openstack/openstack-helm-infra
Code Issues Proposed changes
e12d3f49e0
openstack-helm-infra/elasticsearch/templates
History
Lo, Chi (cl566n) 9a719e2a18 Enable TLS between Elasticsearch and Kibana 
This change enables TLS between Elasticsearch and Kibana
data path. Note that TLS terminates at apache-proxy container
of the Elasticsearch-client pod, not directly to port 9200 of
elasticsearch-client container.

Since all data traffic goes through apache-proxy container,
fluentd output to Elasticsearch are configured to have TLS
enabled as well.

In additon, other Elasticsearch pods that communicate with
Elasticsearch-client endpoint are modified to provide
the cacert option with curl.

Change-Id: I3373c0c350b30c175be4a34d25a403b9caf74294
2021-04-25 09:07:33 -07:00
..
bin Enable TLS between Elasticsearch and Kibana 2021-04-25 09:07:33 -07:00
monitoring/prometheus Elasticsearch: Bump Exporter to v1.1.0 (latest/stable tag) 2020-05-18 19:08:39 -05:00
certificates.yaml Enable TLS between Elasticsearch and Kibana 2021-04-25 09:07:33 -07:00
configmap-bin-curator.yaml Remove OSH Authors copyright 2020-05-07 02:11:15 +00:00
configmap-bin-elasticsearch.yaml Elasticsearch: Make templates job more robust 2021-04-12 18:40:11 +00:00
configmap-etc-curator.yaml Remove OSH Authors copyright 2020-05-07 02:11:15 +00:00
configmap-etc-elasticsearch.yaml Elasticsearch S3 Update 2021-04-06 15:12:34 +00:00
cron-job-curator.yaml Merge "Add missing security context to elasticsearch pods/containers" 2020-07-08 23:20:09 +00:00
cron-job-verify-repositories.yaml Enable TLS between Elasticsearch and Kibana 2021-04-25 09:07:33 -07:00
deployment-client.yaml Enable TLS between Elasticsearch and Kibana 2021-04-25 09:07:33 -07:00
deployment-gateway.yaml Elasticsearch S3 Update 2021-04-06 15:12:34 +00:00
ingress-elasticsearch.yaml Enable TLS between Elasticsearch and Kibana 2021-04-25 09:07:33 -07:00
job-elasticsearch-template.yaml Enable TLS between Elasticsearch and Kibana 2021-04-25 09:07:33 -07:00
job-image-repo-sync.yaml Remove OSH Authors copyright 2020-05-07 02:11:15 +00:00
job-s3-bucket.yaml Elasticsearch S3 Update 2021-04-06 15:12:34 +00:00
job-s3-user.yaml Elasticsearch S3 Update 2021-04-06 15:12:34 +00:00
network-policy.yaml Remove OSH Authors copyright 2020-05-07 02:11:15 +00:00
pod-helm-tests.yaml Enable TLS between Elasticsearch and Kibana 2021-04-25 09:07:33 -07:00
secret-elasticsearch.yaml Enable TLS between Elasticsearch and Kibana 2021-04-25 09:07:33 -07:00
secret-environment.yaml Elasticsearch Secret Vars 2020-05-13 11:31:46 -05:00
secret-ingress-tls.yaml Settings for Remote Elasticsearch Clusters 2020-05-08 13:07:54 -05:00
secret-s3-user.yaml Elasticsearch S3 Update 2021-04-06 15:12:34 +00:00
service-data.yaml Remove OSH Authors copyright 2020-05-07 02:11:15 +00:00
service-discovery.yaml Remove OSH Authors copyright 2020-05-07 02:11:15 +00:00
service-gateway.yaml Settings for Remote Elasticsearch Clusters 2020-05-08 13:07:54 -05:00
service-ingress-elasticsearch.yaml Remove OSH Authors copyright 2020-05-07 02:11:15 +00:00
service-logging.yaml Enable TLS between Elasticsearch and Kibana 2021-04-25 09:07:33 -07:00
statefulset-data.yaml Enable TLS between Elasticsearch and Kibana 2021-04-25 09:07:33 -07:00
statefulset-master.yaml Elasticsearch S3 Update 2021-04-06 15:12:34 +00:00