elasticsearch-kibana values.yaml¶
domain¶
Type: string
"dev.bigbang.mil"
Description: Domain used for BigBang created exposed services.
imagePullPolicy¶
Type: string
"IfNotPresent"
Description: Pull Policy for all non-init containers in this package.
kibana.image.repository¶
Type: string
"registry1.dso.mil/ironbank/elastic/kibana/kibana"
Description: Kibana image repository
kibana.image.tag¶
Type: string
"9.5.2"
Description: Kibana image tag
kibana.host¶
Type: string
""
Description: Kibana Ingress Host Value. Only required if not using Istio for ingress.
kibana.count¶
Type: int
3
Description: Number of Kibana replicas
kibana.serviceAccountName¶
Type: string
"logging-kibana"
Description: Name for serviceAccount to use, will be autocreated.
kibana.serviceAccountAnnotations¶
Type: object
{}
Description: Annotations for the kibana service account.
kibana.updateStrategy¶
Type: object
rollingUpdate:
maxUnavailable: 1
type: rollingUpdate
Description: Kibana updateStrategy
kibana.securityContext¶
Type: object
fsGroup: 1000
runAsGroup: 1000
runAsUser: 1000
Description: Set securityContext for Kibana pods
kibana.containersecurityContext.capabilities.drop[0]¶
Type: string
"ALL"
kibana.imagePullSecrets¶
Type: list
[]
Description: Kibana imagePullSecrets
kibana.resources¶
Type: object
limits:
cpu: 1
memory: 2Gi
requests:
cpu: 1
memory: 2Gi
Description: Kibana resources
kibana.volumes¶
Type: list
[]
Description: Kibana volumes
kibana.volumeMounts¶
Type: list
[]
Description: Kibana volumeMounts
kibana.podAnnotations¶
Type: object
{}
Description: Kibana podAnnotations
kibana.affinity¶
Type: object
{}
Description: Kibana affinity
kibana.tolerations¶
Type: list
[]
Description: Kibana tolerations
kibana.nodeSelector¶
Type: object
{}
Description: Kibana nodeSelector
kibana.lifecycle¶
Type: object
{}
Description: Kibana lifecycle
kibana.podDisruptionBudget¶
Type: object
enabled: false
spec: {}
Description: PodDisruptionBudget for Kibana pods. Creates a Helm-managed K8s PDB targeting all Kibana pods. Default applies maxUnavailable: 1. Provide spec with minAvailable or maxUnavailable to override (not both - Kubernetes rejects PDBs with both fields set).
kibana.config¶
Type: object
{}
Description: Additional Kibana configuration: Any key you put here must match the Kibana config file format: https://www.elastic.co/guide/en/kibana/current/settings.html Values here are deep-merged into the chart’s defaults in _kibana-config.tpl, so your custom config takes precedence If left empty ({}), the chart will apply its defaults in _kibana-config.tpl.
kibana.agents¶
Type: object
{}
Description: Kibana Elastic Agent / Fleet Server configuration https://www.elastic.co/guide/en/cloud-on-k8s/2.7/k8s-elastic-agent-fleet-quickstart.html Supports both list format (original) and map format (new). Map keys become: ‘name’ for packages, ‘id’ for agentPolicies, ‘id’+’name’ for package_policies. Maps are sorted alphabetically by key for deterministic output.
elasticsearch.image.repository¶
Type: string
"registry1.dso.mil/ironbank/elastic/elasticsearch/elasticsearch"
Description: Elasticsearch image repository
elasticsearch.image.tag¶
Type: string
"9.5.2"
Description: Elasticsearch image tag
elasticsearch.imagePullSecrets¶
Type: list
[]
Description: Elasticsearch imagePullSecrets
elasticsearch.serviceAccountName¶
Type: string
"logging-elasticsearch"
Description: Name for serviceAccount to use, will be autocreated.
elasticsearch.serviceAccountAnnotations¶
Type: object
{}
Description: Annotations for the elasticsearch service account.
elasticsearch.clusterPodDisruptionBudget¶
Type: object
enabled: true
spec: {}
Description: Cluster-wide PodDisruptionBudget managed by ECK. Covers all nodeSets together. When spec is empty (default), ECK generates its own PDB with a proper pod selector. When spec is non-empty, the chart injects the cluster-name selector automatically; only integer minAvailable is supported (maxUnavailable spans multiple StatefulSets and is reserved for per-nodeSet PDBs). Mutually exclusive with per-nodeSet podDisruptionBudget blocks below - set this to enabled: false when using those. https://www.elastic.co/guide/en/cloud-on-k8s/current/k8s-pod-disruption-budget.html
elasticsearch.secureSettings¶
Type: list
[]
Description: List of Kubernetes secrets to load into the Elasticsearch keystore via ECK secureSettings. Applies to all nodeSets (ECK spec-level). The SSO secret is automatically prepended when sso.enabled is true. See: https://www.elastic.co/guide/en/cloud-on-k8s/current/k8s-es-secure-settings.html
elasticsearch.common¶
Type: object
config: {}
initContainers: []
readinessProbe: {}
Description: Shared settings applied to every Elasticsearch nodeSet (master, data, ingest, ml, coord).
elasticsearch.common.initContainers¶
Type: list
[]
Description: Init containers prepended before any per-nodeSet initContainers.
elasticsearch.common.config¶
Type: object
{}
Description: Configuration baseline merged into every nodeSet’s config. Per-nodeSet config values take precedence (e.g., node.roles).
elasticsearch.common.readinessProbe¶
Type: object
{}
Description: Readiness probe applied to every nodeSet. Empty by default (operator default applies). Set to override the ECK operator default (exec + nc/ncat) with a native kubelet probe. Per-nodeSet readinessProbe takes precedence if defined. Example: readinessProbe: tcpSocket: port: 8080 initialDelaySeconds: 10 periodSeconds: 5 timeoutSeconds: 5 failureThreshold: 3
elasticsearch.master.initContainers¶
Type: list
[]
Description: Add init containers to master pods
elasticsearch.master.config¶
Type: object
index.store.type: mmapfs
node.roles:
- master
node.store.allow_mmap: true
xpack.ml.enabled: false
xpack.security.authc.token.enabled: true
Description: Add configs to Master nodes
elasticsearch.master.securityContext¶
Type: object
fsGroup: 1000
runAsGroup: 1000
runAsUser: 1000
Description: Set securityContext for elasticsearch master node sets
elasticsearch.master.containersecurityContext.capabilities.drop[0]¶
Type: string
"ALL"
elasticsearch.master.updateStrategy¶
Type: object
rollingUpdate:
maxUnavailable: 1
type: rollingUpdate
Description: Elasticsearch master updateStrategy
elasticsearch.master.volumes¶
Type: list
[]
Description: Elasticsearch master volumes
elasticsearch.master.volumeMounts¶
Type: list
[]
Description: Elasticsearch master volumeMounts
elasticsearch.master.podAnnotations¶
Type: object
{}
Description: Elasticsearch master podAnnotations
elasticsearch.master.affinity¶
Type: object
{}
Description: Elasticsearch master affinity
elasticsearch.master.tolerations¶
Type: list
[]
Description: Elasticsearch master tolerations
elasticsearch.master.nodeSelector¶
Type: object
{}
Description: Elasticsearch master nodeSelector
elasticsearch.master.lifecycle¶
Type: object
{}
Description: Elasticsearch master lifecycle
elasticsearch.master.count¶
Type: int
3
Description: Elasticsearch master pod count
elasticsearch.master.persistence.storageClassName¶
Type: string
""
Description: Elasticsearch master persistence storageClassName
elasticsearch.master.persistence.size¶
Type: string
"5Gi"
Description: Elasticsearch master persistence size
elasticsearch.master.resources¶
Type: object
limits:
cpu: 1
memory: 4Gi
requests:
cpu: 1
memory: 4Gi
Description: Elasticsearch master pod resources
elasticsearch.master.heap.min¶
Type: string
"2g"
Description: Elasticsearch master Java heap Xms setting
elasticsearch.master.heap.max¶
Type: string
"2g"
Description: Elasticsearch master Java heap Xmx setting
elasticsearch.master.podDisruptionBudget¶
Type: object
enabled: false
spec: {}
Description: Per-nodeSet PodDisruptionBudget for master nodes. When enabled, creates a Helm-managed K8s PDB targeting only master pods. Mutually exclusive with elasticsearch.clusterPodDisruptionBudget; set clusterPodDisruptionBudget.enabled: false when using per-nodeSet PDBs. Default applies maxUnavailable: 1. Provide spec with minAvailable or maxUnavailable to override (not both - Kubernetes rejects PDBs with both fields set).
elasticsearch.data.initContainers¶
Type: list
[]
Description: Add init containers to data pods
elasticsearch.data.config¶
Type: object
index.store.type: mmapfs
node.roles:
- data
- ingest
node.store.allow_mmap: true
xpack.ml.enabled: false
xpack.security.authc.token.enabled: true
Description: Add configs to Data nodes
elasticsearch.data.securityContext¶
Type: object
fsGroup: 1000
runAsGroup: 1000
runAsUser: 1000
Description: Set securityContext for elasticsearch data node sets
elasticsearch.data.containersecurityContext.capabilities.drop[0]¶
Type: string
"ALL"
elasticsearch.data.volumes¶
Type: list
[]
Description: Elasticsearch data volumes
elasticsearch.data.volumeMounts¶
Type: list
[]
Description: Elasticsearch data volumeMounts
elasticsearch.data.podAnnotations¶
Type: object
{}
Description: Elasticsearch data podAnnotations
elasticsearch.data.affinity¶
Type: object
{}
Description: Elasticsearch data affinity
elasticsearch.data.tolerations¶
Type: list
[]
Description: Elasticsearch data tolerations
elasticsearch.data.nodeSelector¶
Type: object
{}
Description: Elasticsearch data nodeSelector
elasticsearch.data.lifecycle¶
Type: object
{}
Description: Elasticsearch data lifecycle
elasticsearch.data.count¶
Type: int
4
Description: Elasticsearch data pod count
elasticsearch.data.persistence.storageClassName¶
Type: string
""
Description: Elasticsearch data persistence storageClassName
elasticsearch.data.persistence.size¶
Type: string
"100Gi"
Description: Elasticsearch data persistence size
elasticsearch.data.resources¶
Type: object
limits:
cpu: 1
memory: 4Gi
requests:
cpu: 1
memory: 4Gi
Description: Elasticsearch data pod resources
elasticsearch.data.heap.min¶
Type: string
"2g"
Description: Elasticsearch data Java heap Xms setting
elasticsearch.data.heap.max¶
Type: string
"2g"
Description: Elasticsearch data Java heap Xmx setting
elasticsearch.data.podDisruptionBudget¶
Type: object
enabled: false
spec: {}
Description: Per-nodeSet PodDisruptionBudget for data nodes. When enabled, creates a Helm-managed K8s PDB targeting only data pods. Mutually exclusive with elasticsearch.clusterPodDisruptionBudget; set clusterPodDisruptionBudget.enabled: false when using per-nodeSet PDBs. Default applies maxUnavailable: 1. Provide spec with minAvailable or maxUnavailable to override (not both - Kubernetes rejects PDBs with both fields set).
elasticsearch.ingest.enabled¶
Type: bool
false
Description: Enable ingest specific Elasticsearch pods
elasticsearch.ingest.initContainers¶
Type: list
[]
Description: initContainers
elasticsearch.ingest.config¶
Type: object
index.store.type: mmapfs
node.roles:
- ingest
node.store.allow_mmap: true
xpack.ml.enabled: false
xpack.security.authc.token.enabled: true
Description: Add configs to Ingest Nodes
elasticsearch.ingest.securityContext¶
Type: object
fsGroup: 1000
runAsGroup: 1000
runAsUser: 1000
Description: Set securityContext for elasticsearch ingest node sets
elasticsearch.ingest.containersecurityContext.capabilities.drop[0]¶
Type: string
"ALL"
elasticsearch.ingest.volumes¶
Type: list
[]
Description: volumes
elasticsearch.ingest.volumeMounts¶
Type: list
[]
Description: volumeMounts
elasticsearch.ingest.podAnnotations¶
Type: object
{}
Description: podAnnotations
elasticsearch.ingest.affinity¶
Type: object
{}
Description: affinity
elasticsearch.ingest.tolerations¶
Type: list
[]
Description: tolerations
elasticsearch.ingest.nodeSelector¶
Type: object
{}
Description: nodeSelector
elasticsearch.ingest.lifecycle¶
Type: object
{}
Description: lifecycle
elasticsearch.ingest.count¶
Type: int
1
Description: count
elasticsearch.ingest.persistence.storageClassName¶
Type: string
""
Description: storageClassName
elasticsearch.ingest.persistence.size¶
Type: string
"100Gi"
Description: size
elasticsearch.ingest.resources¶
Type: object
limits:
cpu: 1
memory: 4Gi
requests:
cpu: 1
memory: 4Gi
Description: Elasticsearch ingest pod resources
elasticsearch.ingest.heap.min¶
Type: string
"2g"
Description: Xms
elasticsearch.ingest.heap.max¶
Type: string
"2g"
Description: Xmx
elasticsearch.ingest.podDisruptionBudget¶
Type: object
enabled: false
spec: {}
Description: Per-nodeSet PodDisruptionBudget for ingest nodes. When enabled, creates a Helm-managed K8s PDB targeting only ingest pods. Mutually exclusive with elasticsearch.clusterPodDisruptionBudget; set clusterPodDisruptionBudget.enabled: false when using per-nodeSet PDBs. Default applies maxUnavailable: 0 (safe for single-node ingest). Provide spec with minAvailable or maxUnavailable to override (not both - Kubernetes rejects PDBs with both fields set).
elasticsearch.ml.enabled¶
Type: bool
false
Description: Enable Machine Learning specific Elasticsearch pods If enabled to true then the xpack.ml.enabled should be true for master, data, ingest, ml, coordinating node config below
elasticsearch.ml.initContainers¶
Type: list
[]
Description: initContainers
elasticsearch.ml.config¶
Type: object
index.store.type: mmapfs
node.roles:
- ml
node.store.allow_mmap: true
xpack.ml.enabled: false
xpack.security.authc.token.enabled: true
Description: Add configs to ML Nodes
elasticsearch.ml.securityContext¶
Type: object
fsGroup: 1000
runAsGroup: 1000
runAsUser: 1000
Description: Set securityContext for elasticsearch ml node sets
elasticsearch.ml.containersecurityContext.capabilities.drop[0]¶
Type: string
"ALL"
elasticsearch.ml.updateStrategy¶
Type: object
rollingUpdate:
maxUnavailable: 1
type: rollingUpdate
Description: Elasticsearch ml updateStrategy
elasticsearch.ml.volumes¶
Type: list
[]
Description: volumes
elasticsearch.ml.volumeMounts¶
Type: list
[]
Description: volumeMounts
elasticsearch.ml.podAnnotations¶
Type: object
{}
Description: podAnnotations
elasticsearch.ml.affinity¶
Type: object
{}
Description: affinity
elasticsearch.ml.tolerations¶
Type: list
[]
Description: tolerations
elasticsearch.ml.nodeSelector¶
Type: object
{}
Description: nodeSelector
elasticsearch.ml.lifecycle¶
Type: object
{}
Description: lifecycle
elasticsearch.ml.count¶
Type: int
1
Description: count
elasticsearch.ml.persistence.storageClassName¶
Type: string
""
Description: storageClassName
elasticsearch.ml.persistence.size¶
Type: string
"100Gi"
Description: size
elasticsearch.ml.resources¶
Type: object
limits:
cpu: 1
memory: 4Gi
requests:
cpu: 1
memory: 4Gi
Description: Elasticsearch ml pod resources
elasticsearch.ml.heap.min¶
Type: string
"2g"
Description: Xms
elasticsearch.ml.heap.max¶
Type: string
"2g"
Description: Xmx
elasticsearch.ml.podDisruptionBudget¶
Type: object
enabled: false
spec: {}
Description: Per-nodeSet PodDisruptionBudget for ML nodes. When enabled, creates a Helm-managed K8s PDB targeting only ML pods. Mutually exclusive with elasticsearch.clusterPodDisruptionBudget; set clusterPodDisruptionBudget.enabled: false when using per-nodeSet PDBs. Default applies maxUnavailable: 0 (safe for single-node ML). Provide spec with minAvailable or maxUnavailable to override (not both - Kubernetes rejects PDBs with both fields set).
elasticsearch.coord.enabled¶
Type: bool
false
Description: Enable coordinating specific Elasticsearch pods
elasticsearch.coord.initContainers¶
Type: list
[]
Description: initContainers
elasticsearch.coord.config¶
Type: object
index.store.type: mmapfs
node.store.allow_mmap: true
xpack.ml.enabled: false
xpack.security.authc.token.enabled: true
Description: Add configs to Coordinating Nodes
elasticsearch.coord.securityContext¶
Type: object
fsGroup: 1000
runAsGroup: 1000
runAsUser: 1000
Description: Set securityContext for elasticsearch coordinating node sets
elasticsearch.coord.containersecurityContext.capabilities.drop[0]¶
Type: string
"ALL"
elasticsearch.coord.updateStrategy¶
Type: object
rollingUpdate:
maxUnavailable: 1
type: rollingUpdate
Description: Elasticsearch coord updateStrategy
elasticsearch.coord.volumes¶
Type: list
[]
Description: volumes
elasticsearch.coord.volumeMounts¶
Type: list
[]
Description: volumeMounts
elasticsearch.coord.podAnnotations¶
Type: object
{}
Description: podAnnotations
elasticsearch.coord.affinity¶
Type: object
{}
Description: affinity
elasticsearch.coord.tolerations¶
Type: list
[]
Description: tolerations
elasticsearch.coord.nodeSelector¶
Type: object
{}
Description: nodeSelector
elasticsearch.coord.lifecycle¶
Type: object
{}
Description: lifecycle
elasticsearch.coord.count¶
Type: int
1
Description: count
elasticsearch.coord.persistence.storageClassName¶
Type: string
""
Description: storageClassName
elasticsearch.coord.persistence.size¶
Type: string
"100Gi"
Description: size
elasticsearch.coord.resources¶
Type: object
limits:
cpu: 1
memory: 4Gi
requests:
cpu: 1
memory: 4Gi
Description: Elasticsearch coord pod resources
elasticsearch.coord.heap.min¶
Type: string
"2g"
Description: Xms
elasticsearch.coord.heap.max¶
Type: string
"2g"
Description: Xmx
elasticsearch.coord.podDisruptionBudget¶
Type: object
enabled: false
spec: {}
Description: Per-nodeSet PodDisruptionBudget for coordinating nodes. When enabled, creates a Helm-managed K8s PDB targeting only coordinating pods. Mutually exclusive with elasticsearch.clusterPodDisruptionBudget; set clusterPodDisruptionBudget.enabled: false when using per-nodeSet PDBs. Default applies maxUnavailable: 0 (safe for single-node coord). Provide spec with minAvailable or maxUnavailable to override (not both - Kubernetes rejects PDBs with both fields set).
istio.enabled¶
Type: bool
false
Description: Toggle istio interaction.
istio.prependReleaseName¶
Type: bool
true
Description: Prepends the release name to istio resources created by bb-common
istio.mtls¶
Type: object
mode: STRICT
Description: Default EK peer authentication
istio.mtls.mode¶
Type: string
"STRICT"
Description: STRICT = Allow only mutual TLS traffic, PERMISSIVE = Allow both plain text and mutual TLS traffic
istio.sidecar¶
Type: object
enabled: false
outboundTrafficPolicyMode: REGISTRY_ONLY
Description: Sidecar configuration
istio.serviceEntries¶
Type: object
custom: []
Description: Custom ServiceEntries for external services
istio.authorizationPolicies¶
Type: object
custom: []
enabled: false
generateFromNetpol: false
Description: Authorization Policies
routes.inbound.kibana.enabled¶
Type: bool
true
routes.inbound.kibana.gateways[0]¶
Type: string
"istio-gateway/public-ingressgateway"
routes.inbound.kibana.hosts[0]¶
Type: string
"kibana.{{ .Values.domain }}"
routes.inbound.kibana.service¶
Type: string
"{{ .Release.Name }}-kb-http"
routes.inbound.kibana.port¶
Type: int
5601
routes.inbound.kibana.selector.”common.k8s.elastic.co/type”¶
Type: string
"kibana"
routes.inbound.elasticsearch.enabled¶
Type: bool
false
routes.inbound.elasticsearch.gateways[0]¶
Type: string
"istio-gateway/public-ingressgateway"
routes.inbound.elasticsearch.hosts[0]¶
Type: string
"elasticsearch.{{ .Values.domain }}"
routes.inbound.elasticsearch.service¶
Type: string
"{{ .Release.Name }}-es-http"
routes.inbound.elasticsearch.port¶
Type: int
9200
routes.inbound.elasticsearch.selector.”common.k8s.elastic.co/type”¶
Type: string
"elasticsearch"
routes.outbound¶
Type: object
{}
sso.enabled¶
Type: bool
false
Description: Toggle SSO with Keycloak
sso.redirect_url¶
Type: string
""
Description: redirect_url defaults to .Values.istio.kibana.hosts[0] if not set.
sso.client_id¶
Type: string
"platform1_a8604cc9-f5e9-4656-802d-d05624370245_bb8-kibana"
Description: client_id
sso.client_secret¶
Type: string
""
Description: OIDC client secret, can be empty for public client.
sso.oidc.host¶
Type: string
"login.dso.mil"
Description: host
sso.oidc.realm¶
Type: string
"baby-yoda"
Description: realm
sso.issuer¶
Type: string
"https://{{ .Values.sso.oidc.host }}/auth/realms/{{ .Values.sso.oidc.realm }}"
Description: issuer
sso.auth_url¶
Type: string
"https://{{ .Values.sso.oidc.host }}/auth/realms/{{ .Values.sso.oidc.realm }}/protocol/openid-connect/auth"
Description: auth_url
sso.token_url¶
Type: string
"https://{{ .Values.sso.oidc.host }}/auth/realms/{{ .Values.sso.oidc.realm }}/protocol/openid-connect/token"
Description: token_url
sso.userinfo_url¶
Type: string
"https://{{ .Values.sso.oidc.host }}/auth/realms/{{ .Values.sso.oidc.realm }}/protocol/openid-connect/userinfo"
Description: userinfo_url
sso.jwkset_url¶
Type: string
"https://{{ .Values.sso.oidc.host }}/auth/realms/{{ .Values.sso.oidc.realm }}/protocol/openid-connect/certs"
Description: jwks_url
sso.claims_principal¶
Type: string
"preferred_username"
Description: claims_principal
sso.requested_scopes¶
Type: list
- openid
Description: requested_scopes
sso.signature_algorithm¶
Type: string
"RS256"
Description: signature_algorithm
sso.endsession_url¶
Type: string
"https://{{ .Values.sso.oidc.host }}/auth/realms/{{ .Values.sso.oidc.realm }}/protocol/openid-connect/logout"
Description: endsession_url
sso.claims_group¶
Type: string
"groups"
Description: claims_group
sso.claims_mail¶
Type: string
"email"
Description: claims_mail
sso.claims_principal_pattern¶
Type: string
""
Description: claims_principal_pattern
sso.cert_authorities¶
Type: list
[]
Description: cert_authorities
sso.login_label¶
Type: string
""
Description: login_label sets the text displayed on the Kibana login button for the primary OIDC provider
sso.additional_oidc¶
Type: object
{}
Description: additional_oidc is a MAP of additional OIDC providers keyed by realm name. Using a map allows non-secret config in plain values and client_secret in SOPS to merge automatically. Each provider appears as a separate login button on Kibana (oidc2, oidc3, etc.). Default requested_scopes: [“openid”, “profile”, “email”, “groups”]
kibanaBasicAuth.enabled¶
Type: bool
true
Description: Toggle this to turn off Kibana’s built in auth and only allow SSO. Role mappings for SSO groups must be set up and SSO enabled before doing this.
networkPolicies.enabled¶
Type: bool
true
Description: Toggle BigBang NetworkPolicy templates
networkPolicies.prependReleaseName¶
Type: bool
true
networkPolicies.egress.definitions.kubeAPI.to[0].ipBlock.cidr¶
Type: string
"0.0.0.0/0"
networkPolicies.ingress.to.elasticsearch:9200.podSelector.matchLabels.”common.k8s.elastic.co/type”¶
Type: string
"elasticsearch"
networkPolicies.ingress.to.elasticsearch:9200.from.k8s.logging/kibana.podSelector.matchLabels.”common.k8s.elastic.co/type”¶
Type: string
"kibana"
networkPolicies.ingress.to.elasticsearch:9200.from.k8s.elastic-operator@eck-operator/elastic-operator¶
Type: bool
true
networkPolicies.ingress.to.elasticsearch:9200.from.k8s.jaeger@jaeger/jaeger¶
Type: bool
true
networkPolicies.ingress.to.elasticsearch:9200.from.k8s.fluentbit-fluent-bit@fluentbit/fluent-bit¶
Type: bool
true
networkPolicies.ingress.to.elasticsearch:9200.from.k8s.mattermost@mattermost/mattermost¶
Type: bool
true
networkPolicies.ingress.to.kibana:5601.podSelector.matchLabels.”common.k8s.elastic.co/type”¶
Type: string
"kibana"
networkPolicies.ingress.to.kibana:5601.from.k8s.elastic-operator@eck-operator/elastic-operator¶
Type: bool
true
networkPolicies.ingress.to.metrics:9108.from.k8s.monitoring/prometheus¶
Type: bool
true
networkPolicies.additionalPolicies¶
Type: list
[]
monitoring.enabled¶
Type: bool
false
Description: Toggle BigBang monitoring integration, controls serviceMonitor template
metrics.enabled¶
Type: bool
false
Description: Toggle Prometheus ElasticSearch Exporter Installation
metrics.image¶
Type: object
pullPolicy: Always
pullSecret: private-registry
registry: registry1.dso.mil
repository: ironbank/opensource/elasticsearch-exporter
tag: v1.11.0
Description: Exporter imagePullSecrets
metrics.podSecurityContext¶
Type: object
runAsGroup: 1000
Description: Pod securityContext
metrics.securityContext¶
Type: object
runAsGroup: 1000
runAsUser: 1000
Description: Container securityContext
metrics.env¶
Type: object
ES_USERNAME: elastic
Description: Environment Variable Passthrough to set Auth for Exporter
metrics.extraEnvSecrets¶
Type: object
ES_PASSWORD:
key: elastic
secret: logging-ek-es-elastic-user
Description: Environment Variable Secret Mount to set Auth for Exporter Replace with empty braces if you would like to use a an API_KEY
dashboards.enabled¶
Type: bool
true
dashboards.namespace¶
Type: string
"monitoring"
dashboards.labels.grafana_dashboard¶
Type: string
"1"
openshift¶
Type: bool
false
Description: Openshift Container Platform Feature Toggle
bbtests.enabled¶
Type: bool
false
Description: Big Bang CI/Dev toggle for helm tests
bbtests.cypress.image¶
Type: string
"registry1.dso.mil/ironbank/big-bang/cypress:15.21.1"
Description: Image used for cypress test pods
bbtests.cypress.artifacts¶
Type: bool
true
Description: Toggle creation of cypress artifacts
bbtests.cypress.envs¶
Type: object
cypress_expect_logs: 'false'
cypress_kibana_url: https://logging-ek-kb-http:5601
Description: ENVs added to cypress test pods
bbtests.cypress.secretEnvs¶
Type: list
- name: cypress_elastic_password
valueFrom:
secretKeyRef:
key: elastic
name: logging-ek-es-elastic-user
Description: ENVs added to cypress test pods from existing secrets
bbtests.scripts.image¶
Type: string
"registry1.dso.mil/ironbank/big-bang/base:2.1.0"
Description: image to use for script based tests
bbtests.scripts.envs¶
Type: object
desired_version: '{{ .Values.elasticsearch.image.tag }}'
elasticsearch_host: https://{{ .Release.Name }}-es-http.{{ .Release.Namespace }}.svc.cluster.local:9200
Description: ENVs added to script test pods
bbtests.scripts.secretEnvs¶
Type: list
- name: ELASTIC_PASSWORD
valueFrom:
secretKeyRef:
key: elastic
name: logging-ek-es-elastic-user
Description: ENVs added to script test pods from existing secrets
waitJob.enabled¶
Type: bool
true
waitJob.image¶
Type: string
"registry1.dso.mil/ironbank/opensource/kubernetes/kubectl:v1.35"
waitJob.scripts.image¶
Type: string
"registry1.dso.mil/ironbank/opensource/kubernetes/kubectl:v1.35"
waitJob.permissions.resources[0]¶
Type: string
"elasticsearch-kibana"