Skip to content
This repository has been archived by the owner on May 16, 2023. It is now read-only.

Fixup security install docs #205

Merged
merged 6 commits into from
Jul 17, 2019
Merged

Fixup security install docs #205

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
dbe09b1
[kibana] Fixup security install docs
Crazybus Jul 5, 2019
662171e
Update Kibana and Elasticsearch security examples to be generated
Crazybus Jul 8, 2019
dd84f33
Mount docker socket into testing container
Crazybus Jul 8, 2019
cb718a9
Don't mount in the current directory when generating certs
Crazybus Jul 8, 2019
d004692
Use generated encryption key for Kibana
Crazybus Jul 8, 2019
1a10ea1
Fixup the instructions for how to actual interact with the deployment
Crazybus Jul 11, 2019
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions elasticsearch/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -140,6 +140,9 @@ A cluster with node to node security and https enabled. This example uses autoge
```
cd examples/security
make

# Run a curl command to interact with the cluster
kubectl exec -ti security-master-0 -- sh -c 'curl -u $ELASTIC_USERNAME:$ELASTIC_PASSWORD -k https://localhost:9200/_cluster/health?pretty'
```

### FAQ
Expand Down
2 changes: 1 addition & 1 deletion elasticsearch/examples/security/Makefile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@ test: secrets install goss
secrets:
docker rm -f elastic-helm-charts-certs || true
rm -f elastic-certificates.p12 elastic-certificate.pem elastic-stack-ca.p12 || true
password=$$([ ! -z "$$ELASTIC_PASSWORD" ] && echo $$ELASTIC_PASSWORD || echo $$(docker run --rm docker.elastic.co/elasticsearch/elasticsearch:$(STACK_VERSION) /bin/sh -c "< /dev/urandom tr -dc _A-Z-a-z-0-9 | head -c20")) && \
password=$$([ ! -z "$$ELASTIC_PASSWORD" ] && echo $$ELASTIC_PASSWORD || echo $$(docker run --rm docker.elastic.co/elasticsearch/elasticsearch:$(STACK_VERSION) /bin/sh -c "< /dev/urandom tr -cd '[:alnum:]' | head -c20")) && \
docker run --name elastic-helm-charts-certs -i -w /app \
docker.elastic.co/elasticsearch/elasticsearch:$(STACK_VERSION) \
/bin/sh -c " \
Expand Down
12 changes: 10 additions & 2 deletions kibana/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -96,9 +96,17 @@ In [examples/](./examples) you will find some example configurations. These exam
```
* Setup a port forward and access Kibana at https://localhost:5601
```
# Setup the port forward
kubectl port-forward deployment/helm-kibana-security-kibana 5601

# Run this in a seperate terminal
# Get the auto generated password
kubectl get secret elastic-credentials -o jsonpath='{.data.password}' | base64 --decode
kubectl port-forward deployment/helm-kibana-default-kibana 5601
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

kubectl port-forward deployment/helm-kibana-default-kibana 5601 sir I have a question about that don't you mean by that :

kubectl port-forward deployment/helm-kibana**-security-**kibana 5601

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, that is exactly what is in the code. I think you are looking at the part of the diff that was deleted rather than the new line which was added below.

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

that's ok it wasn't updated at the time I looked at it. but still having problem with kibana UI

password=$(kubectl get secret elastic-credentials -o jsonpath='{.data.password}' | base64 --decode)
echo $password

# Test Kibana is working with curl or access it with your browser at https://localhost:5601
# The example certificate is self signed so you may see a warning about the certificate
curl -I -k -u elastic:$password https://localhost:5601/app/kibana
```

## Testing
Expand Down