Commit graph

39 commits

Author SHA1 Message Date
Julien Mailleret
e45c902e5e
clean unused task related to multi-instance directories 2019-09-16 10:46:43 +02:00
Julien Mailleret
407dddcae1
hardcode elasticsearch-users command instead of es_xpack_users_command
This variable was introduce to match legacy x-pack/users command before 6.3.
2019-09-16 10:46:43 +02:00
Julien Mailleret
08512fc17e
fix typo
I think this typo was here since https://github.com/elastic/ansible-elasticsearch/pull/129/commits/048fd636025a00379d2549c36f8b4bd271a8f832
2019-09-16 10:46:37 +02:00
Julien Mailleret
27a524cd07
remove x-pack dir creation 2019-09-16 10:43:32 +02:00
Julien Mailleret
0f601259c6
clean es_xpack_conf_subdir variable
This variable was added to manage specific x-pack dir with version < 6.3
2019-09-16 10:43:32 +02:00
Michael Russell
582c79c607
Add back in force_basic_auth for all http requests
Related: #576
This is needed when using security for 6.x. All other http requests
still have this parameter added.
2019-07-09 21:26:10 +02:00
Julien Mailleret
5b1d028bd2
fix ''dict object has no attribute dict_keys" issue with python3 (#578)
In Python2, the dict.keys(), dict.values(), and dict.items() methods returns a list. Jinja2 returns that to Ansible via a string representation that Ansible can turn back into a list. In Python3, those methods return a dictionary view object.
resource: https://docs.ansible.com/ansible/2.4/playbooks_python_version.html#dictionary-views
2019-06-07 15:54:10 +02:00
Julien Mailleret
2cb020a4c2
Remove multi instances support (#566)
* remove multi instances support
The goal is to stop supporting installation of more than one node in the same host. This commit update the Ansible role README documentation and remove the multi instances kitchen test.

* remove systemd and init.d templates
As we no more need to support more than one node on the same host, we no more need to override init files provided by elasticsearch official packages.

* remove file script feature
File scripts have been removed since elasticsearch 6.0 (https://www.elastic.co/guide/en/elasticsearch/reference/6.0/breaking_60_scripting_changes.html#_file_scripts_removed)

* remove custom user and custom group
ES_USER and ES_GROUP settings are no longer supported (https://www.elastic.co/guide/en/elasticsearch/reference/6.0/breaking_60_packaging_changes.html#_configuring_custom_user_and_group_for_package_is_no_longer_allowed)

* add upgrade procedure

* use same task for license activation with and without authentication
2019-06-03 14:18:09 +02:00
Julien Mailleret
a879b74def
[xpack] use elasticsearch default xpack features (#560)
- Stop forcing es_xpack_features variable in order to let elasticsearch install default features described in http://localhost:9200/_xpack
- Change xpack test scope to be able to test default xpack install
  - xpack scenario will test xpack install with default features
  - xpack upgrade scenario will fully test security feature
  - oss-to-xpack-upgrade will test installing only other specific features
- Cleanup some duplicate serverspec tests
- Remove `system_key`feature (deprecated in 5.6 and removed in 6.0 - [Breaking Changes 6.0.0](https://www.elastic.co/guide/en/elasticsearch/reference/6.0/breaking-6.0.0-xes.html))
- Cleanup some ansible code (especially in `when` conditions)
2019-05-29 12:10:11 +02:00
Grzegorz Nowak
785ce1cd26 add a few more 'check_mode:no' props for compatiblity with --check mode of ansible 2019-03-14 09:24:06 +01:00
Michel Weitbrecht
a10676384f Refactor deprecated filter calls
Previously, each of the calls generated a warning : "Using tests as
filters is deprecated. Instead of using `result|version_compare` use
`result is version_compare`. This feature will be removed in version
2.9.".
2018-12-28 15:36:33 +01:00
Michael Russell
ec3465a60c
Only attempt to copy the old users file if it actually exists 2018-11-27 12:50:49 +01:00
Michael Russell
f221381929
Copy the old deprecated users file when upgrading
In 6.5 Elasticsearch finds the old file which breaks the way the ansible
playbook is detecting the installed users. This means that after an
upgrade to 6.5 the users still actually exist but the playbook fails
when trying to add them again as they already exist.
2018-11-26 13:56:51 +01:00
Bill Schwanitz
cc6b4e78e2 add missing become: yes 2018-06-26 15:28:01 -04:00
Michael Russell
dce98bbd34
Revert no_log debugging 2018-06-14 16:37:31 +02:00
Michael Russell
77d47e3235
Don't use the 'x-pack' subdir now that x-pack is part of core 2018-06-14 16:33:40 +02:00
Michael Russell
bbc5e0603d
Abstract 6.3 changes into a separate task to reduce all of the jinja one
liner complexity

Set ES_PATH_CONF when installing so upgrading from 6.2 to 6.3 works as
expected
2018-06-14 14:44:31 +02:00
Michael Russell
e5809a3169
Create the keystore if it doesn't already exist 2018-06-13 17:33:23 +02:00
Michael Russell
a525e0bcde
Merge branch 'master' into naming-unnamed-tasks 2018-02-21 16:33:49 +01:00
pemontto
27d81e68dd Fix conditionals introduced in #408 2018-02-16 16:37:00 -05:00
Cloud Fox
dd9b4aad97 naming unnamed tasks 2018-02-04 07:09:23 +00:00
Michael Russell
6ddc7ce13d
Fix idempotency test when listing the current users 2018-01-31 13:03:51 +01:00
Shri Bodas
89601d731d
Bootstrap changes only for ES 6.x and with xpack 2018-01-30 11:23:35 +01:00
Shri Bodas
9115bb4dff
Adding 6.x support with Bootstrap user addition 2018-01-30 11:23:34 +01:00
Brad Pitcher
b032eee3da Merge branch 'master' into become-yes 2017-09-21 22:22:36 -06:00
Dale McDiarmid
6fcb22125e Pause in main 2017-09-21 00:20:54 +01:00
Dale McDiarmid
7ab416c782 Move fil realm reserved user check earlier, Move template and license after naitve realm 2017-09-20 22:58:17 +01:00
Brad Pitcher
891d87c019
Merge branch 'master' into become-yes 2017-09-19 14:22:02 -06:00
Dale McDiarmid
e9a6f74d09 Fix for issue #369 2017-09-19 20:11:09 +01:00
Dale McDiarmid
0676799d1c Fix for issue 368 2017-09-19 12:21:46 +01:00
Dale McDiarmid
53741c33c6 X-pack security fix + activation 2017-08-17 21:44:46 +01:00
Dale McDiarmid
32ff70601a Merge pull request #291 from rusnyder/role-mapping-xpack-dir
Moved up the x-pack directory logic to include role_mappings
2017-08-15 14:59:22 +01:00
Brad Pitcher
4731553438
typo: Native Relm->Native Realm 2017-05-12 13:38:45 -07:00
Brad Pitcher
024e6caa4b
use become: yes when root is needed 2017-05-12 13:31:50 -07:00
Russell Snyder
eed6352dfb Moved up the x-pack directory logic to include role_mappings
Signed-off-by: Russell Snyder <russell@redowl.com>
2017-04-18 13:26:16 -04:00
Dale McDiarmid
4e8af6ced5 Fixes for conditional execution as a task 2017-03-15 17:24:10 -04:00
Dale McDiarmid
595368f873 Re-structure to make xpack idempotent 2017-03-15 16:12:22 -04:00
Dale McDiarmid
ddbf4ad956 Fix for idempotent security 2017-03-15 15:19:39 -04:00
Dale McDiarmid
1a207458a6 Folder rename shield -> security 2017-01-11 13:09:54 +00:00