Optimize deployment setup time

inventory/environ.py

@@ -361,7 +361,7 @@ def getSplunkBuildAuth(vars_scope):
     """
     Load username and password to be used in basic auth when fetching splunk build or apps
     """
-    vars_scope["splunk"]["artifact_auth_user"] = os.environ.get("ARTIFACTORY_USER", vars_scope["splunk"].get("artifact_auth_user"))
+    vars_scope["splunk"]["artifact_auth_user"] = os.environ.get("ARTIFACTORY_USER", vars_scope["splunk"].get("basic_auth_user"))
     vars_scope["splunk"]["artifact_auth_pass"] = os.environ.get("ARTIFACTORY_TOKEN", vars_scope["splunk"].get("artifact_auth_pass"))
 
 def getSplunkApps(vars_scope):

roles/splunk_common/handlers/restart_splunk.yml

@@ -1,4 +1,11 @@
 ---
+- name: Check if Splunk is running
+  command: "{{ splunk.exec }} status"
+  become: yes
+  become_user: "{{ splunk.user }}"
+  register: check_result
+  ignore_errors: yes
+
 - name: "Restart the splunkd service - Via CLI"
   command: "{{ splunk.exec }} restart --answer-yes --accept-license"
   become: yes
@@ -7,7 +14,9 @@
   until: task_result.rc == 0
   retries: "{{ retry_num }}"
   delay: "{{ retry_delay }}"
-  when: not splunk.enable_service
+  when: 
+    - not splunk.enable_service
+    - "'splunkd is running' in check_result.stdout"
 
 - name: "Restart the splunkd service - Via Linux systemd or init"
   service:
@@ -26,4 +35,6 @@
 - name: "Wait for splunkd management port"
   wait_for:
     port: "{{ splunk.svc_port }}"
-  when: splunk.splunk_http_enabled|bool == true
+  when: 
+  - "'splunkd is running' in check_result.stdout"
+  - splunk.splunk_http_enabled|bool == true

roles/splunk_common/tasks/enable_splunkd_ssl.yml

@@ -13,6 +13,11 @@
   become_user: "{{ splunk.user }}"
   when: "'enable' in splunk.ssl"
 
+- name: Set HTTPS as prefix after enabling it  
+  set_fact:
+    cert_prefix: https
+  when: "'enable' in splunk.ssl"
+
 - name: Set Splunkd CA
   ini_file:
     dest: "{{ splunk.home }}/etc/system/local/server.conf"

roles/splunk_common/tasks/install_splunk_tgz.yml

@@ -51,12 +51,7 @@
     splunk_replaced_build_location: "{{ splunk.build_location | regex_replace('^file://(.*)$', '\\1') }}"
 
 - name: Install Splunk (Linux) from local build location
-  unarchive:
-    src: "{% if splunk.build_location is match('^(https?)://.*') %}{{ splunk_downloaded_build_location }}{% else %}{{ splunk_replaced_build_location }}{% endif %}"
-    dest: "{{ splunk.opt }}"
-    owner: "{{ splunk.user }}"
-    group: "{{ splunk.group }}"
-    remote_src: yes
+  shell: tar --no-same-owner --no-same-permissions -x --owner={{ splunk.user }} --group={{ splunk.group }}  -f {% if splunk.build_location is match('^(https?)://.*') %}{{ splunk_downloaded_build_location }}{% else %}{{ splunk_replaced_build_location }}{% endif %} -C {{ splunk.opt }} && chown -R {{ splunk.user }}:{{ splunk.group }} /opt/splunk/*
   register: install_result
   until: install_result is succeeded
   retries: "{{ retry_num }}"

roles/splunk_common/tasks/main.yml

@@ -122,14 +122,9 @@
 - include_tasks: enable_dsp.yml
   when: "'dsp' in splunk and 'enable' in splunk.dsp and splunk.dsp.enable"
 
-- include_tasks: start_splunk.yml
-
-- include_tasks: set_certificate_prefix.yml
-  when: splunk.splunk_http_enabled|bool == true
-
-- include_tasks: clean_user_seed.yml
-
 - include_tasks: add_splunk_license.yml
 
 - include_tasks: disable_popups.yml
   when: "'disable_popups' in splunk and splunk.disable_popups | bool"
+
+- include_tasks: start_splunk.yml

roles/splunk_common/tasks/set_as_license_slave.yml

@@ -7,17 +7,13 @@
     port: "{{ splunk.license_master_url | urlsplit('port') }}"
   no_log: "{{ hide_password }}"
 
-- name: Set node as license slave
-  command: "{{ splunk.exec }} edit licenser-localslave -master_uri {{ splunk.license_master_url }} -auth '{{ splunk.admin_user }}:{{ splunk.password }}'"
+- name: Set node as license peer - FAST
+  ini_file:
+    dest: "{{ splunk.home }}/etc/system/local/server.conf"
+    section: license
+    option: manager_uri
+    value: "https://lm1:8089"
+    owner: "{{ splunk.user }}"
+    group: "{{ splunk.group }}"
   become: yes
   become_user: "{{ splunk.user }}"
-  register: linux_set_lic_slave
-  until: linux_set_lic_slave.rc == 0
-  changed_when: linux_set_lic_slave.rc == 0 and "licenser-localslave object has been edited" in linux_set_lic_slave.stdout
-  failed_when: linux_set_lic_slave.rc !=0 and "does not support being a remote master" in linux_set_lic_slave.stderr
-  retries: "{{ retry_num }}"
-  delay: "{{ retry_delay }}"
-  notify:
-    - Restart the splunkd service
-  ignore_errors: yes
-  no_log: "{{ hide_password }}"

roles/splunk_search_head/tasks/search_head_clustering.yml

@@ -75,16 +75,3 @@
   retries: "{{ shc_sync_retry_num }}"
   delay: "{{ retry_delay }}"
   no_log: "{{ hide_password }}"
-
-- name: Destructive sync search head
-  command: "{{ splunk.exec }} resync shcluster-replicated-config -auth {{ splunk.admin_user }}:{{ splunk.password }}"
-  become: yes
-  become_user: "{{ splunk.user }}"
-  when: not splunk_search_head_captain | bool
-  register: task_result
-  changed_when: task_result.rc == 0
-  failed_when: task_result.rc !=0 and "this instance is the captain" not in task_result.stderr
-  until: task_result.rc == 0 or "this instance is the captain" in task_result.stderr
-  retries: "{{ shc_sync_retry_num }}"
-  delay: "{{ retry_delay }}"
-  no_log: "{{ hide_password }}"