Implement global handlers

There are tasks that are doing things with other tools of the
collection (e.g: after changing certificates in elasticsearch, we need
to restart kibana).
This tasks will be moved to the global role "elasticstack" and can be
called by via 'notify'.
Also, global handlers will only do something when
`elasticstack_collection_managed` is true (means the whole stack is
managed by the collecion)

Author: tbauriedel

roles/elasticsearch/handlers/main.yml

@@ -8,13 +8,3 @@
     - elasticsearch_enable | bool
     - not elasticsearch_freshstart.changed | bool
     - not elasticsearch_freshstart_security.changed | bool
-
-- name: Restart kibana if available for elasticsearch certificates
-  ansible.builtin.include_tasks: handlers/restart_kibana.yml
-  with_items: "{{ groups[elasticstack_kibana_group_name] }}"
-  when:
-    - elasticstack_collection_managed: true
-    - "not 'renew_ca' in ansible_run_tags"
-    - "not elasticstack_ca_will_expire_soon | bool"
-    - elasticstack_kibana_group_name is defined
-    - groups[elasticstack_kibana_group_name] is defined

roles/elasticsearch/handlers/restart_kibana.yml

@@ -303,7 +303,7 @@
     mode: 0640
   notify:
     - Restart Elasticsearch
-    - Restart kibana if available for elasticsearch certificates
+    - "Global - Restart Kibana"
   tags:
     - certificates
     - renew_ca
@@ -319,7 +319,7 @@
     mode: 0640
   notify:
     - Restart Elasticsearch
-    - Restart kibana if available for elasticsearch certificates
+    - Global - Restart Kibana
   tags:
     - certificates
     - renew_ca

roles/elasticsearch/tasks/elasticsearch-security.yml

@@ -3,6 +3,10 @@ elasticstack_elasticsearch_group_name: elasticsearch
 elasticstack_logstash_group_name: logstash
 elasticstack_kibana_group_name: kibana
 
+elasticstack_hosts_elasticsearch: groups[elasticstack_elasticsearch_group_name]
+elasticstack_hosts_logstash: groups[elasticstack_logstash_group_name]
+elasticstack_hosts_kibana: groups[elasticstack_kibana_group_name]
+
 elasticstack_beats_port: 5044
 elasticstack_ca_host: "{{ groups[elasticstack_elasticsearch_group_name][0] }}"
 elasticstack_ca_dir: /opt/es-ca

roles/elasticstack/defaults/main.yml

@@ -0,0 +1,7 @@
+---
+- name: "Global - Restart Kibana"
+  ansible.builtin.include_tasks: tasks/global/restart_kibana.yml
+  with_items: "{{ elasticstack_hosts_kibana }}"
+  when:
+    - elasticstack_collection_managed | bool # Only restart if all is managed by the collection
+    - elasticstack_hosts_kibana | length > 0

roles/elasticstack/handlers/main.yml

@@ -0,0 +1,14 @@
+---
+- name: Restart Kibana (if installed)
+  delegate_to: "{{ item }}"
+  block:
+    - name: Fetch installed packages
+      ansible.builtin.package_facts:
+        manager: "auto"
+      changed_when: false
+
+    - name: Restart Kibana
+      ansible.builtin.service:
+        name: kibana
+        state: restarted
+      when: "'kibana' in ansible_facts.packages"