elasticsearch.yml.j2 2.1 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869
  1. cluster:
  2. name: ${CLUSTER_NAME}
  3. script:
  4. inline: true
  5. stored: true
  6. node:
  7. name: ${DC_NAME}
  8. master: ${IS_MASTER}
  9. data: ${HAS_DATA}
  10. max_local_storage_nodes: 1
  11. network:
  12. host: 0.0.0.0
  13. discovery.zen:
  14. ping.unicast.hosts: {{ es_unicast_host }}
  15. minimum_master_nodes: ${NODE_QUORUM}
  16. gateway:
  17. recover_after_nodes: ${NODE_QUORUM}
  18. expected_nodes: ${RECOVER_EXPECTED_NODES}
  19. recover_after_time: ${RECOVER_AFTER_TIME}
  20. io.fabric8.elasticsearch.kibana.mapping.app: /usr/share/elasticsearch/index_patterns/com.redhat.viaq-openshift.index-pattern.json
  21. io.fabric8.elasticsearch.kibana.mapping.ops: /usr/share/elasticsearch/index_patterns/com.redhat.viaq-openshift.index-pattern.json
  22. io.fabric8.elasticsearch.kibana.mapping.empty: /usr/share/elasticsearch/index_patterns/com.redhat.viaq-openshift.index-pattern.json
  23. openshift.config:
  24. use_common_data_model: true
  25. project_index_prefix: "project"
  26. time_field_name: "@timestamp"
  27. openshift.searchguard:
  28. keystore.path: /etc/elasticsearch/secret/admin.jks
  29. truststore.path: /etc/elasticsearch/secret/searchguard.truststore
  30. openshift.operations.allow_cluster_reader: {{allow_cluster_reader | default (false)}}
  31. openshift.kibana.index.mode: {{es_kibana_index_mode | default('unique')}}
  32. path:
  33. data: /elasticsearch/persistent/${CLUSTER_NAME}/data
  34. logs: /elasticsearch/persistent/${CLUSTER_NAME}/logs
  35. searchguard:
  36. authcz.admin_dn:
  37. - CN=system.admin,OU=OpenShift,O=Logging
  38. config_index_name: ".searchguard"
  39. ssl:
  40. transport:
  41. enabled: true
  42. enforce_hostname_verification: false
  43. keystore_type: JKS
  44. keystore_filepath: /etc/elasticsearch/secret/searchguard.key
  45. keystore_password: kspass
  46. truststore_type: JKS
  47. truststore_filepath: /etc/elasticsearch/secret/searchguard.truststore
  48. truststore_password: tspass
  49. http:
  50. enabled: true
  51. keystore_type: JKS
  52. keystore_filepath: /etc/elasticsearch/secret/key
  53. keystore_password: kspass
  54. clientauth_mode: OPTIONAL
  55. truststore_type: JKS
  56. truststore_filepath: /etc/elasticsearch/secret/truststore
  57. truststore_password: tspass