Generate curator certs

Signed-off-by: Pavol Loffay <[email protected]>
jaegertracing · Feb 13, 2019 · 0b0f41f · 0b0f41f
1 parent 4423b3c
commit 0b0f41f
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 0 deletions.
diff --git a/pkg/storage/elasticsearch.go b/pkg/storage/elasticsearch.go
@@ -50,6 +50,7 @@ func CreateElasticsearchObjects(j *v1alpha1.Jaeger, collector, query *v1.PodSpec
 	return os, nil
 }
 
+// TODO inject curator certs to es-index-cleaner
 func inject(p *v1.PodSpec) {
 	p.Volumes = append(p.Volumes, v1.Volume{
 		Name: volumeName,

diff --git a/pkg/storage/elasticsearch_secrets.go b/pkg/storage/elasticsearch_secrets.go
@@ -38,6 +38,11 @@ var secretCertificates = map[string]map[string]string{
 	"jaeger-elasticsearch": {
 		"ca": "ca.crt",
 	},
+	"curator": {
+		"ca":   "ca.crt",
+		"key":  "system.logging.curator.key",
+		"cert": "system.logging.curator.crt",
+	},
 }
 
 func createESSecrets(jaeger *v1alpha1.Jaeger) []*v1.Secret {

diff --git a/scripts/cert_generation.sh b/scripts/cert_generation.sh
@@ -257,6 +257,7 @@ init_cert_files
 create_signing_conf
 
 generate_certs 'system.admin'
+generate_certs 'system.logging.curator'
 
 # TODO: get es SAN DNS, IP values from es service names
 generate_certs 'elasticsearch' "$(generate_extensions true true elasticsearch elasticsearch-infra elasticsearch-apps)"