secure conn logstash fix

templates/elasticsearch.yaml

@@ -16,6 +16,10 @@ spec:
     count: {{ .count}}
     config: 
       xpack.security.authc.token.enabled: true
+      http.cors.enabled : true
+      http.cors.allow-origin : "*"
+      http.cors.allow-methods : OPTIONS, HEAD, GET, POST, PUT, DELETE
+      http.cors.allow-headers: "kbn-version, Origin, X-Requested-With, Content-Type, Accept, Engaged-Auth-Token"
     volumeClaimTemplates:
       - metadata:
           name: elasticsearch-data 

templates/logstash_beats.yaml

@@ -55,8 +55,10 @@ spec:
           mountPath: /app/elastic/logstash/config/pipelines/{{- .name -}}.config
           subPath: {{ .name -}}.config
         {{- end }}
-        - name: es-certs
+        - name: logstash-certs
           mountPath: /usr/share/logstash/certs-logstash
+        - name: es-certs
+          mountPath: /usr/share/logstash/certs
         env:
           - name: LOGSTASH_USER
             valueFrom:
@@ -79,9 +81,12 @@ spec:
           name: logstash-{{- $.Values.logstash.beats.pipelines_group_name -}}-{{- .name -}}-config
           defaultMode: 511
       {{- end }}
-      - name: es-certs
+      - name: logstash-certs
         secret:
           secretName: logstash-beats-ls-http-certs-public
+      - name: es-certs
+        secret:
+          secretName: elastic-elasticsearch-http-cert-secret
   pipelinesRef:
     secretName: logstash-{{ .Values.logstash.beats.pipelines_group_name }}-pipelines-yml
 ---

values/dev/observability/values.yaml

@@ -148,7 +148,7 @@ logstash:
             password => "${LOGSTASH_PASSWORD}"
             ssl_enabled => "true"
             ssl_verification_mode => "full"
-            ssl_certificate_authorities =>  "${ELASTIC_ELASTICSEARCH_ES_SSL_CERTIFICATE_AUTHORITY}"
+            ssl_certificate_authorities =>  "/mnt/elastic-internal/elasticsearch-association/observability/elastic-elasticsearch/certs/ca.crt"
             data_stream => "true"
             data_stream_type => "logs"
             data_stream_dataset => "filebeat"