d7efa2048a
This commit introduces SSL/TLS support for the elastic search transport layer. It assumes certificates are generated externally, and only handles uploading and configuring the server accordingly.
50 lines
1.6 KiB
YAML
50 lines
1.6 KiB
YAML
---
|
|
es_version: "7.1.1"
|
|
es_use_snapshot_release: false
|
|
es_enable_xpack: true
|
|
es_package_name: "elasticsearch"
|
|
es_version_lock: false
|
|
es_use_repository: true
|
|
es_templates_fileglob: "files/templates-{{ es_major_version }}/*.json"
|
|
es_repo_base: "https://artifacts.elastic.co"
|
|
es_apt_key: "{{ es_repo_base }}/GPG-KEY-elasticsearch"
|
|
es_apt_url: "deb {{ es_repo_base }}/packages/{{ es_repo_name }}/apt stable main"
|
|
es_apt_url_old: "deb http://packages.elastic.co/elasticsearch/{{ es_repo_name }}/debian stable main"
|
|
es_start_service: true
|
|
es_java_install: "{{ false if (es_version is version_compare('7.0.0', '>=')) else true }}"
|
|
update_java: false
|
|
es_restart_on_change: true
|
|
es_plugins_reinstall: false
|
|
es_templates: false
|
|
es_user: elasticsearch
|
|
es_group: elasticsearch
|
|
es_config: {}
|
|
es_config_log4j2: log4j2.properties.j2
|
|
#Need to provide default directories
|
|
es_conf_dir: "/etc/elasticsearch"
|
|
es_pid_dir: "/var/run/elasticsearch"
|
|
es_data_dirs:
|
|
- "/var/lib/elasticsearch"
|
|
es_log_dir: "/var/log/elasticsearch"
|
|
es_action_auto_create_index: true
|
|
es_max_open_files: 65536
|
|
es_max_threads: "{{ 2048 if ( es_version is version_compare('6.0.0', '<')) else 8192 }}"
|
|
es_max_map_count: 262144
|
|
es_allow_downgrades: false
|
|
es_xpack_features: []
|
|
#These are used for internal operations performed by ansible.
|
|
#They do not affect the current configuration
|
|
es_api_host: "localhost"
|
|
es_api_port: 9200
|
|
es_debian_startup_timeout: 10
|
|
|
|
# JVM custom parameters
|
|
es_jvm_custom_parameters: ''
|
|
|
|
# SSL/TLS parameters
|
|
es_enable_http_ssl: false
|
|
es_enable_transport_ssl: false
|
|
es_ssl_key: ""
|
|
es_ssl_certificate: ""
|
|
es_ssl_certificate_authority: ""
|
|
es_ssl_certificate_path: "/etc/elasticsearch/certs"
|