| 1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374 |
- cluster:
- name: ${CLUSTER_NAME}
- script:
- inline: on
- indexed: on
- index:
- number_of_shards: 1
- number_of_replicas: 0
- auto_expand_replicas: 0-3
- unassigned.node_left.delayed_timeout: 2m
- translog:
- flush_threshold_size: 256mb
- flush_threshold_period: 5m
- node:
- master: true
- data: true
- network:
- host: 0.0.0.0
- cloud:
- kubernetes:
- service: ${SERVICE_DNS}
- namespace: ${NAMESPACE}
- discovery:
- type: kubernetes
- zen.ping.multicast.enabled: false
- gateway:
- expected_master_nodes: ${NODE_QUORUM}
- recover_after_nodes: ${RECOVER_AFTER_NODES}
- expected_nodes: ${RECOVER_EXPECTED_NODES}
- recover_after_time: ${RECOVER_AFTER_TIME}
- io.fabric8.elasticsearch.authentication.users: ["system.logging.kibana", "system.logging.fluentd", "system.logging.curator", "system.admin"]
- openshift.searchguard:
- keystore.path: /etc/elasticsearch/secret/admin.jks
- truststore.path: /etc/elasticsearch/secret/searchguard.truststore
- path:
- data: /elasticsearch/persistent/${CLUSTER_NAME}/data
- logs: /elasticsearch/${CLUSTER_NAME}/logs
- work: /elasticsearch/${CLUSTER_NAME}/work
- scripts: /elasticsearch/${CLUSTER_NAME}/scripts
- searchguard:
- authcz.admin_dn:
- - CN=system.admin,OU=OpenShift,O=Logging
- config_index_name: ".searchguard.${HOSTNAME}"
- ssl:
- transport:
- enabled: true
- enforce_hostname_verification: false
- keystore_type: JKS
- keystore_filepath: /etc/elasticsearch/secret/searchguard.key
- keystore_password: kspass
- truststore_type: JKS
- truststore_filepath: /etc/elasticsearch/secret/searchguard.truststore
- truststore_password: tspass
- http:
- enabled: true
- keystore_type: JKS
- keystore_filepath: /etc/elasticsearch/secret/key
- keystore_password: kspass
- clientauth_mode: OPTIONAL
- truststore_type: JKS
- truststore_filepath: /etc/elasticsearch/secret/truststore
- truststore_password: tspass
|
