X-Git-Url: https://gerrit.mcp.mirantis.com/gitweb?p=salt-formulas%2Felasticsearch.git;a=blobdiff_plain;f=elasticsearch%2Fserver%2Finit.sls;h=8fac2b2af28941d38bfd195aa956798003386a63;hp=273e21498559bbcb4144a63f62a5e5271ae76a1f;hb=7a3a659bbe9cd23e542baeb2a9c8820d4b91ec83;hpb=dd01ab773b97faf876589b7f91c422f8ad81940b

diff --git a/elasticsearch/server/init.sls b/elasticsearch/server/init.sls
index 273e214..8fac2b2 100644
--- a/elasticsearch/server/init.sls
+++ b/elasticsearch/server/init.sls
@@ -16,21 +16,41 @@ elasticsearch_packages:
   - require:
     - pkg: elasticsearch_dependency_packages
 
+elasticsearch_group:
+  group.present:
+  - name: elasticsearch
+  - require:
+    - pkg: elasticsearch_packages
+
+elasticsearch_user:
+  user.present:
+  - name: elasticsearch
+  - home: /home/elasticsearch
+  - shell: /bin/false
+  - groups:
+    - elasticsearch
+  - require:
+    - group: elasticsearch_group
+
 elasticsearch_default:
   file.managed:
   - name: /etc/default/elasticsearch
   - source: salt://elasticsearch/files/v{{ server.version }}/elasticsearch
+  - group: elasticsearch
   - template: jinja
   - require:
     - pkg: elasticsearch_packages
+    - user: elasticsearch_user
 
 elasticsearch_config:
   file.managed:
   - name: /etc/elasticsearch/elasticsearch.yml
   - source: salt://elasticsearch/files/v{{ server.version }}/elasticsearch.yml
+  - group: elasticsearch
   - template: jinja
   - require:
     - pkg: elasticsearch_packages
+    - user: elasticsearch_user
 
 {%- if server.version == 2 %}
 elasticsearch_logging:
@@ -56,17 +76,21 @@ elasticsearch_logging:
   file.managed:
   - name: /etc/elasticsearch/log4j2.properties
   - source: salt://elasticsearch/files/v{{ server.version }}/log4j2.properties
+  - group: elasticsearch
   - template: jinja
   - require:
     - pkg: elasticsearch_packages
+    - user: elasticsearch_user
 
 elasticsearch_jvm_options:
   file.managed:
   - name: /etc/elasticsearch/jvm.options
   - source: salt://elasticsearch/files/v{{ server.version }}/jvm.options
+  - group: elasticsearch
   - template: jinja
   - require:
     - pkg: elasticsearch_packages
+    - user: elasticsearch_user
 
 {%- if grains.get('init') == 'systemd' %}
 elasticsearch_override_limit_memlock_file: