From 16a0cbb913e46512a8a3102cdbb1f1f62d831314 Mon Sep 17 00:00:00 2001
From: Robin Schneider <robin.schneider@geberit.com>
Date: Wed, 18 Nov 2020 12:49:47 +0100
Subject: [PATCH] Ensure /etc/elasticsearch directory permissions are set to
 2770

---
 elasticsearch/config.sls | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/elasticsearch/config.sls b/elasticsearch/config.sls
index 37555e3..d725b35 100644
--- a/elasticsearch/config.sls
+++ b/elasticsearch/config.sls
@@ -2,6 +2,16 @@ include:
   - elasticsearch.pkg
 
 {%- if salt['pillar.get']('elasticsearch:config') %}
+
+## Ensure directory permissions are set as required.
+## On SUSE with 6.x, this was not always ensured as it seemed.
+elasticsearch_es_path_conf_chmod:
+  file.directory:
+    - name: /etc/elasticsearch
+    - user: root
+    - group: elasticsearch
+    - mode: 2770
+
 elasticsearch_cfg:
   file.serialize:
     - name: /etc/elasticsearch/elasticsearch.yml