Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat/106 elk certs #109

Merged
merged 6 commits into from
Jan 31, 2025
Merged

feat/106 elk certs #109

merged 6 commits into from
Jan 31, 2025

Conversation

joshgamache
Copy link
Contributor

@joshgamache joshgamache commented Jan 30, 2025

Addresses #106. Adds TLS certificates for inter-pod communication in the ELK stack.

Changes 🚧

  • Manually generated and added an internal Certificate Authority (per Elastic documents).
    • Added readme directions to reproduce.
    • Added generation of certificates from CA on pod launch.
  • Connected certificates to Elastic and Kibana pods.
  • Refactored some config into config maps

Notes 📝

  • The process to add the Kibana (internal) certificate is currently manual, as Kibana doesn't contain the same tools as Elastic containers did to generate certificates.
  • The route for Kibana is currently not reachable, as with security enabled it needs an externally signed certificate to be useful. You can still reach the pod with oc port-forward.

With approval of this and #100, we should deploy the stack to be available to ingest log data. Kibana is still accessible, albeit with a few more steps, so we can still review logs as needed.

@joshgamache joshgamache self-assigned this Jan 30, 2025
@joshgamache joshgamache changed the title Feat/106 elk certs feat/106 elk certs Jan 30, 2025
Copy link
Contributor

@pbastia pbastia left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice! This looks sound to me

Base automatically changed from feat/100-efk-ggircs to master January 31, 2025 17:46

Verified

This commit was signed with the committer’s verified signature.
joshgamache Josh Gamache

Verified

This commit was signed with the committer’s verified signature.
joshgamache Josh Gamache

Verified

This commit was signed with the committer’s verified signature.
joshgamache Josh Gamache

Verified

This commit was signed with the committer’s verified signature.
joshgamache Josh Gamache

Verified

This commit was signed with the committer’s verified signature.
joshgamache Josh Gamache

Verified

This commit was signed with the committer’s verified signature.
joshgamache Josh Gamache
@joshgamache joshgamache merged commit d25f6e6 into master Jan 31, 2025
2 checks passed
@joshgamache joshgamache deleted the feat/106-elk-certs branch January 31, 2025 17:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants