add searchguard.cookie.password and xpack.reporting.encryptionKey

Author: Schnitzel

.lagoon.secrets.yaml

@@ -20,6 +20,10 @@ parameters:
     description: Password to for incoming logstash http connections
     generate: expression
     from: "[a-zA-Z0-9]{32}"
+  - name: SEARCHGUARD_COOKIE_PASSWORD
+    description: Password to for searchguard cookies
+    generate: expression
+    from: "[a-zA-Z0-9]{32}"
   - name: SAFE_BRANCH
     description: Which branch this belongs to, special chars replaced with dashes
     required: true
@@ -69,3 +73,9 @@ objects:
     name: logstash-password
   stringData:
     LOGSTASH_PASSWORD: ${LOGSTASH_PASSWORD}
+- kind: Secret
+  apiVersion: v1
+  metadata:
+    name: searchguard-cookie-password
+  stringData:
+    SEARCHGUARD_COOKIE_PASSWORD: ${SEARCHGUARD_COOKIE_PASSWORD}

services/logs-db-ui/.lagoon.yml

@@ -111,6 +111,11 @@ objects:
               secretKeyRef:
                 name: keycloak-admin-password
                 key: KEYCLOAK_ADMIN_PASSWORD
+          - name: SEARCHGUARD_COOKIE_PASSWORD
+            valueFrom:
+              secretKeyRef:
+                name: searchguard-cookie-password
+                key: SEARCHGUARD_COOKIE_PASSWORD
           resources:
             requests:
               cpu: 10m

services/logs-db-ui/Dockerfile

@@ -11,6 +11,7 @@ ENV NODE_OPTIONS="--max-old-space-size=2048" \
 
 RUN echo $'xpack.security.enabled: false\n\
 xpack.monitoring.enabled: false\n\
+xpack.reporting.encryptionKey: "${LOGSDB_UI_XPACK_REPORTING_ENCRYPTIONKEY:-lagoonrocksyou}"\n\
 \n\
 # Configure the Kibana internal server user\n\
 elasticsearch.username: "kibanaserver"\n\
@@ -44,6 +45,8 @@ searchguard.openid.base_redirect_url: "${LOGSDB_UI_URL:-http://0.0.0.0:5601}"\n\
 \n\
 # optional: the scope of the identity token\n\
 searchguard.openid.scope: "profile email"\n\
+\n\
+searchguard.cookie.password: "${SEARCHGUARD_COOKIE_PASSWORD:-aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa}"\n\
 ' >> config/kibana.yml
 
 RUN bin/kibana-plugin install https://search.maven.org/remotecontent?filepath=com/floragunn/search-guard-kibana-plugin/6.4.2-15/search-guard-kibana-plugin-6.4.2-15.zip