9a719e2a18
This change enables TLS between Elasticsearch and Kibana data path. Note that TLS terminates at apache-proxy container of the Elasticsearch-client pod, not directly to port 9200 of elasticsearch-client container. Since all data traffic goes through apache-proxy container, fluentd output to Elasticsearch are configured to have TLS enabled as well. In additon, other Elasticsearch pods that communicate with Elasticsearch-client endpoint are modified to provide the cacert option with curl. Change-Id: I3373c0c350b30c175be4a34d25a403b9caf74294 |
||
---|---|---|
.. | ||
bin | ||
configmap-bin.yaml | ||
configmap-etc.yaml | ||
deployment.yaml | ||
ingress-kibana.yaml | ||
job-flush-kibana-metadata.yaml | ||
job-image-repo-sync.yaml | ||
job-register-kibana-indexes.yaml | ||
network_policy.yaml | ||
secret-elasticsearch-creds.yaml | ||
secret-ingress-tls.yaml | ||
service-ingress-kibana.yaml | ||
service.yaml |