client.yaml 1.5 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950
  1. ---
  2. clusterName: "multi"
  3. nodeGroup: "client"
  4. extraEnvs:
  5. - name: ELASTIC_PASSWORD
  6. valueFrom:
  7. secretKeyRef:
  8. name: multi-master-credentials
  9. key: password
  10. - name: xpack.security.enabled
  11. value: "true"
  12. - name: xpack.security.transport.ssl.enabled
  13. value: "true"
  14. - name: xpack.security.http.ssl.enabled
  15. value: "true"
  16. - name: xpack.security.transport.ssl.verification_mode
  17. value: "certificate"
  18. - name: xpack.security.transport.ssl.key
  19. value: "/usr/share/elasticsearch/config/certs/tls.key"
  20. - name: xpack.security.transport.ssl.certificate
  21. value: "/usr/share/elasticsearch/config/certs/tls.crt"
  22. - name: xpack.security.transport.ssl.certificate_authorities
  23. value: "/usr/share/elasticsearch/config/certs/ca.crt"
  24. - name: xpack.security.http.ssl.key
  25. value: "/usr/share/elasticsearch/config/certs/tls.key"
  26. - name: xpack.security.http.ssl.certificate
  27. value: "/usr/share/elasticsearch/config/certs/tls.crt"
  28. - name: xpack.security.http.ssl.certificate_authorities
  29. value: "/usr/share/elasticsearch/config/certs/ca.crt"
  30. roles: []
  31. persistence:
  32. enabled: false
  33. # For client nodes, we also need to add an empty node.roles in elasticsearch.yml
  34. # This is due to https://github.com/elastic/helm-charts/pull/1186#discussion_r631225687
  35. esConfig:
  36. elasticsearch.yml: |
  37. node.roles: []
  38. secret:
  39. enabled: false
  40. createCert: false
  41. secretMounts:
  42. - name: elastic-certificates
  43. secretName: multi-master-certs
  44. path: /usr/share/elasticsearch/config/certs