Skip to content

Commit 05d696a

Browse files
committed
verify the opensearch tls cert in the opensearch-dashboards test
1 parent a22c9c6 commit 05d696a

2 files changed

Lines changed: 39 additions & 1 deletion

File tree

tests/templates/kuttl/opensearch-dashboards/20-install-opensearch-dashboards.yaml.j2

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,7 @@ commands:
77
--repo https://opensearch-project.github.io/helm-charts
88
--version "{{ test_scenario['values']['opensearch'].split(',')[0] }}"
99
--values 20_opensearch-dashboards-values.yaml
10+
--set opensearchHosts=https://opensearch.$NAMESPACE.svc.cluster.local:9200
1011
--namespace $NAMESPACE
1112
--wait
1213
timeout: 600

tests/templates/kuttl/opensearch-dashboards/20_opensearch-dashboards-values.yaml.j2

Lines changed: 38 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,3 @@
1-
opensearchHosts: https://opensearch-nodes-cluster-manager:9200
21
image:
32
repository: oci.stackable.tech/sdp/opensearch-dashboards
43
tag: {{ test_scenario['values']['opensearch'].split(',')[0] }}-stackable0.0.0-dev
@@ -15,3 +14,41 @@ extraEnvs:
1514
secretKeyRef:
1615
name: opensearch-credentials
1716
key: kibanaserver
17+
config:
18+
opensearch_dashboards.yml:
19+
opensearch:
20+
username: kibanaserver
21+
password: kibanaserver
22+
requestHeadersWhitelist: [authorization, securitytenant]
23+
ssl:
24+
verificationMode: full
25+
certificateAuthorities: [/stackable/opensearch-dashboards/config/tls/ca.crt]
26+
opensearch_security:
27+
multitenancy:
28+
enabled: true
29+
tenants.preferred: [Private, Global]
30+
readonly_mode.roles: [kibana_read_only]
31+
cookie.secure: false
32+
extraVolumes:
33+
- name: tls
34+
ephemeral:
35+
volumeClaimTemplate:
36+
metadata:
37+
annotations:
38+
secrets.stackable.tech/class: tls
39+
spec:
40+
storageClassName: secrets.stackable.tech
41+
accessModes:
42+
- ReadWriteOnce
43+
resources:
44+
requests:
45+
storage: "1"
46+
extraVolumeMounts:
47+
- name: tls
48+
mountPath: /stackable/opensearch-dashboards/config/tls
49+
# The Helm chart only adds a volume mount at /usr/share/opensearch-dashboards
50+
- mountPath: /stackable/opensearch-dashboards/config/opensearch_dashboards.yml
51+
name: config
52+
subPath: opensearch_dashboards.yml
53+
podSecurityContext:
54+
fsGroup: 1000

0 commit comments

Comments
 (0)