Make logstash_writer user password hashing idempotent

NETWAYS / ansible-collection-elasticstack

A collection to install and manage the Elastic Stack

GNU General Public License v3.0

9 stars 8 forks source link

Make logstash_writer user password hashing idempotent #249

Closed widhalmt closed 10 months ago

widhalmt commented 10 months ago

Using randomly created hashes for our hash algorithm will break idempotency. Besides, it will lead to the logstash_writer user template being recreated with every run. I'm not sure if changing the contents every time can't have any more side effects we can circumvent by just using a fixed hash.

fixes #247 fixes #251 fixes #244

widhalmt commented 10 months ago

Please see the ongoing discussion about this solution in the linked issue (#247 )

widhalmt commented 10 months ago

Caution! The saved salt is on the control node, now. I'm investigating whether this is to be expected with the used filter or if we can change it.