X-Git-Url: https://gerrit.mcp.mirantis.com/gitweb?p=salt-formulas%2Felasticsearch.git;a=blobdiff_plain;f=elasticsearch%2Fserver%2Finit.sls;h=3421aea6644e692171c5daa924af696bea01c4a7;hp=e8ae75459e223e4c29c05e9e698b7800bb297707;hb=c9a425c44772fd005591627fa12f39572c3eb53b;hpb=ef4223a7534dd3dcdf8480871e498e5e7b4a1f26

diff --git a/elasticsearch/server/init.sls b/elasticsearch/server/init.sls
index e8ae754..3421aea 100644
--- a/elasticsearch/server/init.sls
+++ b/elasticsearch/server/init.sls
@@ -16,21 +16,41 @@ elasticsearch_packages:
   - require:
     - pkg: elasticsearch_dependency_packages
 
+elasticsearch_group:
+  group.present:
+  - name: elasticsearch
+  - require:
+    - pkg: elasticsearch_packages
+
+elasticsearch_user:
+  user.present:
+  - name: elasticsearch
+  - home: /home/elasticsearch
+  - shell: /bin/false
+  - groups:
+    - elasticsearch
+  - require:
+    - group: elasticsearch_group
+
 elasticsearch_default:
   file.managed:
   - name: /etc/default/elasticsearch
   - source: salt://elasticsearch/files/v{{ server.version }}/elasticsearch
+  - group: elasticsearch
   - template: jinja
   - require:
     - pkg: elasticsearch_packages
+    - user: elasticsearch_user
 
 elasticsearch_config:
   file.managed:
   - name: /etc/elasticsearch/elasticsearch.yml
   - source: salt://elasticsearch/files/v{{ server.version }}/elasticsearch.yml
+  - group: elasticsearch
   - template: jinja
   - require:
     - pkg: elasticsearch_packages
+    - user: elasticsearch_user
 
 {%- if server.version == 2 %}
 elasticsearch_logging:
@@ -47,17 +67,21 @@ elasticsearch_logging:
   file.managed:
   - name: /etc/elasticsearch/log4j2.properties
   - source: salt://elasticsearch/files/v{{ server.version }}/log4j2.properties
+  - group: elasticsearch
   - template: jinja
   - require:
     - pkg: elasticsearch_packages
+    - user: elasticsearch_user
 
 elasticsearch_jvm_options:
   file.managed:
   - name: /etc/elasticsearch/jvm.options
   - source: salt://elasticsearch/files/v{{ server.version }}/jvm.options
+  - group: elasticsearch
   - template: jinja
   - require:
     - pkg: elasticsearch_packages
+    - user: elasticsearch_user
 
 {%- if grains.get('init') == 'systemd' %}
 elasticsearch_override_limit_memlock_file: