3a09f60543
* first ansible skeleton * first commit of ansible installation of vulnwhisperer outside docker * first ansible skeleton * first commit of ansible installation of vulnwhisperer outside docker * refactor the ansible role a bit * update readme, add fail validation step to provision.yml and fix typo when calling a logging funciton
52 lines
1.7 KiB
YAML
52 lines
1.7 KiB
YAML
---
|
|
- name: set fact allow_downgrade to no
|
|
set_fact: allow_downgrade=no
|
|
|
|
- name: set fact allow_downgrade to yes
|
|
set_fact: allow_downgrade=yes
|
|
when: es_allow_downgrades
|
|
|
|
- name: Ensure libselinux-python on CentOS 6.x
|
|
become: yes
|
|
yum: name=libselinux-python state=present update_cache=yes
|
|
when: ( ansible_distribution == "CentOS" ) and ( ansible_distribution_major_version == "6" )
|
|
|
|
- name: RedHat - add Elasticsearch repo
|
|
become: yes
|
|
template: src=elasticsearch.repo dest=/etc/yum.repos.d/elasticsearch-{{ es_repo_name }}.repo
|
|
when: es_use_repository
|
|
|
|
- name: RedHat - include versionlock
|
|
include: elasticsearch-RedHat-version-lock.yml
|
|
when: es_version_lock
|
|
|
|
- name: RedHat - Remove non oss package if the old elasticsearch package is installed
|
|
become: yes
|
|
yum:
|
|
name: 'elasticsearch'
|
|
state: 'absent'
|
|
when: es_package_name == 'elasticsearch-oss'
|
|
|
|
- name: RedHat - Install Elasticsearch
|
|
become: yes
|
|
yum:
|
|
name: '{{ es_package_name }}{% if es_version is defined and es_version != "" %}-{{ es_version }}{% endif %}'
|
|
state: present
|
|
update_cache: yes
|
|
allow_downgrade: '{{ allow_downgrade }}'
|
|
when: es_use_repository
|
|
register: redhat_elasticsearch_install_from_repo
|
|
notify: restart elasticsearch
|
|
until: redhat_elasticsearch_install_from_repo.rc == 0
|
|
retries: 5
|
|
delay: 10
|
|
environment:
|
|
ES_PATH_CONF: "/etc/elasticsearch"
|
|
|
|
- name: RedHat - Install Elasticsearch from url
|
|
become: yes
|
|
yum: name={% if es_custom_package_url is defined %}{{ es_custom_package_url }}{% else %}{{ es_package_url }}-{{ es_version }}.noarch.rpm{% endif %} state=present
|
|
when: not es_use_repository
|
|
register: elasticsearch_install_from_package
|
|
notify: restart elasticsearch
|