ansible-role-elasticsearch/tasks/config.yml

---
- name: Set heap size
  ansible.builtin.lineinfile:
    path: /etc/elasticsearch/jvm.options
    regexp: "^-{{ item }}"
    line: "-{{ item }}{{ elasticsearch_heap_size }}"
  loop:
    - Xms
    - Xmx
  notify: Restart elasticsearch
  tags: elasticsearch

- name: Copy SSL certificate
  ansible.builtin.copy:
    content: "{{ elasticsearch_ssl_certificate }}"
    dest: "{{ elasticsearch_full_config['xpack.security.transport.ssl.certificate'] }}"
    owner: root
    group: elasticsearch
    mode: "0640"
  when: "'xpack.security.transport.ssl.certificate' in elasticsearch_full_config"
  notify: Restart elasticsearch
  tags: elasticsearch

- name: Copy SSL key
  ansible.builtin.copy:
    content: "{{ elasticsearch_ssl_key }}"
    dest: "{{ elasticsearch_full_config['xpack.security.transport.ssl.key'] }}"
    owner: root
    group: elasticsearch
    mode: "0640"
  when: "'xpack.security.transport.ssl.key' in elasticsearch_full_config"
  notify: Restart elasticsearch
  tags: elasticsearch

- name: Copy config file
  ansible.builtin.copy:
    content: "{{ elasticsearch_full_config | to_yaml }}"
    dest: /etc/elasticsearch/elasticsearch.yml
    owner: root
    group: elasticsearch
    mode: "0640"
  notify: Restart elasticsearch
  tags: elasticsearch