fails
when trying to add them again as they already exist.
2018-11-26 13:56:51 +01:00
Michael Russell
dce98bbd34
Revert no_log debugging 2018-06-14 16:37:31 +02:00
Michael Russell
77d47e3235
Don't use the 'x-pack' subdir now that x-pack is part of core 2018-06-14 16:33:40 +02:00
Michael Russell
bbc5e0603d
Abstract 6.3 changes into a separate task to reduce all of the jinja one
liner complexity

Set ES_PATH_CONF when installing so upgrading from 6.2 to 6.3 works as
expected
2018-06-14 14:44:31 +02:00
Cloud Fox
dd9b4aad97 naming unnamed tasks 2018-02-04 07:09:23 +00:00
Shri Bodas
9115bb4dff
Adding 6.x support with Bootstrap user addition 2018-01-30 11:23:34 +01:00
Brad Pitcher
b032eee3da Merge branch 'master' into become-yes 2017-09-21 22:22:36 -06:00
Dale McDiarmid
7ab416c782 Move fil realm reserved user check earlier, Move template and license after naitve realm 2017-09-20 22:58:17 +01:00
Brad Pitcher
891d87c019
Merge branch 'master' into become-yes 2017-09-19 14:22:02 -06:00
Dale McDiarmid
e9a6f74d09 Fix for issue #369 2017-09-19 20:11:09 +01:00
Dale McDiarmid
32ff70601a Merge pull request #291 from rusnyder/role-mapping-xpack-dir
Moved up the x-pack directory logic to include role_mappings
2017-08-15 14:59:22 +01:00
Brad Pitcher
024e6caa4b
use become: yes when root is needed 2017-05-12 13:31:50 -07:00
Russell Snyder
eed6352dfb Moved up the x-pack directory logic to include role_mappings
Signed-off-by: Russell Snyder <russell@redowl.com>
2017-04-18 13:26:16 -04:00
Dale McDiarmid
4e8af6ced5 Fixes for conditional execution as a task 2017-03-15 17:24:10 -04:00
Dale McDiarmid
1a207458a6 Folder rename shield -> security 2017-01-11 13:09:54 +00:00
Renamed from tasks/xpack/shield/elasticsearch-security-file.yml (Browse further)