issuer changed

templates/elasticsearch.yaml

@@ -219,9 +219,9 @@ spec:
     kind: ClusterIssuer
 ---
 apiVersion: cert-manager.io/v1
-kind: ClusterIssuer
+kind: Issuer
 metadata:
-  name: internal-issuer-elk
+  name: internal-issuer
 spec:
   ca:
     secretName: internal-ca
@@ -240,5 +240,5 @@ spec:
     -  {{ .Release.Name }}-elasticsearch-es-http.{{  .Release.Namespace   }}
     -  {{ .Release.Name }}-elasticsearch-es-http.{{  .Release.Namespace   }}.svc
   issuerRef:
-    name: internal-issuer-elk
-    kind: ClusterIssuer
+    name: internal-issuer
+    kind: Issuer

templates/filebeat.yaml

@@ -113,6 +113,25 @@ data:
       count=$((count + 1))
     done
 ---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: filebeat
+  namespace: {{ .Release.Namespace }}
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: filebeat-issuer
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: issuer-reader
+subjects:
+- kind: ServiceAccount
+  name: filebeat
+  namespace: {{ .Release.Namespace }}
+---
 apiVersion: cert-manager.io/v1
 kind: Certificate
 metadata:
@@ -125,5 +144,8 @@ spec:
   dnsNames:
     - "{{ template "filebeat.dns" . }}"
   issuerRef:
-    name: internal-issuer-elk
-    kind: ClusterIssuer
+    name: internal-issuer
+    kind: Issuer
\ No newline at end of file
+    group: cert-manager.io
+---
+

templates/logstash_beats.yaml

@@ -179,8 +179,8 @@ spec:
     - "logstash.{{ .Release.Namespace }}" 
     - "logstash-{{ .Values.logstash.beats.pipelines_group_name }}-ls-api.{{ .Release.Namespace }}"
   issuerRef:
-    name: internal-issuer-elk
-    kind: ClusterIssuer
+    name: internal-issuer
+    kind: Issuer
   privateKey:
     encoding: "PKCS8" 
 ---
\ No newline at end of file