{"action":"created","comment":{"url":"https://api.github.com/repos/openshift/origin-aggregated-logging/pulls/comments/75213392","id":75213392,"diff_hunk":"@@ -1,97 +1,60 @@\n-searchguard.ssl.transport.http.enabled: true\n-\n-kibana.version: 4.1.2\n+kibana.version: 4.5.1\n \n cluster:\n   name: ${CLUSTER_NAME}\n \n script:\n-  disable_dynamic: false\n+  inline: on\n+  indexed: on\n+\n+network:\n+  host: 0.0.0.0\n+\n+cloud:\n+  kubernetes:\n+    service: ${SERVICE_DNS}\n+    namespace: ${NAMESPACE}\n \n discovery:\n-  zen:\n-    ping:\n-      multicast:\n-        enabled: false\n-    minimum_master_nodes: ${NODE_QUORUM}\n+  type: kubernetes\n+  zen.ping.multicast.enabled: false\n+\n gateway:\n+  expected_master_nodes: ${NODE_QUORUM}\n   recover_after_nodes: ${RECOVER_AFTER_NODES}\n   expected_nodes: ${RECOVER_EXPECTED_NODES}\n   recover_after_time: ${RECOVER_AFTER_TIME}\n \n io.fabric8.elasticsearch.authentication.users: [\"system.logging.kibana\", \"system.logging.fluentd\", \"system.logging.curator\", \"system.admin\"]\n \n-cloud:\n-  k8s:\n-    servicedns: ${SERVICE_DNS}\n-\n-discovery:\n-  type: io.fabric8.elasticsearch.discovery.k8s.K8sDiscoveryModule\n-\n path:\n   data: /elasticsearch/persistent/${CLUSTER_NAME}/data\n   logs: /elasticsearch/${CLUSTER_NAME}/logs\n   work: /elasticsearch/${CLUSTER_NAME}/work\n+  scripts: /elasticsearch/${CLUSTER_NAME}/scripts\n \n searchguard:\n+  authcz.admin_dn:\n+  - CN=system.admin,OU=client,O=client,L=Test,C=DE\n   config_index_name: \".searchguard.${HOSTNAME}\"\n-  key_path: /elasticsearch/${CLUSTER_NAME}\n-  allow_all_from_loopback: false\n-  authentication:\n-    authentication_backend:\n-      impl: com.floragunn.searchguard.authentication.backend.simple.AlwaysSucceedAuthenticationBackend\n-    authorizer:\n-      impl: com.floragunn.searchguard.authorization.simple.SettingsBasedAuthorizator\n-    http_authenticator:\n-      impl: io.fabric8.elasticsearch.plugin.HTTPSProxyClientCertAuthenticator\n-    proxy:\n-      header: X-Proxy-Remote-User\n-      trusted_ips: [\"*\"]\n-    authorization:\n-      settingsdb:\n-        roles:\n-          admin: [\"admin\"]\n-          fluentd: [\"fluentd\"]\n-          kibana: [\"kibana\"]\n-          curator: [\"curator\"]\n   ssl:\n     transport:\n-      http:\n-        keystore_type: JKS\n-        keystore_filepath: /etc/elasticsearch/secret/key\n-        keystore_password: kspass\n-        enforce_clientauth: true\n-        truststore_type: JKS\n-        truststore_filepath: /etc/elasticsearch/secret/truststore\n-        truststore_password: tspass\n-  actionrequestfilter:\n-    names: [\"readonly\", \"fluentd\", \"kibana\", \"curator\", \"admin\"]\n-    readonly:\n-      allowed_actions: [\"indices:data/read/*\", \"*monitor*\"]\n-      forbidden_actions: [\"cluster:*\", \"indices:admin*\"]\n-    fluentd:\n-      allowed_actions: [\"indices:data/write/*\", \"indices:admin/create\"]\n-    kibana:\n-      allowed_actions: [\"indices:data/read/*\", \"*monitor*\", \"indices:admin/read\", \"indices:admin/mappings/fields/get*\"]\n-    curator:\n-      allowed_actions: [\"indices:admin/get\", \"indices:admin/delete\"]\n-\n-openshift:\n-  acl:\n-    users:\n-      names: [\"system.logging.fluentd\", \"system.logging.kibana\", \"system.logging.curator\", \"system.admin\"]\n-      system.logging.fluentd:\n-        execute: [\"actionrequestfilter.fluentd\"]\n-        actionrequestfilter.fluentd.comment: \"Fluentd can only write\"\n-      system.logging.kibana:\n-        bypass: [\"*\"]\n-        execute: [\"actionrequestfilter.kibana\"]\n-        actionrequestfilter.kibana.comment: \"Kibana can only read from every other index\"\n-      system.logging.kibana.*.comment: \"Kibana can do anything in the kibana index\"\n-      system.logging.kibana.*.indices: [\".kibana.*\"]\n-      system.logging.curator:\n-        execute: [\"actionrequestfilter.curator\"]\n-        actionrequestfilter.curator.comment: \"Curator can list all indices and delete them\"\n-      system.admin:\n-        bypass: [\"*\"]\n-      system.admin.*.comment: \"Admin user can do anything\"\n+      enabled: true\n+      enforce_hostname_verification: false\n+      enabled_protocols: [\"TLSv1\", \"TLSv1.1\", \"TLSv1.2\"]","path":"deployer/conf/elasticsearch.yml","position":118,"original_position":118,"commit_id":"d0f42b68ef7fe6292facbfa0e2de168ca810df8d","original_commit_id":"d0f42b68ef7fe6292facbfa0e2de168ca810df8d","user":{"login":"ewolinetz","id":1427473,"avatar_url":"https://avatars.githubusercontent.com/u/1427473?v=3","gravatar_id":"","url":"https://api.github.com/users/ewolinetz","html_url":"https://github.com/ewolinetz","followers_url":"https://api.github.com/users/ewolinetz/followers","following_url":"https://api.github.com/users/ewolinetz/following{/other_user}","gists_url":"https://api.github.com/users/ewolinetz/gists{/gist_id}","starred_url":"https://api.github.com/users/ewolinetz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ewolinetz/subscriptions","organizations_url":"https://api.github.com/users/ewolinetz/orgs","repos_url":"https://api.github.com/users/ewolinetz/repos","events_url":"https://api.github.com/users/ewolinetz/events{/privacy}","received_events_url":"https://api.github.com/users/ewolinetz/received_events","type":"User","site_admin":false},"body":"I think I was playing around with the TLS versions ES supports when Curator wasn't able to connect.  I'll retest without TLSv1 now that Curator is working","created_at":"2016-08-17T21:44:36Z","updated_at":"2016-08-17T21:44:36Z","html_url":"https://github.com/openshift/origin-aggregated-logging/pull/208#discussion_r75213392","pull_request_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/pulls/208","_links":{"self":{"href":"https://api.github.com/repos/openshift/origin-aggregated-logging/pulls/comments/75213392"},"html":{"href":"https://github.com/openshift/origin-aggregated-logging/pull/208#discussion_r75213392"},"pull_request":{"href":"https://api.github.com/repos/openshift/origin-aggregated-logging/pulls/208"}}},"pull_request":{"url":"https://api.github.com/repos/openshift/origin-aggregated-logging/pulls/208","id":80871266,"html_url":"https://github.com/openshift/origin-aggregated-logging/pull/208","diff_url":"https://github.com/openshift/origin-aggregated-logging/pull/208.diff","patch_url":"https://github.com/openshift/origin-aggregated-logging/pull/208.patch","issue_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/issues/208","number":208,"state":"open","locked":false,"title":"[DO_NOT_MERGE] Logging upgrade","user":{"login":"ewolinetz","id":1427473,"avatar_url":"https://avatars.githubusercontent.com/u/1427473?v=3","gravatar_id":"","url":"https://api.github.com/users/ewolinetz","html_url":"https://github.com/ewolinetz","followers_url":"https://api.github.com/users/ewolinetz/followers","following_url":"https://api.github.com/users/ewolinetz/following{/other_user}","gists_url":"https://api.github.com/users/ewolinetz/gists{/gist_id}","starred_url":"https://api.github.com/users/ewolinetz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ewolinetz/subscriptions","organizations_url":"https://api.github.com/users/ewolinetz/orgs","repos_url":"https://api.github.com/users/ewolinetz/repos","events_url":"https://api.github.com/users/ewolinetz/events{/privacy}","received_events_url":"https://api.github.com/users/ewolinetz/received_events","type":"User","site_admin":false},"body":"@sosiouxme @jcantrill @richm PTAL - this isn't to be merged in, but will be used for QE to test from.\r\nI plan to update the Readme as well to cover topics such as de-dotting and to update the health-check information.  Also it having a PR will allow it to go through the CI testing process.\r\n\r\nOther things to note: \r\nSG currently doesn't let us configure its index. [1]\r\nAnd if I remember correctly we are impacted by this when trying to connect to another ES node for clustering (will retest) [2]\r\n\r\n[1] https://github.com/floragunncom/search-guard/issues/176\r\n[2] https://github.com/floragunncom/search-guard/issues/153","created_at":"2016-08-10T21:30:59Z","updated_at":"2016-08-17T21:44:36Z","closed_at":null,"merged_at":null,"merge_commit_sha":"3e95edb92f477eb98843f745d8ed3789ed1684fd","assignee":null,"assignees":[],"milestone":null,"commits_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/pulls/208/commits","review_comments_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/pulls/208/comments","review_comment_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/pulls/comments{/number}","comments_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/issues/208/comments","statuses_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/statuses/d0f42b68ef7fe6292facbfa0e2de168ca810df8d","head":{"label":"ewolinetz:logging_upgrade","ref":"logging_upgrade","sha":"d0f42b68ef7fe6292facbfa0e2de168ca810df8d","user":{"login":"ewolinetz","id":1427473,"avatar_url":"https://avatars.githubusercontent.com/u/1427473?v=3","gravatar_id":"","url":"https://api.github.com/users/ewolinetz","html_url":"https://github.com/ewolinetz","followers_url":"https://api.github.com/users/ewolinetz/followers","following_url":"https://api.github.com/users/ewolinetz/following{/other_user}","gists_url":"https://api.github.com/users/ewolinetz/gists{/gist_id}","starred_url":"https://api.github.com/users/ewolinetz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ewolinetz/subscriptions","organizations_url":"https://api.github.com/users/ewolinetz/orgs","repos_url":"https://api.github.com/users/ewolinetz/repos","events_url":"https://api.github.com/users/ewolinetz/events{/privacy}","received_events_url":"https://api.github.com/users/ewolinetz/received_events","type":"User","site_admin":false},"repo":{"id":42482798,"name":"origin-aggregated-logging","full_name":"ewolinetz/origin-aggregated-logging","owner":{"login":"ewolinetz","id":1427473,"avatar_url":"https://avatars.githubusercontent.com/u/1427473?v=3","gravatar_id":"","url":"https://api.github.com/users/ewolinetz","html_url":"https://github.com/ewolinetz","followers_url":"https://api.github.com/users/ewolinetz/followers","following_url":"https://api.github.com/users/ewolinetz/following{/other_user}","gists_url":"https://api.github.com/users/ewolinetz/gists{/gist_id}","starred_url":"https://api.github.com/users/ewolinetz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ewolinetz/subscriptions","organizations_url":"https://api.github.com/users/ewolinetz/orgs","repos_url":"https://api.github.com/users/ewolinetz/repos","events_url":"https://api.github.com/users/ewolinetz/events{/privacy}","received_events_url":"https://api.github.com/users/ewolinetz/received_events","type":"User","site_admin":false},"private":false,"html_url":"https://github.com/ewolinetz/origin-aggregated-logging","description":"","fork":true,"url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging","forks_url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging/forks","keys_url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging/keys{/key_id}","collaborators_url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging/teams","hooks_url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging/hooks","issue_events_url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging/issues/events{/number}","events_url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging/events","assignees_url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging/assignees{/user}","branches_url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging/branches{/branch}","tags_url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging/tags","blobs_url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging/git/refs{/sha}","trees_url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging/git/trees{/sha}","statuses_url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging/statuses/{sha}","languages_url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging/languages","stargazers_url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging/stargazers","contributors_url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging/contributors","subscribers_url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging/subscribers","subscription_url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging/subscription","commits_url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging/commits{/sha}","git_commits_url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging/git/commits{/sha}","comments_url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging/comments{/number}","issue_comment_url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging/issues/comments{/number}","contents_url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging/contents/{+path}","compare_url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging/compare/{base}...{head}","merges_url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging/merges","archive_url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging/downloads","issues_url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging/issues{/number}","pulls_url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging/pulls{/number}","milestones_url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging/milestones{/number}","notifications_url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging/labels{/name}","releases_url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging/releases{/id}","deployments_url":"https://api.github.com/repos/ewolinetz/origin-aggregated-logging/deployments","created_at":"2015-09-14T23:25:49Z","updated_at":"2016-01-19T17:21:36Z","pushed_at":"2016-08-17T20:39:52Z","git_url":"git://github.com/ewolinetz/origin-aggregated-logging.git","ssh_url":"git@github.com:ewolinetz/origin-aggregated-logging.git","clone_url":"https://github.com/ewolinetz/origin-aggregated-logging.git","svn_url":"https://github.com/ewolinetz/origin-aggregated-logging","homepage":null,"size":8926,"stargazers_count":0,"watchers_count":0,"language":"Shell","has_issues":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":0,"mirror_url":null,"open_issues_count":0,"forks":0,"open_issues":0,"watchers":0,"default_branch":"master"}},"base":{"label":"openshift:master","ref":"master","sha":"30b11bfa9863c5cd6feed1ec98bc7ff6e4747e0f","user":{"login":"openshift","id":792337,"avatar_url":"https://avatars.githubusercontent.com/u/792337?v=3","gravatar_id":"","url":"https://api.github.com/users/openshift","html_url":"https://github.com/openshift","followers_url":"https://api.github.com/users/openshift/followers","following_url":"https://api.github.com/users/openshift/following{/other_user}","gists_url":"https://api.github.com/users/openshift/gists{/gist_id}","starred_url":"https://api.github.com/users/openshift/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/openshift/subscriptions","organizations_url":"https://api.github.com/users/openshift/orgs","repos_url":"https://api.github.com/users/openshift/repos","events_url":"https://api.github.com/users/openshift/events{/privacy}","received_events_url":"https://api.github.com/users/openshift/received_events","type":"Organization","site_admin":false},"repo":{"id":42467822,"name":"origin-aggregated-logging","full_name":"openshift/origin-aggregated-logging","owner":{"login":"openshift","id":792337,"avatar_url":"https://avatars.githubusercontent.com/u/792337?v=3","gravatar_id":"","url":"https://api.github.com/users/openshift","html_url":"https://github.com/openshift","followers_url":"https://api.github.com/users/openshift/followers","following_url":"https://api.github.com/users/openshift/following{/other_user}","gists_url":"https://api.github.com/users/openshift/gists{/gist_id}","starred_url":"https://api.github.com/users/openshift/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/openshift/subscriptions","organizations_url":"https://api.github.com/users/openshift/orgs","repos_url":"https://api.github.com/users/openshift/repos","events_url":"https://api.github.com/users/openshift/events{/privacy}","received_events_url":"https://api.github.com/users/openshift/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/openshift/origin-aggregated-logging","description":"","fork":false,"url":"https://api.github.com/repos/openshift/origin-aggregated-logging","forks_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/forks","keys_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/keys{/key_id}","collaborators_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/teams","hooks_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/hooks","issue_events_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/issues/events{/number}","events_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/events","assignees_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/assignees{/user}","branches_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/branches{/branch}","tags_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/tags","blobs_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/git/refs{/sha}","trees_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/git/trees{/sha}","statuses_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/statuses/{sha}","languages_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/languages","stargazers_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/stargazers","contributors_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/contributors","subscribers_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/subscribers","subscription_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/subscription","commits_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/commits{/sha}","git_commits_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/git/commits{/sha}","comments_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/comments{/number}","issue_comment_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/issues/comments{/number}","contents_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/contents/{+path}","compare_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/compare/{base}...{head}","merges_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/merges","archive_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/downloads","issues_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/issues{/number}","pulls_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/pulls{/number}","milestones_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/milestones{/number}","notifications_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/labels{/name}","releases_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/releases{/id}","deployments_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/deployments","created_at":"2015-09-14T18:14:19Z","updated_at":"2016-07-08T19:02:43Z","pushed_at":"2016-08-17T20:39:53Z","git_url":"git://github.com/openshift/origin-aggregated-logging.git","ssh_url":"git@github.com:openshift/origin-aggregated-logging.git","clone_url":"https://github.com/openshift/origin-aggregated-logging.git","svn_url":"https://github.com/openshift/origin-aggregated-logging","homepage":null,"size":718,"stargazers_count":9,"watchers_count":9,"language":"Shell","has_issues":true,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":33,"mirror_url":null,"open_issues_count":28,"forks":33,"open_issues":28,"watchers":9,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/openshift/origin-aggregated-logging/pulls/208"},"html":{"href":"https://github.com/openshift/origin-aggregated-logging/pull/208"},"issue":{"href":"https://api.github.com/repos/openshift/origin-aggregated-logging/issues/208"},"comments":{"href":"https://api.github.com/repos/openshift/origin-aggregated-logging/issues/208/comments"},"review_comments":{"href":"https://api.github.com/repos/openshift/origin-aggregated-logging/pulls/208/comments"},"review_comment":{"href":"https://api.github.com/repos/openshift/origin-aggregated-logging/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/openshift/origin-aggregated-logging/pulls/208/commits"},"statuses":{"href":"https://api.github.com/repos/openshift/origin-aggregated-logging/statuses/d0f42b68ef7fe6292facbfa0e2de168ca810df8d"}}}}
{"actor":{"display_login":"ewolinetz"}}