hetzner-ansible/roles/kibana/tasks/_configure_searches.yml

---
- name: "Initialze VARs"
  set_fact:
    api_path: '/s/{{ es_space }}/api/saved_objects'
    es_object_type: search
    search_exists: False
    elastic_search_cleaned: {}
    ref_obj_modified: {}

- name: "Get all searches in elasticsearch"
  delegate_to: localhost
  uri:
    url: "https://{{ api_endpoint }}{{ api_path }}/_find?per_page=10000&type=search"
    method: GET
    status_code: [200]
    user: "{{ elastic_admin_username_vault }}" 
    password: "{{ elastic_admin_password_vault }}"
    force_basic_auth: yes
  register: all_searches
  become: false

- name: "Lookup search object if exists"
  set_fact:
    lookup_search_object: '{{ all_searches.json | community.general.json_query(querystr1) | first | community.general.json_query(search_query) }}'
  vars:
    querystr1: "[saved_objects[*]]"
    search_query: "[?attributes.title=='{{ elastic_search.attributes.title }}']"

- name: "Set switch VAR"
  set_fact:
    search_exists: True 
  when:
    - lookup_search_object | length > 0

- name: "Drop not needed keys from dict"
  set_fact:
    elastic_search_cleaned: "{{ elastic_search_cleaned | combine({item.key: item.value}) }}"
  with_dict: '{{ elastic_search }}'
  when:
    - item.key not in ['elastic_state']

### begin of block
- name: 'Lookup ID of indexpattern'
  delegate_to: localhost
  block:
  - name: "Get all indexpatterns in elasticsearch"
    delegate_to: localhost
    uri:
      url: "https://{{ api_endpoint }}/s/{{ es_space }}/api/saved_objects/_find?per_page=10000&type=index-pattern"
      method: GET
      status_code: [200]
      user: "{{ elastic_admin_username_vault }}" 
      password: "{{ elastic_admin_password_vault }}"
      force_basic_auth: yes
    register: all_indexpatterns
    become: false
  
  - name: "Lookup index pattern object if exists"
    set_fact:
      lookup_indexpattern_object: '{{ all_indexpatterns.json | community.general.json_query(querystr1) | first | community.general.json_query(indexpattern_query) }}'
    vars:
      querystr1: "[saved_objects[*]]"
      indexpattern_query: "[?attributes.title=='{{ elastic_search.references[0].ref_name }}']"
  
  - name: "Set switch VAR"
    set_fact:
      indexpattern_exists: True 
    when:
      - lookup_indexpattern_object | length > 0
  
  - name: "DEBUG"
    debug:
      msg: 'lookup_indexpattern_object:{{ lookup_indexpattern_object }}'

  - 
    name: "Prepare step to combine dicts"
    delegate_to: localhost
    set_fact:
      ref_obj_modified:
        references:
          -
            name: '{{ elastic_search.references[0].name }}'
            type: 'index-pattern'
            id: '{{ lookup_indexpattern_object[0].id }}' 
    when:
      - lookup_indexpattern_object | length > 0
  when:
    - elastic_search.elastic_state == 'present'
### end of block

- name: "Kick out not needed keys in search dict"
  delegate_to: localhost
  set_fact:
    elastic_search_cleaned: "{{ elastic_search_cleaned | combine( { item.key: item.value } ) }}"
  with_dict: '{{ elastic_search }}'
  when:
    - item.key not in ['elastic_state','references']

- name: "Crafting new search object to throw it against ES-API"
  delegate_to: localhost
  set_fact:
    elastic_search_cleaned: "{{ elastic_search_cleaned | combine( ref_obj_modified ) }}"

- name: "DEBUG"
  debug:
    msg: 'DEBUG elastic_search_cleaned: {{ elastic_search_cleaned }}'


- name: "Create {{ es_object_type }} <<{{ elastic_search.attributes.title }}>>"
  delegate_to: localhost
  uri:
    url: "https://{{ api_endpoint }}{{ api_path }}/{{ es_object_type }}"
    method: POST
    status_code: [200]
    user: "{{ elastic_admin_username_vault }}" 
    password: "{{ elastic_admin_password_vault }}"
    force_basic_auth: yes
    headers:
      Content-Type: application/json
      kbn-xsrf: true
    body_format: json
    body: '{{ elastic_search_cleaned | to_json }}'
  become: false
  when:
    - not search_exists
    - elastic_search.elastic_state == 'present'

- name: "Update {{ es_object_type }} <<{{ elastic_search.attributes.title }}>>"
  delegate_to: localhost
  uri:
    url: 'https://{{ api_endpoint }}{{ api_path }}/{{ es_object_type }}/{{ lookup_search_object[0]["id"] }}'
    method: PUT
    status_code: [200]
    user: "{{ elastic_admin_username_vault }}" 
    password: "{{ elastic_admin_password_vault }}"
    force_basic_auth: yes
    headers:
      Content-Type: application/json
      kbn-xsrf: true
    body_format: json
    body: '{{ elastic_search_cleaned | to_json }}'
  become: false
  when:
    - search_exists
    - elastic_search.elastic_state == 'present'

- name: "DELETE {{ es_object_type }} <<{{ elastic_search.attributes.title }}>>"
  delegate_to: localhost
  uri:
    url: 'https://{{ api_endpoint }}{{ api_path }}/{{ es_object_type }}/{{ lookup_search_object[0]["id"] }}'
    method: DELETE
    status_code: [200]
    user: "{{ elastic_admin_username_vault }}" 
    password: "{{ elastic_admin_password_vault }}"
    force_basic_auth: yes
    headers:
      Content-Type: application/json
      kbn-xsrf: true
  become: false
  when:
    - search_exists
    - elastic_search.elastic_state == 'absent'