b875cc30b1
It is currently the case that the elastic GPG key must be specified as a remote URL within the elastic_repositories role. This causes issues in the case that remote URLs specifying the GPG key are inaccessible due to e.g. firewalls at deploy time. In analogy to Change-ID I7ac1a5e3a05aa3d0b4fae86c4a325ef147a9a528, this commit allows the GPG key to be provided not only via a remote URL, but also in-data or through a file by allowing the full range of apt_key input types (url, file, data etc) to be provided. The default behaviour is changed to use the vendor key in the role files. Change-Id: Ic48db01029c4b94845ccacfba7440b13a59ab873
29 lines
1013 B
YAML
29 lines
1013 B
YAML
---
|
|
# Copyright 2018, Rackspace US, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
elastic_repo_distro_packages:
|
|
- apt-transport-https
|
|
|
|
# elk apt repo
|
|
_elastic_repo:
|
|
repo: 'deb https://artifacts.elastic.co/packages/7.x/apt stable main'
|
|
state: "{{ ((elk_package_state | default('present')) == 'absent') | ternary('absent', 'present') }}"
|
|
|
|
elastic_repo: "{{ elastic_apt_repo | default(_elastic_repo) }}"
|
|
|
|
_elastic_gpg_keys:
|
|
- id: 46095ACC8548582C1A2699A9D27D666CD88E42B4
|
|
file: /etc/ssl/elastic-key
|