Feature/secure connections

templates/kibana.yaml

@@ -8,6 +8,10 @@ spec:
   count: {{ .Values.kibana.count }}
   image: {{ .Values.kibana.image }}:{{ default .Values.elasticVersion   .Values.kibana.imageTag }}
   config:
+    server.ssl.enabled: true
+    server.ssl.certificate: /usr/share/kibana/config/certs/tls.crt
+    server.ssl.key: /usr/share/kibana/config/certs/tls.key
+    elasticsearch.ssl.certificateAuthorities: /usr/share/kibana/config/certs/ca.crt
     elasticsearch.requestTimeout: 120000
     elasticsearch.ssl.verificationMode: full
     server.publicBaseUrl: "{{ template "kibana.dns.fullPath" . }}"
@@ -38,19 +42,55 @@ spec:
             {{- toYaml . | nindent 12 }}
           {{- end }}
           volumeMounts:
+          - mountPath: /usr/share/kibana/config/elasticsearch-secrets-certs
+            name: secrets-certs  
           - name: es-certs
-            mountPath: /usr/share/kibana/config/certs         
+            mountPath: /usr/share/kibana/config/certs       
           readinessProbe:
             httpGet:
               scheme: HTTPS
               path: {{- with .Values.kibana.ingressSubpath }} {{ . }} {{- end }} 
               port: 5601
       volumes:
+      - name: secrets-certs
+        projected:
+          sources:
+          - secret:
+               name: {{ .Release.Name }}-kibana-cert-secret
       - name: es-certs
         secret:
           secretName: elastic-elasticsearch-http-cert-secret-internal
+  http:
+    tls:
+      certificate:
+        secretName: {{ .Release.Name }}-kibana-cert-secret
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: {{ .Release.Name }}-kibana-dashboard
+  annotations:
+    kubernetes.io/ingress.class: nginx
+    nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
+    acme.cert-manager.io/http01-edit-in-place: "true"
+    cert-manager.io/cluster-issuer: dev-staging
+spec:
+  tls:
+  - hosts:
+      - {{ template "kibana.dns" . }}
+    secretName: {{ .Release.Name }}-kibana-cert-secret
+  rules:
+    - host: {{ template "kibana.dns" . }}
+      http:
+        paths:
+          - path: {{ default "/" .Values.kibana.ingressSubpath }}
+            pathType: Prefix
+            backend: 
+              service:
+                name:  {{ .Release.Name }}-kibana-kb-http
+                port:
+                  number: 5601
 ---
-
 
 
 {{- end }}