mirror of
https://github.com/valitydev/salt-common.git
synced 2024-11-06 10:25:23 +00:00
42 lines
1.2 KiB
Plaintext
42 lines
1.2 KiB
Plaintext
{% set tls_enabled = salt.pillar.get('elastic:tls:enabled', False) %}
|
|
include:
|
|
- elasticsearch.pkg
|
|
- elasticsearch.config
|
|
|
|
create-elasticsearch-keystore:
|
|
cmd.run:
|
|
- name: /usr/share/elasticsearch/bin/elasticsearch-keystore
|
|
- creates: /etc/elasticsearch/elasticsearch.keystore
|
|
- require:
|
|
- pkg: app-misc/elasticsearch
|
|
- file: /etc/elasticsearch/
|
|
|
|
/etc/elasticsearch/elasticsearch.keystore:
|
|
file.managed:
|
|
- replace: False
|
|
- mode: 660
|
|
- user: elasticsearch
|
|
- group: elasticsearch
|
|
- require:
|
|
- cmd: create-elasticsearch-keystore
|
|
|
|
elasticsearch:
|
|
service.running:
|
|
- enable: True
|
|
- watch:
|
|
- pkg: openjdk-bin11
|
|
- pkg: app-misc/elasticsearch
|
|
- file: /etc/elasticsearch/elasticsearch.yml
|
|
- file: /etc/elasticsearch/jvm.options
|
|
- file: /etc/security/limits.d/elasticsearch.conf
|
|
- file: /etc/conf.d/elasticsearch
|
|
- cmd: create-elasticsearch-keystore
|
|
- file: /etc/elasticsearch/elasticsearch.keystore
|
|
{% if tls_enabled %}
|
|
{% for proto in ('transport', 'http') %}
|
|
{% for pemtype in ('cert', 'key', 'ca') %}
|
|
- file: /etc/elasticsearch/{{ proto }}-{{ pemtype }}.pem
|
|
{% endfor %}
|
|
{% endfor %}
|
|
{% endif %}
|