Christian Boltz 1580ae
include:
Christian Boltz 1580ae
  - elasticsearch
Christian Boltz 5af207
Christian Boltz 5af207
Christian Boltz 5af207
# enforce that elasticsearch only starts if the AppArmor profile is loaded
Christian Boltz 5af207
/etc/systemd/system/elasticsearch.service.d:
Christian Boltz 5af207
  file.directory
Christian Boltz 5af207
Christian Boltz 5af207
/etc/systemd/system/elasticsearch.service.d/es-apparmor.conf:
Christian Boltz 5af207
  file.managed:
Christian Boltz 5af207
    - contents:
Christian Boltz 5af207
      - '[service]'
Christian Boltz 5af207
      - AppArmorProfile=elasticsearch
Christian Boltz 5af207
    - require_in:
Christian Boltz 5af207
      - elasticsearch
Christian Boltz 5af207
  cmd.run:
Christian Boltz 5af207
    - name: systemctl daemon-reload
Christian Boltz 5af207
    - onchanges:
Christian Boltz 5af207
      - file: /etc/systemd/system/elasticsearch.service.d/es-apparmor.conf