allow elasticsearch to readh the ca file

2020-05-23 00:18:10 +02:00 · 2020-05-23 00:18:10 +02:00 · be973340ad
commit be973340ad
parent f43b885dc8
1 changed files with 6 additions and 0 deletions
--- a/roles/elastic-stack/ansible-elasticsearch/tasks/xpack_security.yml
+++ b/roles/elastic-stack/ansible-elasticsearch/tasks/xpack_security.yml
@ -149,6 +149,8 @@
  copy:
    src: "{{ item }}"
    dest: "{{ node_certs_destination }}/"
+    owner: root
+    group: elasticsearch
    mode: 0440
  with_items:
    - "{{ master_certs_path }}/{{ elasticsearch_node_name }}/{{ elasticsearch_node_name }}.key"
@ -164,6 +166,8 @@
  copy:
    src: "{{ item }}"
    dest: "{{ node_certs_destination }}/"
+    owner: root
+    group: elasticsearch
    mode: 0440
  with_items:
    - "{{ master_certs_path }}/{{ elasticsearch_node_name }}/{{ elasticsearch_node_name }}.key"
@ -178,6 +182,8 @@
 - name: Ensuring folder permissions
  file:
    path: "{{ node_certs_destination }}/"
+    owner: root
+    group: elasticsearch
    mode: 0774
    state: directory
    recurse: no