Defined Type: elasticsearch::shield::user

Defined in:
manifests/shield/user.pp

Overview

Define: elasticsearch::shield::user

Manages shield users.

Parameters

ensure

Whether the user should be present or not. Set to ‘absent’ to ensure a user is not installed Value type is string Default value: present This variable is optional

password

Password for the given user. A plaintext password will be managed with the esusers utility and requires a refresh to update, while a hashed password from the esusers utility will be managed manually in the uses file. Value type is string Default value: undef

roles

A list of roles to which the user should belong. Value type is array Default value: []

Examples

# Creates and manages a user with membership in the ‘logstash’ # and ‘kibana4’ roles. elasticsearch::shield::user { ‘bob’:

password => 'foobar',
roles    => ['logstash', 'kibana4'],

}

Authors

Parameters:

  • password (Any)
  • ensure (Any) (defaults to: 'present')
  • roles (Any) (defaults to: []) 


40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
 
# File 'manifests/shield/user.pp', line 40

define elasticsearch::shield::user (
  $password,
  $ensure = 'present',
  $roles  = [],
) {
  validate_string($ensure, $password)
  validate_array($roles)

  if $password =~ /^\$2a\$/ {
    elasticsearch_shield_user { $name:
      ensure          => $ensure,
      hashed_password => $password,
    }
  } else {
    elasticsearch_shield_user { $name:
      ensure   => $ensure,
      password => $password,
      provider => 'esusers',
    }
  }

  elasticsearch_shield_user_roles { $name:
    ensure => $ensure,
    roles  => $roles,
  }
}