diff options
| author |   osgn422w <gervais-martial.ngueko@intl.att.com> | 2019-07-17 16:17:13 +0200 |
|---|---|---|
| committer | osgn422w <gervais-martial.ngueko@intl.att.com> | 2019-07-17 16:24:58 +0200 |
| commit | 0ce11eaeca48930d0203545a5e4206349a11f01b (patch) | |
| tree | bbe5b1c792043fd2dafded1bcdb12449752bd995 /src/main/docker/elasticsearch/config/elasticsearch.yml | |
| parent | 493c3839fb6807512218165fd8a3a6efe1933fb9 (diff) | |
add searchguard
add authentication to elk with searchguard
Issue-ID: CLAMP-419
Change-Id: I66bca485750e3377db10f6f43efb7f741a42c17d
Signed-off-by: osgn422w <gervais-martial.ngueko@intl.att.com>
Diffstat (limited to 'src/main/docker/elasticsearch/config/elasticsearch.yml')
| -rw-r--r-- | src/main/docker/elasticsearch/config/elasticsearch.yml | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/src/main/docker/elasticsearch/config/elasticsearch.yml b/src/main/docker/elasticsearch/config/elasticsearch.yml new file mode 100644 index 000000000..72ce137ab --- /dev/null +++ b/src/main/docker/elasticsearch/config/elasticsearch.yml @@ -0,0 +1,33 @@ +--- +## Default Elasticsearch configuration from elasticsearch-docker. +## from https://github.com/elastic/elasticsearch-docker/blob/master/.tedi/template/elasticsearch.yml +# +cluster.name: "docker-cluster" +network.host: 0.0.0.0 + +# minimum_master_nodes need to be explicitly set when bound on a public IP +# set to 1 to allow single node clusters +# Details: https://github.com/elastic/elasticsearch/pull/17288 +discovery.zen.minimum_master_nodes: 1 + +## Use single node discovery in order to disable production mode and avoid bootstrap checks +## see https://www.elastic.co/guide/en/elasticsearch/reference/current/bootstrap-checks.html +# +discovery.type: single-node + +## X-Pack settings +## see https://www.elastic.co/guide/en/elasticsearch/reference/current/setup-xpack.html +# +xpack.license.self_generated.type: basic +xpack.security.enabled: false + +## Search Guard +# +searchguard.enterprise_modules_enabled: false + +searchguard.ssl.transport.keystore_filepath: sg/node-0-keystore.jks +searchguard.ssl.transport.truststore_filepath: sg/truststore.jks +searchguard.ssl.transport.enforce_hostname_verification: false + +searchguard.authcz.admin_dn: + - "CN=kirk,OU=client,O=client,l=tEst,C=De" |