telus / ansible-fluentd Goto Github PK

In templates/usr/local/etc/fluentd/plugins.d/plugins.conf.template there is an elasticsearch_user var but nowhere to define it.

This is causing the package to fail out.

Introduced in commit 4110ae7

We use fluentd_user and fluentd_group to set permissions when using file and template. However, we don't feed those to upstart so it runs fluentd as root. This effectively means that fluentd_user and fluentd_group don't mean anything to fluentd and don't limit fluentd's access.

We need to figure out if we want to add those to upstart or remove them entirely to enforce root/root, which is what we currently effectively do.