kubernetes/clamp/components/clamp-dash-kibana/resources/config/kibana.yml

   1 {{/*
   2 # Copyright © 2020  AT&T, Amdocs, Bell Canada Intellectual Property.  All rights reserved.
   3 #
   4 # Licensed under the Apache License, Version 2.0 (the "License");
   5 # you may not use this file except in compliance with the License.
   6 # You may obtain a copy of the License at
   7 #
   8 #       http://www.apache.org/licenses/LICENSE-2.0
   9 #
  10 # Unless required by applicable law or agreed to in writing, software
  11 # distributed under the License is distributed on an "AS IS" BASIS,
  12 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  13 # See the License for the specific language governing permissions and
  14 # limitations under the License.# Default Kibana configuration from kibana-docker.
  15 */}}
  16
  17 server.name: "Clamp CL Dashboard"
  18 server.host: "0"
  19 # Kibana is served by a back end server. This setting specifies the port to use.
  20 server.port: {{.Values.service.externalPort}}
  21
  22 server.ssl.enabled: {{.Values.config.sslEnabled}}
  23 {{- if .Values.global.aafEnabled }}
  24 server.ssl.certificate: {{ .Values.certInitializer.credsPath }}/{{ .Values.certInitializer.clamp_pem }}
  25 server.ssl.key: {{ .Values.certInitializer.credsPath }}/{{ .Values.certInitializer.clamp_key }}
  26 {{ else }}
  27 server.ssl.certificate: {{.Values.config.sslPemCertFilePath}}
  28 server.ssl.key: {{.Values.config.sslPemkeyFilePath}}
  29 {{- end }}
  30 # The URL of the Elasticsearch instance to use for all your queries.
  31 elasticsearch.hosts: ${elasticsearch_base_url}
  32
  33 elasticsearch.ssl.verificationMode: none
  34 elasticsearch.username: {{.Values.config.elasticUSR}}
  35 elasticsearch.password: {{.Values.config.elasticPWD}}
  36
  37 elasticsearch.requestHeadersWhitelist: ["securitytenant","Authorization"]
  38
  39 opendistro_security.multitenancy.enabled: true
  40 opendistro_security.multitenancy.tenants.preferred: ["Private", "Global"]
  41 opendistro_security.readonly_mode.roles: ["kibana_read_only"]