Merge branch 'feature/issuer-change' into 'develop'

Feature/issuer change

See merge request !12

templates/elasticsearch.yaml

@@ -206,6 +206,15 @@ metadata:
 spec:
   selfSigned: {}
 ---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: issuer-reader
+rules:
+- apiGroups: ["cert-manager.io"]
+  resources: ["issuers"]
+  verbs: ["get", "list", "watch"]
+---
 apiVersion: cert-manager.io/v1
 kind: Certificate
 metadata:

templates/filebeat.yaml

@@ -110,6 +110,25 @@ data:
       count=$((count + 1))
     done
 ---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: filebeat
+  namespace: {{ .Release.Namespace }}
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: filebeat-issuer
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: issuer-reader
+subjects:
+- kind: ServiceAccount
+  name: filebeat
+  namespace: {{ .Release.Namespace }}
+---
 apiVersion: cert-manager.io/v1
 kind: Certificate
 metadata:
@@ -123,4 +142,7 @@ spec:
     - "{{ template "filebeat.dns" . }}"
   issuerRef:
     name: internal-issuer
-    kind: Issuer
\ No newline at end of file
+    kind: Issuer
+    group: cert-manager.io
+---
+