added TLS Verify to the modules

robsonmantovani · Jun 21, 2023 · 50c4c0e · 50c4c0e
1 parent 5c92ed8
commit 50c4c0e
Show file tree

Hide file tree

Showing 2 changed files with 27 additions and 4 deletions.
diff --git a/plugins/modules/elasticsearch_security_apikey.py b/plugins/modules/elasticsearch_security_apikey.py
@@ -55,6 +55,12 @@
     description:
       - Dictionary specifying the metadata for the API key.
     required: false
+  
+  tls_verify:
+    description:
+      - Whether to verify TLS certificates.
+    required: false
+    type: bool
 
 notes:
   - This module requires the `elasticsearch` Python library to be installed.
@@ -77,7 +83,8 @@ def main():
         user_name=dict(type='str', required=True),
         api_key_name=dict(type='str', required=True),
         api_key_role_descriptors=dict(type='dict', required=True),
-        api_key_metadata=dict(type='dict')
+        api_key_metadata=dict(type='dict'),
+        tls_verify=dict(type=bool),
     )
 
     module = AnsibleModule(
@@ -93,8 +100,13 @@ def main():
     api_key_name = module.params['api_key_name']
     api_key_role_descriptors = module.params['api_key_role_descriptors']
     api_key_metadata = module.params['api_key_metadata']
+    tls_verify = module.params["tls_verify"]
+
+    if tls_verify == False:
+      es = Elasticsearch([es_url], basic_auth=(es_user, es_pass),  verify_certs=False)
+    else:
+      es = Elasticsearch([es_url], basic_auth=(es_user, es_pass))
 
-    es = Elasticsearch([es_url], basic_auth=(es_user, es_pass))
 
     try:
         if state == 'present':

diff --git a/plugins/modules/elasticsearch_security_role.py b/plugins/modules/elasticsearch_security_role.py
@@ -47,6 +47,12 @@
       - The body of the role. This should be a dictionary representing the role configuration.
     required: true
 
+  tls_verify:
+    description:
+      - Whether to verify TLS certificates.
+    required: false
+    type: bool
+
 notes:
   - This module requires the `elasticsearch` Python library to be installed.
 
@@ -66,7 +72,8 @@ def main():
         es_user=dict(type='str', required=True),
         es_pass=dict(type='str', required=True, no_log=True),
         role_name=dict(type='str', required=True),
-        role_body=dict(type='dict', required=True)
+        role_body=dict(type='dict', required=True),
+        tls_verify=dict(type=bool),
     )
 
     module = AnsibleModule(
@@ -80,8 +87,12 @@ def main():
     es_pass = module.params['es_pass']
     role_name = module.params['role_name']
     role_body = module.params['role_body']
+    tls_verify = module.params["tls_verify"]
 
-    es = Elasticsearch([es_url], basic_auth=(es_user, es_pass))
+    if tls_verify == False:
+      es = Elasticsearch([es_url], basic_auth=(es_user, es_pass),  verify_certs=False)
+    else:
+      es = Elasticsearch([es_url], basic_auth=(es_user, es_pass))
 
     try:
         if state == 'present':