De-duplicate elasticsearch apt repos

3 files changed, 39 insertions, 0 deletions

diff --git a/roles/elasticsearch-repos/README.md b/roles/elasticsearch-repos/README.md
new file mode 100644
index 0000000..7da91d0
--- /dev/null
+++ b/roles/elasticsearch-repos/README.md
@@ -0,0 +1,3 @@
+# Role "elasticsearch-repos"
+
+This role installs and configures the elasticsearch APT repositories.
diff --git a/roles/elasticsearch-repos/handlers/main.yml b/roles/elasticsearch-repos/handlers/main.yml
new file mode 100644
index 0000000..2111644
--- /dev/null
+++ b/roles/elasticsearch-repos/handlers/main.yml
@@ -0,0 +1,5 @@
+- name: apt update
+  apt:
+    update_cache: true
+  tags:
+    - role::elasticsearch-repos
diff --git a/roles/elasticsearch-repos/tasks/main.yml b/roles/elasticsearch-repos/tasks/main.yml
new file mode 100644
index 0000000..a76ad43
--- /dev/null
+++ b/roles/elasticsearch-repos/tasks/main.yml
@@ -0,0 +1,31 @@
+---
+- name: Install GPG
+  package:
+    name: gpg
+    state: present
+  tags:
+    - role::elasticsearch-repos
+
+- name: Install Elasticsearch signing key
+  # noqa command-instead-of-module
+  shell: >-
+    set -o pipefail && wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch |
+    gpg --yes --dearmor -o /usr/share/keyrings/elasticsearch-keyring.gpg
+  args:
+    creates: /usr/share/keyrings/elasticsearch-keyring.gpg
+  tags:
+    - role::elasticsearch-repos
+
+- name: Add Elasticsearch repository to apt
+  copy:
+    content: >-
+      deb [signed-by=/usr/share/keyrings/elasticsearch-keyring.gpg]
+      https://artifacts.elastic.co/packages/8.x/apt stable main
+    dest: /etc/apt/sources.list.d/elastic-8.x.list
+    owner: root
+    group: root
+    mode: 0644
+  tags:
+    - role::elasticsearch-repos
+  notify:
+    - apt update