ECE Ansible does not use consistent groups across tasks

[nerophon]

ECE 2.7

We've identified an issue where the default users and groups that Ansible provisions do not align with the user & group then used in other tasks.

The task in tasks/base/general/make_user.yml defines the group "elastic" and "docker" - Elastic then ends up being the primary group from what we can see.

But in the download step under tasks/ece-bootstrap/main.yml it tries to then set the group ownership of the file to elastic_user_group - which does not exist and was never created.

[alexsuppanz]

Hi @nerophon
I just came across your issue and tried to verify that. These are the corresponding code lines where the user 'elastic' with the primary group 'elastic' is added to the local 'docker' group

ansible-elastic-cloud-enterprise/tasks/base/general/make_user.yml

Lines 21 to 36 in db179b2

	- name: Add user elastic
	user:
	name: elastic
	group: elastic
	groups: docker
	append: yes
	state: present
	generate_ssh_key: true
	when: getent_passwd["elastic"] == none
	- name: Modify user elastic to be included in groups
	user:
	name: elastic
	groups: docker
	append: yes
	when: getent_passwd["elastic"] != none

But in the affected file where the wrong group permission should be set I did not find the group you mentioned (I think this is the download task you mentioned)

ansible-elastic-cloud-enterprise/tasks/ece-bootstrap/main.yml

Lines 2 to 6 in db179b2

	- name: Download ece installer
	get_url:
	url: "{{ ece_installer_url }}"
	dest: /home/elastic/elastic-cloud-enterprise.sh
	mode: 0755

Doing a quick search I can not find a variable called 'elastic_user_group'. Are you using an old version of this playbook to install ECE 2.7?

Regards,
Alex