GitHub puppet-elastic_stack

Since the apt package doesn't force apt-get update when notified, but instead schedules it for somewhere in the run, this change forces apt-get update after adding the repository.
Without this change you sometimes need to run puppet twice, once to add the source and update (usually at end of puppet run) and again to actually install the packages.

If you are interested I can also add documentation and spec tests. We have the problem, that for some of our customers the repo url format is of the following form, which isn't supported by this module:

https://mirror.example.com/elastic-co/packages/6.x/apt-customername

For a completely internal deployment, downloading the repository key directly
from the internet is not an option. This change makes the $keysource and
$keyid variables configurable so an internal mirror can be used.

This allows to set the apt architecture.

Our internal hosts have no access to the internet, hence no option to download GPG-KEY-elasticsearch. This tiny patch adds the option to specify the download location for the GPG file.

modulesync 5.4.0

Hello,

I needed to install Elasticsearch version 8 (with Kibana).
I had several problems configuring the keystore files (elasticsearch and kibana) using the puppet-elasticsearch and puppet-kibana modules.

Here are the problems encountered:
- execution of the elasticsearch_keystore resource is not indempotent. It recreates the keystore file each time it is run, whether or not there has been a change. It does not parse the contents to ensure that the file is synchronized;
- if the keystore file already exists, it tries to create it again, which generates an error;
- there is no possibility of protecting the keystore file with a password;
- diff does not allow changes to be viewed;
- the kibana module does not manage keystore files.

I thought it simpler to implement a single resource type to manage the keystore in the puppet-elastic_stack module (to be used by both the elasticsearch and kibana modules). This avoids duplicate code.
I used the elasticsearch_keystore resource to correct the problems encountered and added keystore management for Kibana. I didn't keep the notion of instances, which weren't necessarily of interest in my case.

Example of the elastic_stack_keystore resource declaration for Elasticsearch:

elastic_stack_keystore { 'elasticsearch_secrets':
service => 'elasticsearch',
purge => false,
password => Sensitive($password),
settings => { .. },
}


To manage the keystore password, there are 2 modes:
- If the keystore file is not password-protected and the password parameter is set and not empty, when the resource is executed, the keystore will be password-protected. However, it will not be possible to re-modify it by changing the password parameter (this will have to be done manually on the target).
- Possibility of managing a file containing the password on the target, enabling the password parameter to be changed without having to do so manually. To do this, declare a resource file containing the (with the backup parameter set to true).
I haven't included all the code in the elasticsearch module, just an example to illustrate.
```
unless $elasticsearch::elasticsearchkeystorepassword =~ Undef {
file { $elasticsearch::elasticsearchkeystorepasswordpath:
ensure => 'file',
group => $elasticsearch::elasticsearchgroup,
owner => $elasticsearch::elasticsearchuser,
mode => '0660',
content => $elasticsearchkeystorepassword,
backup => true,
}
}

unless $elasticsearch::secrets =~ Undef {
file { "${elasticsearch::configdir}/elasticsearch.keystore":
owner => $elasticsearch::elasticsearchuser,
}
elasticstackkeystore { 'elasticsearchsecrets':
service => 'elasticsearch',
purge => $elasticsearch::purgesecrets,
settings => $elasticsearch::secrets,
password => $elasticsearchkeystorepassword,
notify => $elasticsearch::notifyservice,
require => File["${elasticsearch::configdir}/elasticsearch.keystore"],
}
}
```

Example of the elastic_stack_keystore resource declaration for Kibana (kibana-keystore does not support password):

elastic_stack_keystore { 'kibana_secrets':
service => 'kibana',
purge => false,
settings => { .. },


The service parameter is the namevar and can take 2 values: elasticsearch or kibana.