kubernetes configmap debug.md

Debug

Kubernetes deployment

apiVersion: apps/v1
kind: Deployment
metadata:
  annotations:
    deployment.kubernetes.io/revision: '18'
  creationTimestamp: '2018-07-23T15:50:34Z'
  generation: 29
  labels:
    k8s-app: metricbeat
  name: metricbeat
  namespace: kube-system
  resourceVersion: '20854352'
  selfLink: /apis/apps/v1/namespaces/kube-system/deployments/metricbeat
  uid: 229c9e3d-8e90-11e8-83f2-0050568c37dd
spec:
  progressDeadlineSeconds: 600
  replicas: 1
  revisionHistoryLimit: 2
  selector:
    matchLabels:
      k8s-app: metricbeat
  strategy:
    rollingUpdate:
      maxSurge: 25%
      maxUnavailable: 25%
    type: RollingUpdate
  template:
    metadata:
      creationTimestamp: null
      labels:
        k8s-app: metricbeat
    spec:
      containers:
        - args:
            - '-c'
            - /etc/metricbeat.yml
            - '-e'
          env:
            - name: ELASTICSEARCH_HOST
              value: ''
            - name: ELASTICSEARCH_PORT
              value: '9200'
            - name: ELASTICSEARCH_USERNAME
              value: 'username'
            - name: ELASTICSEARCH_PASSWORD
              value: 'password'
            - name: ELASTICSEARCH_CA_FILE
              value: /etc/elastic-stack-ca.cer
            - name: ELASTIC_CLOUD_ID
            - name: ELASTIC_CLOUD_AUTH
            - name: POD_NAMESPACE
              valueFrom:
                fieldRef:
                  apiVersion: v1
                  fieldPath: metadata.namespace
          image: 'docker.elastic.co/beats/metricbeat:6.3.1'
          imagePullPolicy: IfNotPresent
          name: metricbeat
          resources:
            limits:
              memory: 200Mi
            requests:
              cpu: 100m
              memory: 100Mi
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
            - mountPath: /etc/metricbeat.yml
              name: config
              readOnly: true
              subPath: metricbeat.yml
            - mountPath: /etc/elastic-stack-ca.cer
              name: cacert
              readOnly: true
              subPath: elastic-stack-ca.cer
            - mountPath: /usr/share/metricbeat/modules.d
              name: modules
              readOnly: true
      dnsPolicy: ClusterFirst
      restartPolicy: Always
      schedulerName: default-scheduler
      securityContext: {}
      serviceAccount: metricbeat
      serviceAccountName: metricbeat
      terminationGracePeriodSeconds: 30
      volumes:
        - configMap:
            defaultMode: 384
            name: metricbeat-config
          name: config
        - configMap:
            defaultMode: 384
            name: elastic-stack-ca-cer
          name: cacert
        - configMap:
            defaultMode: 384
            name: metricbeat-deployment-modules
          name: modules
status:
  availableReplicas: 1
  collisionCount: 1
  conditions:
    - lastTransitionTime: '2018-07-24T15:12:00Z'
      lastUpdateTime: '2018-07-24T15:12:00Z'
      message: Deployment has minimum availability.
      reason: MinimumReplicasAvailable
      status: 'True'
      type: Available
    - lastTransitionTime: '2018-07-23T15:50:34Z'
      lastUpdateTime: '2018-07-24T15:28:13Z'
      message: ReplicaSet "metricbeat-58566647c7" has successfully progressed.
      reason: NewReplicaSetAvailable
      status: 'True'
      type: Progressing
  observedGeneration: 29
  readyReplicas: 1
  replicas: 1
  updatedReplicas: 1

My configmap

apiVersion: v1
data:
  elastic-stack-ca-cer: |-
    Bag Attributes
        friendlyName: ca
        localKeyID: 
    subject=/CN=Elastic Certificate Tool Autogenerated CA
    issuer=/CN=Elastic Certificate Tool Autogenerated CA
    -----BEGIN CERTIFICATE-----

    -----END CERTIFICATE-----
kind: ConfigMap
metadata:
  creationTimestamp: '2018-07-23T18:11:20Z'
  labels:
    k8s-app: metricbeat
  name: elastic-stack-ca-cer
  namespace: kube-system
  resourceVersion: '20853228'
  selfLink: /api/v1/namespaces/kube-system/configmaps/elastic-stack-ca-cer
  uid: ccf86209-8ea3-11e8-83f2-0050568c37dd

Inside the container

bash-4.2# cat /etc/elastic-stack-ca.cer/
cat: /etc/elastic-stack-ca.cer/: Is a directory