keys = data_bag_item("logstash", "keys")
-package "default-jre-headless"
-package "logstash"
+package %w[
+ default-jre-headless
+ logstash
+]
cookbook_file "/var/lib/logstash/lumberjack.crt" do
source "lumberjack.crt"
user "root"
group "logstash"
- mode 0644
+ mode 0o644
notifies :restart, "service[logstash]"
end
content keys["lumberjack"].join("\n")
user "root"
group "logstash"
- mode 0640
+ mode 0o640
notifies :restart, "service[logstash]"
end
source "logstash.conf.erb"
user "root"
group "root"
- mode 0644
+ mode 0o644
notifies :reload, "service[logstash]"
end
file "/etc/logrotate.d/logstash" do
- mode 0644
+ mode 0o644
end
service "logstash" do
source "expire.erb"
owner "root"
group "root"
- mode 0755
+ mode 0o755
end
forwarders = search(:node, "recipes:logstash\\:\\:forwarder") # ~FC010
-forwarders.each do |forwarder|
+forwarders.sort_by { |n| n[:fqdn] }.each do |forwarder|
forwarder.interfaces(:role => :external) do |interface|
firewall_rule "accept-lumberjack-#{forwarder}" do
action :accept
gateways = search(:node, "roles:gateway") # ~FC010
-gateways.each do |gateway|
+gateways.sort_by { |n| n[:fqdn] }.each do |gateway|
gateway.interfaces(:role => :external) do |interface|
firewall_rule "accept-lumberjack-#{gateway}" do
action :accept