From 10e3a8bcd4627db15e96e1737dcc72665a034717 Mon Sep 17 00:00:00 2001 From: osgn422w Date: Thu, 23 May 2019 14:19:39 +0200 Subject: kibana https only remove http access and allow only https for kibana UI Issue-ID: OJSI-147 Change-Id: I6026044c919abd51b8b6bd3b65f9552555c98e4c Signed-off-by: osgn422w --- .../clamp/charts/clamp-dash-kibana/templates/configmap.yaml | 9 +++++++++ .../clamp/charts/clamp-dash-kibana/templates/deployment.yaml | 5 +++++ 2 files changed, 14 insertions(+) (limited to 'kubernetes/clamp/charts/clamp-dash-kibana/templates') diff --git a/kubernetes/clamp/charts/clamp-dash-kibana/templates/configmap.yaml b/kubernetes/clamp/charts/clamp-dash-kibana/templates/configmap.yaml index 9186cd919a..8fcd405fa9 100644 --- a/kubernetes/clamp/charts/clamp-dash-kibana/templates/configmap.yaml +++ b/kubernetes/clamp/charts/clamp-dash-kibana/templates/configmap.yaml @@ -25,3 +25,12 @@ metadata: heritage: {{ .Release.Service }} data: {{ tpl (.Files.Glob "resources/config/*").AsConfig . | indent 2 }} +--- +apiVersion: v1 +kind: Secret +metadata: + name: {{ include "common.fullname" . }}-aaf-pem-keys + namespace: {{ include "common.namespace" . }} +type: Opaque +data: +{{ tpl (.Files.Glob "resources/certs/*").AsSecrets . | indent 2 }} diff --git a/kubernetes/clamp/charts/clamp-dash-kibana/templates/deployment.yaml b/kubernetes/clamp/charts/clamp-dash-kibana/templates/deployment.yaml index d29148fe71..31752fc661 100644 --- a/kubernetes/clamp/charts/clamp-dash-kibana/templates/deployment.yaml +++ b/kubernetes/clamp/charts/clamp-dash-kibana/templates/deployment.yaml @@ -75,6 +75,8 @@ spec: - mountPath: /usr/share/kibana/config/kibana.yml name: {{ include "common.fullname" . }} subPath: kibana.yml + - name: {{ include "common.fullname" . }}-aaf-pem-certs + mountPath: /usr/share/kibana/config/keystore/ resources: {{ include "common.resources" . | indent 12 }} {{- if .Values.nodeSelector }} @@ -95,5 +97,8 @@ spec: items: - key: kibana.yml path: kibana.yml + - name: {{ include "common.fullname" . }}-aaf-pem-certs + secret: + secretName: {{ include "common.fullname" . }}-aaf-pem-keys imagePullSecrets: - name: "{{ include "common.namespace" . }}-docker-registry-key" -- cgit 1.2.3-korg