Page MenuHomePhabricator

Also use java::security on elasticsearch/relforge
Open, HighPublic

Description

From https://gerrit.wikimedia.org/r/#/c/operations/puppet/+/593467/

This puppetised java.security is applied via the java::security puppet class, which only gets applied to Hadoop, Kafka (main/Jumbo) and logstash::elasticsearch, but not the main elasticsearch role. That's probably something we should also straighten out going forward

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptApr 30 2020, 3:58 PM
colewhite triaged this task as Medium priority.May 4 2020, 11:15 PM

This is now a parameter of the java profile, so once Elastic* are migrated to that, it can easily be flipped on via Hiera for a single host.

Gehel raised the priority of this task from Medium to High.Sep 1 2020, 7:09 PM

This is now a parameter of the java profile, so once Elastic* are migrated to that, it can easily be flipped on via Hiera for a single host.

Elastic servers got switched to profile::java in https://github.com/wikimedia/puppet/commit/20b4f7f86ed1e5440de98c0e039ca84550908a2d