bigelastic.yaml

gistfile1.txt

kind: List
apiVersion: v1
items:
- apiVersion: v1
  kind: ServiceAccount
  metadata:
    name: kibana
    annotations:
      serviceaccounts.openshift.io/oauth-redirectreference.primary: '{"kind":"OAuthRedirectReference","apiVersion":"v1","reference":{"kind":"Route","name":"kibana"}}'

- apiVersion: v1
  kind: Route
  metadata:
    name: kibana
  spec:
    to:
      name: kibana
    tls:
      termination: Reencrypt

- apiVersion: v1
  kind: Service
  metadata:
    name: kibana
    annotations:
      service.alpha.openshift.io/serving-cert-secret-name: kibana-tls
  spec:
    ports:
    - name: kibana
      port: 443
      targetPort: 8443
    selector:
      app: kibana

- apiVersion: v1
  kind: ServiceAccount
  metadata:
    name: elasticsearch

- apiVersion: v1
  kind: Service
  metadata:
    name: elasticsearch
  spec:
    ports:
    - name: elasticsearch
      port: 9200
      targetPort: 9200
    - name: discovery
      port: 9300
      targetPort: 9300
    selector:
      app: elasticsearch

- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    name: elasticsearch
  spec:
    serviceName: elasticsearch
    selector:
      matchLabels:
        app: elasticsearch
    replicas: 1
    template:
      metadata:
        labels:
          app: elasticsearch
      spec:
        containers:
        - args:
            - bin/elasticsearch
            - -Ediscovery.zen.ping.unicast.hosts=elasticsearch
          image: docker.elastic.co/elasticsearch/elasticsearch:6.2.3
          imagePullPolicy: IfNotPresent
          name: elasticsearch
          ports:
            - containerPort: 9200
              protocol: TCP
            - containerPort: 9300
              protocol: TCP
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /_cat/health
              port: 9200
              scheme: HTTP
            initialDelaySeconds: 5
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          volumeMounts:
            - mountPath: /usr/share/elasticsearch/data
              name: elastic-datavol
        dnsPolicy: ClusterFirst
        restartPolicy: Always
    volumeClaimTemplates:
    - metadata:
        name: elastic-datavol
      spec:
        accessModes: [ "ReadWriteOnce" ]
        resources:
          requests:
            storage: 10Gi

- apiVersion: extensions/v1beta1
  kind: Deployment
  metadata:
    name: kibana
  spec:
    replicas: 1
    selector:
      matchLabels:
        app: kibana
    template:
      metadata:
        labels:
          app: kibana
      spec:
        serviceAccountName: kibana
        containers:
        - name: oauth-proxy
          image: openshift/oauth-proxy
          imagePullPolicy: Always
          ports:
            - containerPort: 8443
              name: public
          args:
          - --https-address=:8443
          - --provider=openshift
          - --openshift-service-account=kibana
          - --upstream=http://localhost:5601
          - --tls-cert=/etc/tls/private/tls.crt
          - --tls-key=/etc/tls/private/tls.key
          - --cookie-secret=SECRET
          volumeMounts:
            - mountPath: /etc/tls/private
              name: kibana-tls
        - name: kibana
          env:
            - name: ELASTICSEARCH_URL
              value: 'http://elasticsearch:9200'
          image: >-
            docker.elastic.co/kibana/kibana:6.2.3
          imagePullPolicy: Always
          ports:
            - containerPort: 5601
              protocol: TCP
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /
              port: 5601
              scheme: HTTP
            initialDelaySeconds: 5
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
        volumes:
          - name: kibana-tls
            secret:
              secretName: kibana-tls