Align ELK role TLS paths and variables to deployer standard#3
Open
Amunagala-itential wants to merge 3 commits into
Open
Align ELK role TLS paths and variables to deployer standard#3Amunagala-itential wants to merge 3 commits into
Amunagala-itential wants to merge 3 commits into
Conversation
Amunagala-itential
commented
Jul 1, 2026
Amunagala-itential
commented
Contributor
- Rename _tls_dest_dir/_tls_src_dir to _pki_base_dir/_pki_src_dir across all four ELK roles (filebeat, logstash, kibana, elasticsearch)
- Add _pki_private_subdir and _pki_private_dir; move private key dest to private/ subdirectory to match deployer layout
- Fix elasticsearch_pki_base_dir from /etc/elasticsearch/certs to /etc/pki/elasticsearch
- Rename tls_filename to tls_file and tls_ca_cert* to tls_ca*
- Update copy-certs tasks to create both base and private directories
- Update all templates and docs to use the new variable names and paths
- Rename _tls_dest_dir/_tls_src_dir to _pki_base_dir/_pki_src_dir across all four ELK roles (filebeat, logstash, kibana, elasticsearch) - Add _pki_private_subdir and _pki_private_dir; move private key dest to private/ subdirectory to match deployer layout - Fix elasticsearch_pki_base_dir from /etc/elasticsearch/certs to /etc/pki/elasticsearch - Rename _tls_*_filename to _tls_*_file and _tls_ca_cert_* to _tls_ca_* - Update copy-certs tasks to create both base and private directories - Update all templates and docs to use the new variable names and paths
Documents playbook commands, tag-based selective execution, macOS prerequisites, and architecture for all three stacks (Prometheus/Grafana, ELK, Loki/Alloy).
Amunagala-itential
requested review from
kvelarde-itential and
steven-schattenberg-itential
and removed request for
kvelarde-itential and
steven-schattenberg-itential
July 1, 2026 16:16
steven-schattenberg-itential
requested changes
Jul 1, 2026
All four ELK roles (elasticsearch, filebeat, logstash, kibana) are RHEL/CentOS only, matching the rest of the itential.monitoring collection and itential.deployer. Remove apt_key/apt_repository tasks, the Debian trust store tasks in elasticsearch copy-certs, and the Debian OS family conditionals throughout. Update READMEs, docs, and role CLAUDE.md files accordingly.
steven-schattenberg-itential
approved these changes
Jul 2, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.