gistfile1.txt

---
clusterName: "logsys"
nodeGroup: "ingest"

masterService: "logsys-master"

roles:
  master: "false"
  ingest: "true"
  data: "false"
  remote_cluster_client: "false"
  ml: "false"

replicas: 4 
minimumMasterNodes: 2

esMajorVersion: ""

esConfig: 
  elasticsearch.yml: |
    xpack.security.enabled: true
    xpack.security.transport.ssl.enabled: true
    xpack.security.transport.ssl.verification_mode: certificate
    xpack.security.transport.ssl.keystore.path: /usr/share/elasticsearch/config/certs/elastic-certificates.p12
    xpack.security.transport.ssl.truststore.path: /usr/share/elasticsearch/config/certs/elastic-certificates.p12
    xpack.security.http.ssl.enabled: true
    xpack.security.http.ssl.truststore.path: /usr/share/elasticsearch/config/certs/elastic-certificates.p12
    xpack.security.http.ssl.keystore.path: /usr/share/elasticsearch/config/certs/elastic-certificates.p12
    xpack.monitoring.collection.enabled: true
    path.repo: ["/nfs"]

extraEnvs:
  - name: ELASTIC_PASSWORD
    valueFrom:
      secretKeyRef:
        name: elastic-credentials
        key: password
  - name: ELASTIC_USERNAME
    valueFrom:
      secretKeyRef:
        name: elastic-credentials
        key: username

secretMounts:
  - name: elastic-certificates
    secretName: elastic-certificates
    path: /usr/share/elasticsearch/config/certs

#esJavaOpts: "-Xmx2g -Xms2g"

resources:
  requests:
    cpu: "500m"
    memory: "2Gi"
  limits:
    cpu: "2"
    memory: "4Gi"

persistence:
  enabled: false

extraVolumes:
  - name: nfs
    hostPath:
      path: /mnt/nfs/logsys
      type: DirectoryOrCreate

extraVolumeMounts:
  - name: nfs
    mountPath: /nfs
    readOnly: false

protocol: https

clusterHealthCheckParams: "wait_for_status=yellow&timeout=300s"

ingress:
  enabled: true
  annotations: 
    kubernetes.io/ingress.class: nginx
    nginx.ingress.kubernetes.io/proxy-ssl-verify: "false"
    nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
  hosts:
    - host: elastic-ingest.mydomain.com
      paths:
        - path: /
  tls: 
    - secretName: elastic-ingest-tls
      hosts:
        - elastic-ingest.mydomain.com