Add initial_admin_password parameter

See also: https://opensearch.org/docs/latest/install-and-configure/install-opensearch/debian/#step-1-download-and-install-opensearch

REFERENCE.md

@@ -40,6 +40,7 @@ The following parameters are available in the `opensearch` class:
 * [`package_directory`](#-opensearch--package_directory)
 * [`pin_package`](#-opensearch--pin_package)
 * [`apt_pin_priority`](#-opensearch--apt_pin_priority)
+* [`initial_admin_password`](#-opensearch--initial_admin_password)
 * [`manage_config`](#-opensearch--manage_config)
 * [`use_default_settings`](#-opensearch--use_default_settings)
 * [`default_settings`](#-opensearch--default_settings)
@@ -157,6 +158,12 @@ The priority for apt::pin of the opensearch package.
 
 Default value: `1001`
 
+##### <a name="-opensearch--initial_admin_password"></a>`initial_admin_password`
+
+Data type: `String[1]`
+
+Password for intial installation of the package.
+
 ##### <a name="-opensearch--manage_config"></a>`manage_config`
 
 Data type: `Boolean`

manifests/init.pp

@@ -20,6 +20,8 @@
 #   Whether to enable the `apt::pin` or `yum::versionlock` for the package.
 # @param apt_pin_priority
 #   The priority for apt::pin of the opensearch package.
+# @param initial_admin_password
+#   Password for intial installation of the package.
 #
 # @param manage_config
 #   Whether to manage the configuration.
@@ -116,6 +118,7 @@
   Enum['x64', 'arm64']                      $package_architecture,
   Enum['dpkg', 'rpm']                       $package_provider,
   Hash                                      $default_settings,
+  String[1]                                 $initial_admin_password,
 
   ##
   ## version

manifests/install/package.pp

@@ -61,9 +61,15 @@
     }
   }
 
+  exec { 'set_initial_password_environment':
+    path    => $facts['path'],
+    command => "export OPENSEARCH_INITIAL_ADMIN_PASSWORD=${opensearch::initial_admin_password}"
+  }
+
   package { 'opensearch':
     ensure   => $ensure,
     provider => $provider,
     source   => $source,
+    require  => Exec['set_initial_password_environment'],
   }
 }

spec/acceptance/default_spec.rb

@@ -6,7 +6,11 @@
   context 'default parameter' do
     it_behaves_like 'an idempotent resource' do
       let(:manifest) do
-        'include opensearch'
+        <<~PP
+          class { 'opensearch':
+            initial_admin_password => 'some_random_password',
+          }
+        PP
       end
     end
 
@@ -49,9 +53,10 @@
       let(:manifest) do
         <<~PP
           class { 'opensearch':
-            version        => '2.9.0',
-            package_source => 'archive',
-            settings       => {
+            version                => '2.9.0',
+            package_source         => 'archive',
+            initial_admin_password => 'some_random_password',
+            settings               => {
               # When installing from an archive, the demo certificates are not
               # installed by default.
               'plugins.security.disabled' => true,

spec/shared_examples/install_package.rb

@@ -63,13 +63,21 @@
     end
   end
 
+  it {
+    is_expected.to contain_exec('set_initial_password_environment').with(
+      {
+        'command' => "export OPENSEARCH_INITIAL_ADMIN_PASSWORD=#{parameter['initial_admin_password']}"
+      }
+    )
+  }
+
   it {
     is_expected.to contain_package('opensearch').with(
       {
         'ensure'   => ensure_value,
         'provider' => provider,
         'source'   => source,
       }
-    )
+    ).that_requires('Exec[set_initial_password_environment]')
   }
 end

spec/spec_helper_local.rb

@@ -12,36 +12,44 @@
 require 'helper/get_defaults'
 
 TESTS = {
-  'with default value' => {},
+  'with default value' => {
+    'initial_admin_password' => 'some_random_password',
+  },
   'with installation via archive and version 2.6.0' => {
+    'initial_admin_password' => 'some_random_password',
     'version' => '2.6.0',
     'package_source' => 'archive',
   },
   'with installation via download and version 2.6.0' => {
+    'initial_admin_password' => 'some_random_password',
     'version' => '2.6.0',
     'package_source' => 'download',
   },
   'with some settings given' => {
+    'initial_admin_password' => 'some_random_password',
     'settings' => {
       'http_max_content_length' => 10,
       'indices_queries_cache_size' => 10,
     },
   },
   'with some settings given and no default settings' => {
+    'initial_admin_password' => 'some_random_password',
     'use_default_settings' => false,
     'settings' => {
       'http_max_content_length' => 10,
       'indices_queries_cache_size' => 10,
     },
   },
   'with some jvm gc settings' => {
+    'initial_admin_password' => 'some_random_password',
     'jvm_gc_settings' => [
       '-XX:+UseG1GC',
       '-XX:G1ReservePercent=50',
       '-XX:InitiatingHeapOccupancyPercent=50',
     ],
   },
   'with only jvm gc logging settings given' => {
+    'initial_admin_password' => 'some_random_password',
     'use_default_jvm_gc_logging_settings' => false,
     'jvm_gc_logging_settings' => [
       '-XX:+PrintGCApplicationStoppedTime',