Expose hostPort for kibana, elasticsearch, fleet without needing ingress

adam-stokes · adam-stokes · commit d2080ede1fd6 · 2021-04-28T16:08:26.000-04:00
This is nice for local development where you don't need an ingress and are
relatively sure that the host system has the required ports available to bind to.

Signed-off-by: Adam Stokes &lt;51892+adam-stokes@users.noreply.github.com&gt;
diff --git a/cli/config/kubernetes/README.md b/cli/config/kubernetes/README.md
@@ -13,7 +13,11 @@ kind create cluster
 kubectl apply -k base
 ```
 
-## Local Ingress
+This will allow you to visit `http://localhost:5601` using username: `elastic` password: `changeme` to login
+
+## Local Ingress (Optional)
+
+If a local ingress is preferred, apply the following to setup nginx-ingress
 
 ```
 kubectl apply -k overlays/local
diff --git a/cli/config/kubernetes/base/kibana/deployment.yaml b/cli/config/kubernetes/base/kibana/deployment.yaml
@@ -24,9 +24,9 @@ spec:
           value: elastic
         - name: ELASTICSEARCH_PASSWORD
           value: changeme
-
         ports:
         - containerPort: 5601
+          hostPort: 5601
           name: http
         livenessProbe:
           tcpSocket:
diff --git a/cli/config/kubernetes/kind.yaml b/cli/config/kubernetes/kind.yaml
@@ -15,3 +15,12 @@ nodes:
   - containerPort: 443
     hostPort: 443
     protocol: TCP
+  - containerPort: 5601
+    hostPort: 5601
+    protocol: TCP
+  - containerPort: 9200
+    hostPort: 9200
+    protocol: TCP
+  - containerPort: 8220
+    hostPort: 8220
+    protocol: TCP
diff --git a/cli/config/kubernetes/overlays/local/nginx-ingress.yaml b/cli/config/kubernetes/overlays/local/nginx-ingress.yaml
@@ -340,14 +340,6 @@ spec:
             - --validating-webhook-certificate=/usr/local/certificates/cert
             - --validating-webhook-key=/usr/local/certificates/key
             - --publish-status-address=localhost
-          securityContext:
-            capabilities:
-              drop:
-                - ALL
-              add:
-                - NET_BIND_SERVICE
-            runAsUser: 101
-            allowPrivilegeEscalation: true
           env:
             - name: POD_NAME
               valueFrom:
