Install cryptography Python library

docs/role-beats.md

@@ -10,7 +10,6 @@ Requirements
 
 You need to have the beats you want to install available in your software repositories. We provide a [role](./role-repos.md) for just that but if you have other ways of managing software, just make sure it's available. Alternatively you can install the Beats yourself.
 
-* `cryptography` >= 2.5 
 * `community.crypto` collection: ansible-galaxy collection install community.crypto
 
 Role Variables

docs/role-elasticsearch.md

@@ -9,11 +9,6 @@ If you use the role to set up security you, can use its CA to create certificate
 
 Please note that setting `elasticsearch_bootstrap_pw` as variable will only take effect when initialising Elasticsearch. Changes after starting elasticsearch for the first time will not change the bootstrap password for the instance and will lead to breaking tests.
 
-Requirements
-------------
-
-* `cryptography` >= 2.5
-
 Role Variables
 --------------
 

docs/role-kibana.md

@@ -5,11 +5,6 @@ Ansible Role: Kibana
 
 This roles installs and configures Kibana.
 
-Requirements
-------------
-
-* `cryptography` >= 2.5
-
 Role Variables
 --------------
 

docs/role-logstash.md

@@ -19,7 +19,6 @@ Requirements
 ------------
 
 * `community.general` collection
-* `cryptography` >= 2.5
 
 You need to have the Elastic Repos configured on your system. You can use our [role](./role-repos.md)
 

roles/elasticsearch/tasks/elasticsearch-security.yml

@@ -1,5 +1,9 @@
 ---
 
+- name: Make sure cryptography Elasticsearch module is installed
+  package:
+    name: "{{ elasticsearch_pythoncryptography_pkgname }}"
+
 - name: Set elasticstack_ca variable if not already done by user
   set_fact:
     elasticstack_ca: "{{ groups['elasticsearch'][0] }}"

roles/elasticsearch/vars/Debian.yml

@@ -1,4 +1,5 @@
 ---
 
 elasticsearch_sysconfig_file: /etc/default/elasticsearch
+elasticsearch_pythoncryptography_pkgname: python3-cryptography
 elasticstack_versionseparator: "="

roles/elasticsearch/vars/RedHat.yml

@@ -1,4 +1,5 @@
 ---
 
 elasticsearch_sysconfig_file: /etc/sysconfig/elasticsearch
+elasticsearch_pythoncryptography_pkgname: python-cryptography
 elasticstack_versionseparator: "-"