-
Notifications
You must be signed in to change notification settings - Fork 855
[xpack] use elasticsearch default xpack features #560
Conversation
stop forcing es_xpack_features variable in order to let elasticsearch install default features described in http://localhost:9200/_xpack
…sticsearch into default-xpack-features
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM!
Made a few suggestions on some improvements but are out of scope for this change.
We should use default value by default which will be same default value as xpack features. these values can still be forced in `es_config`. The only one we should keep is `xpack.security.enabled`which should be forced to true if a username and password are configured
- xpack scenario will test xpack install with default features - xpack upgrade scenario will fully test security feature - oss-to-xpack-upgrade will test installing only other specific features
All these tests are already in `shared_spec` test
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM!
@@ -20,4 +21,4 @@ | |||
- name: Set elasticsearch.keystore Permissions | |||
become: yes | |||
file: state=file path={{ conf_dir }}/elasticsearch.keystore owner={{ es_user }} group={{ es_group }} | |||
when: es_enable_xpack and es_xpack_features is defined and "security" in es_xpack_features and (es_version is version_compare('6.0.0', '>')) | |||
when: es_enable_xpack |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think we always want to do this even when using the oss version. But it was apparently already like this so its out of scope. I also think that the package properly creates the keystore with the correct permissions now but would need to confirm
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM!
system_key
feature (deprecated in 5.6 and removed in 6.0 - Breaking Changes 6.0.0)when
conditions)