Allow to set a password for Redis connections (NETWAYS#331)

I hijacked the logstash_pipelines molecule check to test these new
settings.

fixes NETWAYS#330

Author: widhalmt

docs/role-logstash.md

@@ -87,6 +87,7 @@ Aside from `logstash.yml` we can manage Logstashs pipelines.
 * *logstash_sniffing_delay*: How long to wait, in seconds, between sniffing attempts (Default: `not set`).
 * *logstash_sniffing_path*: HTTP Path to be used for the sniffing requests (Default: `not set`).
 * *logstash_legacy_monitoring*: Enables legacy monitoring - ignored when `elasticstack_full_stack` is not set. (default: `true`)
+* *logstash_redis_password*: If set this will use this password when connecting our simple inputs and outputs to Redis. (default: not set)
 
 The following variables configure Log4j for Logstash. All default to `true` as this is the default after the installation.
 

molecule/elasticstack_default/converge.yml

@@ -18,6 +18,8 @@
     elasticstack_full_stack: true
     elasticstack_no_log: false
     logstash_pipeline_unsafe_shutdown: true
+    logstash_redis_password: "ThisIsMyRedisTest"
+    redis_requirepass: "{{ logstash_redis_password }}"
     beats_filebeat_syslog_udp: true
     beats_filebeat_syslog_tcp: true
     beats_filebeat_modules:

molecule/logstash_pipelines/converge.yml

@@ -30,6 +30,7 @@
     logstash_pipeline_identifier_field_name: "[mytest][pipelines]"
     logstash_pipeline_identifier_defaults: true
     logstash_pipeline_unsafe_shutdown: true
+    redis_requirepass: "{{ logstash_redis_password }}"
     elasticstack_release: "{{ lookup('env', 'ELASTIC_RELEASE') | int}}"
     elasticstack_full_stack: false
     elasticstack_no_log: false

roles/logstash/templates/redis-input.conf.j2

@@ -3,5 +3,8 @@ input {
     host => "localhost"
     data_type => "list"
     key => "forwarder"
+{% if logstash_redis_password is defined %}
+    password => "{{ logstash_redis_password }}"
+{% endif %}
   }
 }

roles/logstash/templates/redis-output.conf.j2

@@ -14,5 +14,8 @@ output {
     data_type => "list"
     key => "input"
 {% if logstash_beats_input_congestion is defined %}    congestion_threshold => {{ logstash_beats_input_congestion }}{% endif %}
+{% if logstash_redis_password is defined %}
+    password => "{{ logstash_redis_password }}"
+{% endif %}
   }
 }

roles/logstash/templates/simple-input.conf.j2

@@ -6,6 +6,9 @@ input {
     host => "localhost"
     data_type => "list"
     key => "{{ input.key }}"
+{% if logstash_redis_password is defined %}
+    password => "{{ logstash_redis_password }}"
+{% endif %}
   }
 {% endfor %}
 

roles/logstash/templates/simple-output.conf.j2

@@ -19,6 +19,9 @@ output {
     host => "localhost"
     data_type => "list"
     key => "{{ output.key }}"
+{% if logstash_redis_password is defined %}
+    password => "{{ logstash_redis_password }}"
+{% endif %}
     {% if output.congestion is defined %}congestion_threshold => {{ output.congestion }}{% endif %}
 
   }