garutilorenzo / ansible-collection-elk Goto Github PK

Not An issue as such but want to say great work on this, this has helped me out loads.

Following error appears when elasticsearch_https_enabled: no:

[2023-04-25T10:49:30,358][ERROR][o.e.b.Elasticsearch      ] [es-0] fatal exception while booting Elasticsearch
org.elasticsearch.ElasticsearchSecurityException: invalid configuration for xpack.security.http.ssl - [xpack.security.http.ssl.enabled] is not set, but the following settings have been configured in elasticsearch.yml : [xpack.security.http.ssl.keystore.secure_password]

Possible fix for elasticsearch.yml.j2:

...
{% if elasticsearch_https_enabled %}
xpack.security.http.ssl.enabled: true
xpack.security.http.ssl.keystore.path: {{ elasticsearch_certs_dir }}/http.p12
{% else %}
xpack.security.http.ssl.enabled: false
{% endif %}

Buongiorno Lorenzo,

I am trying to use this wonderful project to install a new bare metal Elastic cluster.
I am a little crazy and I tried to install the version 8.12.2

At first I encountered some issues I could solve with some vars.yml tuning.
Now I see that some setups are getting misaligned with the Elastic recommendations.

Examples:

• Kibana is not installable with SSL and https
• the Kibana user is now deprecated in favor of kybana_system
• Beats is not trivial to install and make it work on my setup
• the passwords and users for the additional modules are not on specific names, but always use the same elasticsearch_username variable