Changelog#

Latest (June 2024)#

Fix ElasticSearch deployment using Fully-Qualified Domain Names (as opposed to IP addresses).

Set default release to 3.3 and update README file.
PostgreSQL is configured to accept SSL connections. Both SSL and plaintext connections are accepted on the same port (5432). Intelligence Center and replication use SSL connection by default.
Redis is configured to accept SSL connections on port 6680. Port 6679 is still available for plaintext connections for debugging purposes. Intelligence Center and replication use SSL connection by default.

Added .env variables to automatically configure email addresses and server hostname. This is done in a new playbook called pb-configure_intelligence_center.yml, which has to be executed when Intelligence is already running (done automatically by the deploy-from-inventory.sh script).
Added BUNDLE_VERSION.env to each ansible bundle, which contains the following values:

BUNDLE_VERSION=<version>
GIT_HASH=<git hash>
MAX_SUPPORTED_VERSION=3.3

Playbook sequence is different. Please read the documentation carefully.
Environment variables have been changed. Please update your configuration following the provided env-example file.

Playbooks are provided to upgrade to PostgreSQL 14.
Playbooks are provided to upgrade to Elasticsearch 8.
Backup & Restore playbooks for Kibana.
Allows automatic provisioning of authentication for Elasticsearch (on by default for IC 3.2+).
Playbooks automatically provision certificates for Elasticsearch. You may manually replace these certs later.
You can now configure network addresses of managed nodes through environment variables or by editing group_vars/all/config.yml, instead of editing inventory files.

You must still run ansible-playbook with inventory files. E.g.:
```
EIQ_HOST_IC_APP_01="10.10.2.95" ansible-playbook -i inventories/ic-test-small pb-pre_requisites.yml -vv
```

ansible-example.cfg has optional minor changes for session reliability.
Removed EIQ_IS_UPGRADE environment variable. No longer used. Playbooks now detect if you are performing a fresh install or an upgrade.
Removed legacy Elasticsearch playbooks.

Changed:

Fixed:

Fixed issue introduced by new version of java-11-openjdk-headless, where the package drops tzdata-java from its list of dependencies, causing Elasticsearch and Logstash services to fail to start because it depends on it. Playbooks now explicitly install tzdata-java.

Fixed:

Added: