2cb020a4c2
* remove multi instances support The goal is to stop supporting installation of more than one node in the same host. This commit update the Ansible role README documentation and remove the multi instances kitchen test. * remove systemd and init.d templates As we no more need to support more than one node on the same host, we no more need to override init files provided by elasticsearch official packages. * remove file script feature File scripts have been removed since elasticsearch 6.0 (https://www.elastic.co/guide/en/elasticsearch/reference/6.0/breaking_60_scripting_changes.html#_file_scripts_removed) * remove custom user and custom group ES_USER and ES_GROUP settings are no longer supported (https://www.elastic.co/guide/en/elasticsearch/reference/6.0/breaking_60_packaging_changes.html#_configuring_custom_user_and_group_for_package_is_no_longer_allowed) * add upgrade procedure * use same task for license activation with and without authentication
34 lines
2 KiB
YAML
34 lines
2 KiB
YAML
# Check for mandatory parameters
|
|
|
|
- name: fail when es_proxy_port is not defined or is blank
|
|
fail: msg="es_proxy_port must be specified and cannot be blank when es_proxy_host is defined"
|
|
when: (es_proxy_port is not defined or es_proxy_port == '') and (es_proxy_host is defined and es_proxy_host != '')
|
|
|
|
- name: debug message
|
|
debug: msg="WARNING - It is recommended you specify the parameter 'http.port'"
|
|
when: es_config['http.port'] is not defined
|
|
|
|
#If the user attempts to lock memory they must specify a heap size
|
|
- name: fail when heap size is not specified when using memory lock
|
|
fail: msg="If locking memory with bootstrap.memory_lock a heap size must be specified"
|
|
when: es_config['bootstrap.memory_lock'] is defined and es_config['bootstrap.memory_lock'] == True and es_heap_size is not defined
|
|
|
|
#Check if working with security we have an es_api_basic_auth_username and es_api_basic_auth_username - otherwise any http calls wont work
|
|
- name: fail when api credentials are not declared when using security
|
|
fail: msg="Enabling security requires an es_api_basic_auth_username and es_api_basic_auth_password to be provided to allow cluster operations"
|
|
when:
|
|
- es_enable_xpack and "security" in es_xpack_features
|
|
- es_api_basic_auth_username is not defined
|
|
- es_api_basic_auth_password is not defined
|
|
|
|
- name: set fact file_reserved_users
|
|
set_fact: file_reserved_users={{ es_users.file.keys() | intersect (reserved_xpack_users) }}
|
|
when: es_users is defined and es_users.file is defined and (es_users.file.keys() | length > 0) and (es_users.file.keys() | intersect (reserved_xpack_users) | length > 0)
|
|
|
|
- name: fail when changing users through file realm
|
|
fail:
|
|
msg: "ERROR: INVALID CONFIG - YOU CANNOT CHANGE RESERVED USERS THROUGH THE FILE REALM. THE FOLLOWING CANNOT BE CHANGED: {{file_reserved_users}}. USE THE NATIVE REALM."
|
|
when: file_reserved_users | default([]) | length > 0
|
|
|
|
- name: set fact m_lock_enabled
|
|
set_fact: m_lock_enabled={{ es_config['bootstrap.memory_lock'] is defined and es_config['bootstrap.memory_lock'] == True }}
|