a31afb2f85
The Kibana username and password needs to match the Elasticsearch username and password, as Kibana requires an authorized elasticsearch user to make queries against the elasticsearch backend to display its dashboards and set up the initial .kibana index. This changes the apache proxy running in front of kibana to consume the elasticsearch username and password via the elasticsearch secret in the chart to ensure kibana has proper access Change-Id: Ife3fd916e8d9a3f8877d01a9048a892f92e412d8
132 lines
5.2 KiB
YAML
132 lines
5.2 KiB
YAML
{{/*
|
|
Copyright 2017 The Openstack-Helm Authors.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/}}
|
|
|
|
{{- if .Values.manifests.deployment }}
|
|
{{- $envAll := . }}
|
|
|
|
{{- $esUserSecret := .Values.secrets.elasticsearch.user }}
|
|
|
|
{{- $serviceAccountName := "kibana" }}
|
|
{{ tuple $envAll "kibana" $serviceAccountName | include "helm-toolkit.snippets.kubernetes_pod_rbac_serviceaccount" }}
|
|
---
|
|
apiVersion: extensions/v1beta1
|
|
kind: Deployment
|
|
metadata:
|
|
name: kibana
|
|
spec:
|
|
replicas: {{ .Values.pod.replicas.kibana }}
|
|
{{ tuple $envAll | include "helm-toolkit.snippets.kubernetes_upgrades_deployment" | indent 2 }}
|
|
template:
|
|
metadata:
|
|
labels:
|
|
{{ tuple $envAll "kibana" "dashboard" | include "helm-toolkit.snippets.kubernetes_metadata_labels" | indent 8 }}
|
|
annotations:
|
|
configmap-etc-hash: {{ tuple "configmap-etc.yaml" . | include "helm-toolkit.utils.hash" }}
|
|
configmap-bin-hash: {{ tuple "configmap-bin.yaml" . | include "helm-toolkit.utils.hash" }}
|
|
spec:
|
|
serviceAccountName: {{ $serviceAccountName }}
|
|
affinity:
|
|
{{ tuple $envAll "kibana" "dashboard" | include "helm-toolkit.snippets.kubernetes_pod_anti_affinity" | indent 8 }}
|
|
nodeSelector:
|
|
{{ .Values.labels.kibana.node_selector_key }}: {{ .Values.labels.kibana.node_selector_value }}
|
|
initContainers:
|
|
{{ tuple $envAll "kibana" list | include "helm-toolkit.snippets.kubernetes_entrypoint_init_container" | indent 8 }}
|
|
containers:
|
|
- name: apache-proxy
|
|
{{ tuple $envAll "apache_proxy" | include "helm-toolkit.snippets.image" | indent 10 }}
|
|
{{ tuple $envAll $envAll.Values.pod.resources.apache_proxy | include "helm-toolkit.snippets.kubernetes_resources" | indent 10 }}
|
|
command:
|
|
- /tmp/apache.sh
|
|
- start
|
|
ports:
|
|
- name: http
|
|
containerPort: {{ tuple "kibana" "internal" "http" . | include "helm-toolkit.endpoints.endpoint_port_lookup" }}
|
|
env:
|
|
- name: KIBANA_PORT
|
|
value: {{ tuple "kibana" "internal" "kibana" . | include "helm-toolkit.endpoints.endpoint_port_lookup" | quote }}
|
|
- name: KIBANA_USERNAME
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: {{ $esUserSecret }}
|
|
key: ELASTICSEARCH_USERNAME
|
|
- name: KIBANA_PASSWORD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: {{ $esUserSecret }}
|
|
key: ELASTICSEARCH_PASSWORD
|
|
volumeMounts:
|
|
- name: kibana-bin
|
|
mountPath: /tmp/apache.sh
|
|
subPath: apache.sh
|
|
readOnly: true
|
|
- name: kibana-etc
|
|
mountPath: /usr/local/apache2/conf/httpd.conf
|
|
subPath: httpd.conf
|
|
readOnly: true
|
|
- name: pod-etc-apache
|
|
mountPath: /usr/local/apache2/conf/sites-enabled
|
|
- name: kibana-etc
|
|
mountPath: /usr/local/apache2/conf/sites-enabled/kibana-host.conf
|
|
subPath: kibana-host.conf
|
|
readOnly: true
|
|
- name: kibana
|
|
{{ tuple $envAll "kibana" | include "helm-toolkit.snippets.image" | indent 10 }}
|
|
{{ tuple $envAll $envAll.Values.pod.resources.kibana | include "helm-toolkit.snippets.kubernetes_resources" | indent 10 }}
|
|
command:
|
|
- /tmp/kibana.sh
|
|
- start
|
|
ports:
|
|
- name: kibana
|
|
containerPort: {{ tuple "kibana" "internal" "kibana" . | include "helm-toolkit.endpoints.endpoint_port_lookup" }}
|
|
env:
|
|
- name: ELASTICSEARCH_URL
|
|
value: {{ tuple "elasticsearch" "default" "client" . | include "helm-toolkit.endpoints.keystone_endpoint_uri_lookup" }}
|
|
- name: ELASTICSEARCH_USERNAME
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: {{ $esUserSecret }}
|
|
key: ELASTICSEARCH_USERNAME
|
|
- name: ELASTICSEARCH_PASSWORD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: {{ $esUserSecret }}
|
|
key: ELASTICSEARCH_PASSWORD
|
|
volumeMounts:
|
|
- name: kibana-bin
|
|
mountPath: /tmp/kibana.sh
|
|
subPath: kibana.sh
|
|
readOnly: true
|
|
- name: pod-etc-kibana
|
|
mountPath: /usr/share/kibana/config
|
|
- name: kibana-etc
|
|
mountPath: /usr/share/kibana/config/kibana.yml
|
|
subPath: kibana.yml
|
|
readOnly: true
|
|
volumes:
|
|
- name: pod-etc-kibana
|
|
emptyDir: {}
|
|
- name: pod-etc-apache
|
|
emptyDir: {}
|
|
- name: kibana-bin
|
|
configMap:
|
|
name: kibana-bin
|
|
defaultMode: 0555
|
|
- name: kibana-etc
|
|
configMap:
|
|
name: kibana-etc
|
|
defaultMode: 0444
|
|
{{- end }}
|