Moving dev back to LF Gerrit

[it/dep.git] / ric-aux / 80-Auxiliary-Functions / helm / mc-stack / charts / elasticsearch / examples / security / Makefile

diff --git a/ric-aux/80-Auxiliary-Functions/helm/mc-stack/charts/elasticsearch/examples/security/Makefile b/ric-aux/80-Auxiliary-Functions/helm/mc-stack/charts/elasticsearch/examples/security/Makefile
new file mode 100755 (executable)
index 0000000..827bdc5
--- /dev/null
+++ b/ric-aux/80-Auxiliary-Functions/helm/mc-stack/charts/elasticsearch/examples/security/Makefile
@@ -0,0 +1,31 @@
+default: test
+
+include ../../../helpers/examples.mk
+
+RELEASE := helm-es-security
+
+install:
+       helm upgrade --wait --timeout=600 --install --values ./security.yml $(RELEASE) ../../ ; \
+       
+purge:
+       kubectl delete secrets elastic-credentials elastic-certificates elastic-certificate-pem || true
+       helm del --purge $(RELEASE)
+
+test: secrets install goss
+
+secrets:
+       docker rm -f elastic-helm-charts-certs || true
+       rm -f elastic-certificates.p12 elastic-certificate.pem elastic-stack-ca.p12 || true
+       password=$$([ ! -z "$$ELASTIC_PASSWORD" ] && echo $$ELASTIC_PASSWORD || echo $$(docker run --rm docker.elastic.co/elasticsearch/elasticsearch:$(STACK_VERSION) /bin/sh -c "< /dev/urandom tr -cd '[:alnum:]' | head -c20")) && \
+       docker run --name elastic-helm-charts-certs -i -w /app \
+               docker.elastic.co/elasticsearch/elasticsearch:$(STACK_VERSION) \
+               /bin/sh -c " \
+                       elasticsearch-certutil ca --out /app/elastic-stack-ca.p12 --pass '' && \
+                       elasticsearch-certutil cert --name security-master --ca /app/elastic-stack-ca.p12 --pass '' --ca-pass '' --out /app/elastic-certificates.p12" && \
+       docker cp elastic-helm-charts-certs:/app/elastic-certificates.p12 ./ && \
+       docker rm -f elastic-helm-charts-certs && \
+       openssl pkcs12 -nodes -passin pass:'' -in elastic-certificates.p12 -out elastic-certificate.pem && \
+       kubectl create secret generic elastic-certificates --from-file=elastic-certificates.p12 && \
+       kubectl create secret generic elastic-certificate-pem --from-file=elastic-certificate.pem && \
+       kubectl create secret generic elastic-credentials  --from-literal=password=$$password --from-literal=username=elastic && \
+       rm -f elastic-certificates.p12 elastic-certificate.pem elastic-stack-ca.p12