Fix linting errors
Fixed linting on xpack_security.yml
This commit is contained in:
parent
a1359495a9
commit
02425e0c85
@ -39,7 +39,7 @@
|
|||||||
when:
|
when:
|
||||||
- node_certs_generator
|
- node_certs_generator
|
||||||
|
|
||||||
- name: Importing custom CA key
|
- name: Importing custom CA key
|
||||||
copy:
|
copy:
|
||||||
src: "{{ master_certs_path }}/ca/{{ ca_key_name }}"
|
src: "{{ master_certs_path }}/ca/{{ ca_key_name }}"
|
||||||
dest: "{{ node_certs_source }}/{{ ca_key_name }}"
|
dest: "{{ node_certs_source }}/{{ ca_key_name }}"
|
||||||
@ -61,7 +61,7 @@
|
|||||||
|
|
||||||
- name: Generating certificates for Elasticsearch security (generating CA)
|
- name: Generating certificates for Elasticsearch security (generating CA)
|
||||||
shell: >-
|
shell: >-
|
||||||
/usr/share/elasticsearch/bin/elasticsearch-certutil cert ca --pem --in
|
/usr/share/elasticsearch/bin/elasticsearch-certutil cert ca --pem --in
|
||||||
{{ node_certs_source }}/instances.yml --out {{ node_certs_source }}/certs.zip
|
{{ node_certs_source }}/instances.yml --out {{ node_certs_source }}/certs.zip
|
||||||
when:
|
when:
|
||||||
- node_certs_generator
|
- node_certs_generator
|
||||||
@ -70,37 +70,37 @@
|
|||||||
tags: xpack-security
|
tags: xpack-security
|
||||||
|
|
||||||
- name: Generating certificates for Elasticsearch security (using provided CA | Without CA Password)
|
- name: Generating certificates for Elasticsearch security (using provided CA | Without CA Password)
|
||||||
shell: >-
|
shell: >-
|
||||||
/usr/share/elasticsearch/bin/elasticsearch-certutil cert
|
/usr/share/elasticsearch/bin/elasticsearch-certutil cert
|
||||||
--ca-key {{ node_certs_source }}/{{ ca_key_name }} --ca-cert {{ node_certs_source }}/{{ ca_cert_name }}
|
--ca-key {{ node_certs_source }}/{{ ca_key_name }} --ca-cert {{ node_certs_source }}/{{ ca_cert_name }}
|
||||||
--pem --in {{ node_certs_source }}/instances.yml --out {{ node_certs_source }}/certs.zip
|
--pem --in {{ node_certs_source }}/instances.yml --out {{ node_certs_source }}/certs.zip
|
||||||
when:
|
when:
|
||||||
- node_certs_generator
|
- node_certs_generator
|
||||||
- not xpack_certs_zip.stat.exists
|
- not xpack_certs_zip.stat.exists
|
||||||
- not generate_CA
|
- not generate_CA
|
||||||
- ca_password == ""
|
- ca_password | length == 0
|
||||||
tags: xpack-security
|
tags: xpack-security
|
||||||
|
|
||||||
- name: Generating certificates for Elasticsearch security (using provided CA | Using CA Password)
|
- name: Generating certificates for Elasticsearch security (using provided CA | Using CA Password)
|
||||||
shell: >-
|
shell: >-
|
||||||
/usr/share/elasticsearch/bin/elasticsearch-certutil cert
|
/usr/share/elasticsearch/bin/elasticsearch-certutil cert
|
||||||
--ca-key {{ node_certs_source }}/{{ ca_key_name }} --ca-cert {{ node_certs_source }}/{{ ca_cert_name }}
|
--ca-key {{ node_certs_source }}/{{ ca_key_name }} --ca-cert {{ node_certs_source }}/{{ ca_cert_name }}
|
||||||
--pem --in {{ node_certs_source }}/instances.yml --out {{ node_certs_source }}/certs.zip
|
--pem --in {{ node_certs_source }}/instances.yml --out {{ node_certs_source }}/certs.zip
|
||||||
--ca-pass {{ca_password}}
|
--ca-pass {{ ca_password }}
|
||||||
when:
|
when:
|
||||||
- node_certs_generator
|
- node_certs_generator
|
||||||
- not xpack_certs_zip.stat.exists
|
- not xpack_certs_zip.stat.exists
|
||||||
- not generate_CA
|
- not generate_CA
|
||||||
- ca_password != ""
|
- ca_password | length > 0
|
||||||
tags: xpack-security
|
tags: xpack-security
|
||||||
|
|
||||||
- name: Verify the Elastic certificates directory
|
- name: Verify the Elastic certificates directory
|
||||||
file:
|
file:
|
||||||
path: "{{ master_certs_path }}"
|
path: "{{ master_certs_path }}"
|
||||||
state: directory
|
state: directory
|
||||||
mode: '0700'
|
mode: '0700'
|
||||||
delegate_to: "127.0.0.1"
|
delegate_to: "127.0.0.1"
|
||||||
when:
|
when:
|
||||||
- node_certs_generator
|
- node_certs_generator
|
||||||
|
|
||||||
- name: Verify the Certificates Authority directory
|
- name: Verify the Certificates Authority directory
|
||||||
@ -109,7 +109,7 @@
|
|||||||
state: directory
|
state: directory
|
||||||
mode: '0700'
|
mode: '0700'
|
||||||
delegate_to: "127.0.0.1"
|
delegate_to: "127.0.0.1"
|
||||||
when:
|
when:
|
||||||
- node_certs_generator
|
- node_certs_generator
|
||||||
|
|
||||||
- name: Copying certificates to Ansible master
|
- name: Copying certificates to Ansible master
|
||||||
@ -118,7 +118,7 @@
|
|||||||
dest: "{{ master_certs_path }}/"
|
dest: "{{ master_certs_path }}/"
|
||||||
flat: yes
|
flat: yes
|
||||||
mode: 0700
|
mode: 0700
|
||||||
when:
|
when:
|
||||||
- node_certs_generator
|
- node_certs_generator
|
||||||
tags: xpack-security
|
tags: xpack-security
|
||||||
|
|
||||||
@ -126,39 +126,39 @@
|
|||||||
file:
|
file:
|
||||||
state: absent
|
state: absent
|
||||||
path: "{{ node_certs_source }}/certs.zip"
|
path: "{{ node_certs_source }}/certs.zip"
|
||||||
when:
|
when:
|
||||||
- node_certs_generator
|
- node_certs_generator
|
||||||
|
|
||||||
- name: Unzip generated certs.zip
|
- name: Unzip generated certs.zip
|
||||||
unarchive:
|
unarchive:
|
||||||
src: "{{master_certs_path}}/certs.zip"
|
src: "{{ master_certs_path }}/certs.zip"
|
||||||
dest: "{{master_certs_path}}/"
|
dest: "{{ master_certs_path }}/"
|
||||||
become: true
|
become: true
|
||||||
delegate_to: "127.0.0.1"
|
delegate_to: "127.0.0.1"
|
||||||
when:
|
when:
|
||||||
- node_certs_generator
|
- node_certs_generator
|
||||||
tags: xpack-security
|
tags: xpack-security
|
||||||
|
|
||||||
- name: Copying node's certificate from master
|
- name: Copying node's certificate from master
|
||||||
copy:
|
copy:
|
||||||
src: "{{item}}"
|
src: "{{ item }}"
|
||||||
dest: "{{node_certs_destination}}/"
|
dest: "{{ node_certs_destination }}/"
|
||||||
with_items:
|
with_items:
|
||||||
- "{{master_certs_path}}/{{elasticsearch_node_name}}/{{ elasticsearch_node_name }}.key"
|
- "{{ master_certs_path }}/{{ elasticsearch_node_name }}/{{ elasticsearch_node_name }}.key"
|
||||||
- "{{master_certs_path}}/{{elasticsearch_node_name}}/{{ elasticsearch_node_name }}.crt"
|
- "{{ master_certs_path }}/{{ elasticsearch_node_name }}/{{ elasticsearch_node_name }}.crt"
|
||||||
- "{{master_certs_path}}/ca/ca.crt"
|
- "{{ master_certs_path }}/ca/ca.crt"
|
||||||
when:
|
when:
|
||||||
- generate_CA
|
- generate_CA
|
||||||
tags: xpack-security
|
tags: xpack-security
|
||||||
|
|
||||||
- name: Copying node's certificate from master (Custom CA)
|
- name: Copying node's certificate from master (Custom CA)
|
||||||
copy:
|
copy:
|
||||||
src: "{{item}}"
|
src: "{{ item }}"
|
||||||
dest: "{{node_certs_destination}}/"
|
dest: "{{ node_certs_destination }}/"
|
||||||
with_items:
|
with_items:
|
||||||
- "{{master_certs_path}}/{{elasticsearch_node_name}}/{{ elasticsearch_node_name }}.key"
|
- "{{ master_certs_path }}/{{ elasticsearch_node_name }}/{{ elasticsearch_node_name }}.key"
|
||||||
- "{{master_certs_path}}/{{elasticsearch_node_name}}/{{ elasticsearch_node_name }}.crt"
|
- "{{ master_certs_path }}/{{ elasticsearch_node_name }}/{{ elasticsearch_node_name }}.crt"
|
||||||
- "{{master_certs_path}}/ca/{{ca_cert_name}}"
|
- "{{ master_certs_path }}/ca/{{ ca_cert_name }}"
|
||||||
when:
|
when:
|
||||||
- not generate_CA
|
- not generate_CA
|
||||||
tags: xpack-security
|
tags: xpack-security
|
||||||
@ -179,4 +179,3 @@
|
|||||||
echo {{ elasticsearch_xpack_security_password }} | {{ node_certs_source }}/bin/elasticsearch-keystore add -xf bootstrap.password
|
echo {{ elasticsearch_xpack_security_password }} | {{ node_certs_source }}/bin/elasticsearch-keystore add -xf bootstrap.password
|
||||||
when:
|
when:
|
||||||
- node_certs_generator
|
- node_certs_generator
|
||||||
|
|
||||||
Loading…
Reference in New Issue
Block a user