Skip to content

Instantly share code, notes, and snippets.

@jcantrill
Created October 17, 2017 16:10
Show Gist options
  • Save jcantrill/7082f9d0d74586a4483c4ac7a6303bdf to your computer and use it in GitHub Desktop.
Save jcantrill/7082f9d0d74586a4483c4ac7a6303bdf to your computer and use it in GitHub Desktop.
apiVersion: v1
data:
elasticsearch.yml: "cluster:\n name: ${CLUSTER_NAME}\n\nscript:\n inline: on\n
\ indexed: on\n\nindex:\n number_of_shards: \n number_of_replicas: \n unassigned.node_left.delayed_timeout:
2m\n translog:\n flush_threshold_size: 256mb\n flush_threshold_period:
5m\n\nnode:\n name: ${DC_NAME}\n master: ${IS_MASTER}\n data: ${HAS_DATA}\n
\ max_local_storage_nodes: 1\n\nnetwork:\n host: 0.0.0.0\n\ncloud:\n kubernetes:\n
\ pod_label: ${POD_LABEL}\n pod_port: 9300\n namespace: ${NAMESPACE}\n\ndiscovery:\n
\ type: kubernetes\n zen.ping.multicast.enabled: false\n zen.minimum_master_nodes:
${NODE_QUORUM}\n\ngateway:\n recover_after_nodes: ${NODE_QUORUM}\n expected_nodes:
${RECOVER_EXPECTED_NODES}\n recover_after_time: ${RECOVER_AFTER_TIME}\n\nio.fabric8.elasticsearch.authentication.users:
[\"system.logging.kibana\", \"system.logging.fluentd\", \"system.logging.curator\",
\"system.admin\"]\nio.fabric8.elasticsearch.kibana.mapping.app: /usr/share/elasticsearch/index_patterns/com.redhat.viaq-openshift.index-pattern.json\nio.fabric8.elasticsearch.kibana.mapping.ops:
/usr/share/elasticsearch/index_patterns/com.redhat.viaq-openshift.index-pattern.json\nio.fabric8.elasticsearch.kibana.mapping.empty:
/usr/share/elasticsearch/index_patterns/com.redhat.viaq-openshift.index-pattern.json\n\nopenshift.config:\n
\ use_common_data_model: true\n project_index_prefix: \"project\"\n time_field_name:
\"@timestamp\"\n\nopenshift.searchguard:\n keystore.path: /etc/elasticsearch/secret/admin.jks\n
\ truststore.path: /etc/elasticsearch/secret/searchguard.truststore\n\nopenshift.operations.allow_cluster_reader:
false\n\nopenshift.kibana.index.mode: unique\n\npath:\n data: /elasticsearch/persistent/${CLUSTER_NAME}/data\n
\ logs: /elasticsearch/${CLUSTER_NAME}/logs\n work: /elasticsearch/${CLUSTER_NAME}/work\n
\ scripts: /elasticsearch/${CLUSTER_NAME}/scripts\n\nsearchguard:\n authcz.admin_dn:\n
\ - CN=system.admin,OU=OpenShift,O=Logging\n config_index_name: \".searchguard.${DC_NAME}\"\n
\ ssl:\n transport:\n enabled: true\n enforce_hostname_verification:
false\n keystore_type: JKS\n keystore_filepath: /etc/elasticsearch/secret/searchguard.key\n
\ keystore_password: kspass\n truststore_type: JKS\n truststore_filepath:
/etc/elasticsearch/secret/searchguard.truststore\n truststore_password: tspass\n
\ http:\n enabled: true\n keystore_type: JKS\n keystore_filepath:
/etc/elasticsearch/secret/key\n keystore_password: kspass\n clientauth_mode:
OPTIONAL\n truststore_type: JKS\n truststore_filepath: /etc/elasticsearch/secret/truststore\n
\ truststore_password: tspass\n"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment