34 lines
1.0 KiB
YAML
34 lines
1.0 KiB
YAML
---
|
|
clusterName: "security"
|
|
nodeGroup: "master"
|
|
|
|
roles:
|
|
master: "true"
|
|
ingest: "true"
|
|
data: "true"
|
|
|
|
protocol: https
|
|
|
|
esConfig:
|
|
elasticsearch.yml: |
|
|
xpack.security.enabled: true
|
|
xpack.security.transport.ssl.enabled: true
|
|
xpack.security.transport.ssl.verification_mode: certificate
|
|
xpack.security.transport.ssl.keystore.path: /usr/share/elasticsearch/config/certs/elastic-certificates.p12
|
|
xpack.security.transport.ssl.truststore.path: /usr/share/elasticsearch/config/certs/elastic-certificates.p12
|
|
xpack.security.http.ssl.enabled: true
|
|
xpack.security.http.ssl.truststore.path: /usr/share/elasticsearch/config/certs/elastic-certificates.p12
|
|
xpack.security.http.ssl.keystore.path: /usr/share/elasticsearch/config/certs/elastic-certificates.p12
|
|
|
|
extraEnvs:
|
|
- name: ELASTIC_PASSWORD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: elastic-credentials
|
|
key: password
|
|
|
|
secretMounts:
|
|
- name: elastic-certificates
|
|
secretName: elastic-certificates
|
|
path: /usr/share/elasticsearch/config/certs
|