adjusting logstash to connect to elasticsearch using https

Author: framsouza

Diff for: logstash/templates/statefulset.yaml

@@ -180,6 +180,10 @@ spec:
         env:
           - name: LS_JAVA_OPTS
             value: "{{ .Values.logstashJavaOpts }}"
+          - name: xpack.http.ssl.truststore.path
+            value: /usr/share/logstash/config/certs/tls.crt
+          - name: xpack.http.ssl.verification_mode
+            value: "certificate"
 {{- if .Values.extraEnvs }}
 {{ toYaml .Values.extraEnvs | indent 10 }}
 {{- end }}

Diff for: logstash/values.yaml

@@ -15,7 +15,18 @@ logstashConfig: {}
 
 # Allows you to add any pipeline files in /usr/share/logstash/pipeline/
 ### ***warn*** there is a hardcoded logstash.conf in the image, override it first
-logstashPipeline: {}
+logstashPipeline:  
+  logstash.conf: |
+    input { exec { command => "uptime" interval => 30 } }
+    output {
+      elasticsearch {
+        hosts => ["https://elasticsearch-master:9200"]
+        cacert => '/usr/share/logstash/config/certs/ca.crt'
+        user => '${ELASTICSEARCH_USERNAME}'
+        password => '${ELASTICSEARCH_PASSWORD}'
+        index => "logstash"
+      }
+    }
 #  logstash.conf: |
 #    input {
 #      exec {
@@ -34,7 +45,17 @@ logstashPattern: {}
 # Extra environment variables to append to this nodeGroup
 # This will be appended to the current 'env:' key. You can use any of the kubernetes env
 # syntax here
-extraEnvs: []
+extraEnvs: 
+  - name: "ELASTICSEARCH_USERNAME"
+    valueFrom:
+      secretKeyRef:
+        name: elasticsearch-master-credentials
+        key: username
+  - name: "ELASTICSEARCH_PASSWORD"
+    valueFrom:
+      secretKeyRef:
+        name: elasticsearch-master-credentials
+        key: password
 #  - name: MY_ENVIRONMENT_VAR
 #    value: the_value_goes_here
 
@@ -62,7 +83,11 @@ secrets: []
 #      cert.key.filepath: "secrets.crt" # The path to file should be relative to the `values.yaml` file.
 
 # A list of secrets and their paths to mount inside the pod
-secretMounts: []
+secretMounts: 
+  - name: elasticsearch-master-certs
+    secretName: elasticsearch-master-certs
+    path: /usr/share/logstash/config/certs
+
 
 hostAliases: []
 #- ip: "127.0.0.1"