Merge branch 'master' of github.com:elastic/helm-charts into podsecur…

…itypolicy

.ci/jobs/elastic+helm-charts+master+cluster-cleanup.yml

@@ -21,8 +21,11 @@
         #!/usr/local/bin/runbld
         set -euo pipefail
 
+        source /usr/local/bin/bash_standard_lib.sh
+
         set +x
-        export VAULT_TOKEN=$(vault write -field=token auth/approle/login role_id="$VAULT_ROLE_ID" secret_id="$VAULT_SECRET_ID")
+        VAULT_TOKEN=$(retry 5 vault write -field=token auth/approle/login role_id="$VAULT_ROLE_ID" secret_id="$VAULT_SECRET_ID")
+        export VAULT_TOKEN
         unset VAULT_ROLE_ID VAULT_SECRET_ID
         set -x
 

.ci/jobs/elastic+helm-charts+master+cluster-creation.yml

@@ -21,8 +21,11 @@
         #!/usr/local/bin/runbld
         set -euo pipefail
 
+        source /usr/local/bin/bash_standard_lib.sh
+
         set +x
-        export VAULT_TOKEN=$(vault write -field=token auth/approle/login role_id="$VAULT_ROLE_ID" secret_id="$VAULT_SECRET_ID")
+        VAULT_TOKEN=$(retry 5 vault write -field=token auth/approle/login role_id="$VAULT_ROLE_ID" secret_id="$VAULT_SECRET_ID")
+        export VAULT_TOKEN
         unset VAULT_ROLE_ID VAULT_SECRET_ID
         set -x
 

.ci/jobs/elastic+helm-charts+master+integration-elasticsearch.yml

@@ -25,8 +25,11 @@
         #!/usr/local/bin/runbld
         set -euo pipefail
 
+        source /usr/local/bin/bash_standard_lib.sh
+
         set +x
-        export VAULT_TOKEN=$(vault write -field=token auth/approle/login role_id="$VAULT_ROLE_ID" secret_id="$VAULT_SECRET_ID")
+        VAULT_TOKEN=$(retry 5 vault write -field=token auth/approle/login role_id="$VAULT_ROLE_ID" secret_id="$VAULT_SECRET_ID")
+        export VAULT_TOKEN
         unset VAULT_ROLE_ID VAULT_SECRET_ID
         set -x
 

.ci/jobs/elastic+helm-charts+master+integration-filebeat.yml

@@ -25,8 +25,11 @@
         #!/usr/local/bin/runbld
         set -euo pipefail
 
+        source /usr/local/bin/bash_standard_lib.sh
+
         set +x
-        export VAULT_TOKEN=$(vault write -field=token auth/approle/login role_id="$VAULT_ROLE_ID" secret_id="$VAULT_SECRET_ID")
+        VAULT_TOKEN=$(retry 5 vault write -field=token auth/approle/login role_id="$VAULT_ROLE_ID" secret_id="$VAULT_SECRET_ID")
+        export VAULT_TOKEN
         unset VAULT_ROLE_ID VAULT_SECRET_ID
         set -x
 

.ci/jobs/elastic+helm-charts+master+integration-kibana.yml

@@ -25,8 +25,11 @@
         #!/usr/local/bin/runbld
         set -euo pipefail
 
+        source /usr/local/bin/bash_standard_lib.sh
+
         set +x
-        export VAULT_TOKEN=$(vault write -field=token auth/approle/login role_id="$VAULT_ROLE_ID" secret_id="$VAULT_SECRET_ID")
+        VAULT_TOKEN=$(retry 5 vault write -field=token auth/approle/login role_id="$VAULT_ROLE_ID" secret_id="$VAULT_SECRET_ID")
+        export VAULT_TOKEN
         unset VAULT_ROLE_ID VAULT_SECRET_ID
         set -x
 

.ci/jobs/elastic+helm-charts+master+integration-metricbeat.yml

@@ -25,8 +25,11 @@
         #!/usr/local/bin/runbld
         set -euo pipefail
 
+        source /usr/local/bin/bash_standard_lib.sh
+
         set +x
-        export VAULT_TOKEN=$(vault write -field=token auth/approle/login role_id="$VAULT_ROLE_ID" secret_id="$VAULT_SECRET_ID")
+        VAULT_TOKEN=$(retry 5 vault write -field=token auth/approle/login role_id="$VAULT_ROLE_ID" secret_id="$VAULT_SECRET_ID")
+        export VAULT_TOKEN
         unset VAULT_ROLE_ID VAULT_SECRET_ID
         set -x
 

.ci/jobs/elastic+helm-charts+pull-request+cluster-cleanup.yml

@@ -21,8 +21,11 @@
         #!/usr/local/bin/runbld
         set -euo pipefail
 
+        source /usr/local/bin/bash_standard_lib.sh
+
         set +x
-        export VAULT_TOKEN=$(vault write -field=token auth/approle/login role_id="$VAULT_ROLE_ID" secret_id="$VAULT_SECRET_ID")
+        VAULT_TOKEN=$(retry 5 vault write -field=token auth/approle/login role_id="$VAULT_ROLE_ID" secret_id="$VAULT_SECRET_ID")
+        export VAULT_TOKEN
         unset VAULT_ROLE_ID VAULT_SECRET_ID
         set -x
 

.ci/jobs/elastic+helm-charts+pull-request+cluster-creation.yml

@@ -21,8 +21,11 @@
         #!/usr/local/bin/runbld
         set -euo pipefail
 
+        source /usr/local/bin/bash_standard_lib.sh
+
         set +x
-        export VAULT_TOKEN=$(vault write -field=token auth/approle/login role_id="$VAULT_ROLE_ID" secret_id="$VAULT_SECRET_ID")
+        VAULT_TOKEN=$(retry 5 vault write -field=token auth/approle/login role_id="$VAULT_ROLE_ID" secret_id="$VAULT_SECRET_ID")
+        export VAULT_TOKEN
         unset VAULT_ROLE_ID VAULT_SECRET_ID
         set -x
 

.ci/jobs/elastic+helm-charts+pull-request+integration-elasticsearch.yml

@@ -25,8 +25,11 @@
         #!/usr/local/bin/runbld
         set -euo pipefail
 
+        source /usr/local/bin/bash_standard_lib.sh
+
         set +x
-        export VAULT_TOKEN=$(vault write -field=token auth/approle/login role_id="$VAULT_ROLE_ID" secret_id="$VAULT_SECRET_ID")
+        VAULT_TOKEN=$(retry 5 vault write -field=token auth/approle/login role_id="$VAULT_ROLE_ID" secret_id="$VAULT_SECRET_ID")
+        export VAULT_TOKEN
         unset VAULT_ROLE_ID VAULT_SECRET_ID
         set -x
 

.ci/jobs/elastic+helm-charts+pull-request+integration-filebeat.yml

@@ -25,8 +25,11 @@
         #!/usr/local/bin/runbld
         set -euo pipefail
 
+        source /usr/local/bin/bash_standard_lib.sh
+
         set +x
-        export VAULT_TOKEN=$(vault write -field=token auth/approle/login role_id="$VAULT_ROLE_ID" secret_id="$VAULT_SECRET_ID")
+        VAULT_TOKEN=$(retry 5 vault write -field=token auth/approle/login role_id="$VAULT_ROLE_ID" secret_id="$VAULT_SECRET_ID")
+        export VAULT_TOKEN
         unset VAULT_ROLE_ID VAULT_SECRET_ID
         set -x
 

.ci/jobs/elastic+helm-charts+pull-request+integration-kibana.yml

@@ -25,8 +25,11 @@
         #!/usr/local/bin/runbld
         set -euo pipefail
 
+        source /usr/local/bin/bash_standard_lib.sh
+
         set +x
-        export VAULT_TOKEN=$(vault write -field=token auth/approle/login role_id="$VAULT_ROLE_ID" secret_id="$VAULT_SECRET_ID")
+        VAULT_TOKEN=$(retry 5 vault write -field=token auth/approle/login role_id="$VAULT_ROLE_ID" secret_id="$VAULT_SECRET_ID")
+        export VAULT_TOKEN
         unset VAULT_ROLE_ID VAULT_SECRET_ID
         set -x
 

.ci/jobs/elastic+helm-charts+pull-request+integration-metricbeat.yml

@@ -25,8 +25,11 @@
         #!/usr/local/bin/runbld
         set -euo pipefail
 
+        source /usr/local/bin/bash_standard_lib.sh
+
         set +x
-        export VAULT_TOKEN=$(vault write -field=token auth/approle/login role_id="$VAULT_ROLE_ID" secret_id="$VAULT_SECRET_ID")
+        VAULT_TOKEN=$(retry 5 vault write -field=token auth/approle/login role_id="$VAULT_ROLE_ID" secret_id="$VAULT_SECRET_ID")
+        export VAULT_TOKEN
         unset VAULT_ROLE_ID VAULT_SECRET_ID
         set -x
 

.github/ISSUE_TEMPLATE/bug_report.md

@@ -11,10 +11,11 @@ about: Create a report to help us improve
 
 **Helm Version:**
 
-**Values.yaml:**
+**`helm get release` output**
+
+e.g. `helm get elasticsearch` (replace `elasticsearch` with the name of your helm release)
 
 ```
-key: value
 ```
 
 **Describe the bug:**

CHANGELOG.md

@@ -1,9 +1,99 @@
-## Unreleased - XXXX/XX/XX
+# Changelog
 
-### Metricbeat (WIP)
+## 7.3.0 - 2019/07/31
 
+* 7.3.0 as the default stack version
+
+### Elasticsearch
+| PR                                                      | Author                                                     | Title                                                                     |
+| ------------------------------------------------------- | ---------------------------------------------------------- | ------------------------------------------------------------------------- |
+| [#226](https://github.com/elastic/helm-charts/pull/226) | [@MichaelMarieJulie](https://github.com/MichaelMarieJulie) | Add configurable pods labels                                              |
+| [#237](https://github.com/elastic/helm-charts/pull/237) | [@MichaelSp](https://github.com/MichaelSp)                 | Add back `service.alpha.kubernetes.io/tolerate-unready-endpoints: "true"` |
+
+### Kibana
+| PR                                                      | Author                                     | Title                               |
+| ------------------------------------------------------- | ------------------------------------------ | ----------------------------------- |
+| [#225](https://github.com/elastic/helm-charts/pull/225) | [@plumcraft](https://github.com/plumcraft) | Add configurable pod labels         |
+| [#230](https://github.com/elastic/helm-charts/pull/230) | [@Crazybus](https://github.com/Crazybus)   | Add subPath support to secretMounts |
+
+---
+## 7.2.1-0 - 2019/07/18
+
+* [#195](https://github.com/elastic/helm-charts/pull/195) - @cclauss - Initial steps started to move all python2 code to python3
+* [#205](https://github.com/elastic/helm-charts/pull/205) - @Crazybus - Fixup and improve security example documentation
+
+
+### Elasticsearch
+
+* [#171](https://github.com/elastic/helm-charts/pull/171) - @naseemkullah - Run Elasticsearch as a non-root user
+* [#197](https://github.com/elastic/helm-charts/pull/197) - @tetianakravchenko - Add option to provide custom start/stop hooks
+* [#206](https://github.com/elastic/helm-charts/pull/206) - @Crazybus - Automatically detect esMajorVersion for default images
+* [#203](https://github.com/elastic/helm-charts/pull/203) - @Crazybus - Add testing for security context
+* [#220](https://github.com/elastic/helm-charts/pull/220) - @JorisAndrade -  Add option to disable sysctlInitContainer
+
+### Kibana
+
+* [#204](https://github.com/elastic/helm-charts/pull/204) - @Crazybus - Make imagePullPolicy actually do something
+* [#210](https://github.com/elastic/helm-charts/pull/210) - @cliedeman - Add Kibana pod annotations
+* [#217](https://github.com/elastic/helm-charts/pull/217) - @Crazybus - Update healthCheckPath to mention basePath usage
+
+### Filebeat
+
+* [#214](https://github.com/elastic/helm-charts/pull/214) - @dugouchet - Add additional labels
+
+### Metricbeat
+
+* [#127](https://github.com/elastic/helm-charts/pull/127) - @Crazybus - Add metricbeat chart
 * [#128](https://github.com/elastic/helm-charts/pull/128) - @Crazybus - Add ci jobs for metricbeat
-* [#127](https://github.com/elastic/helm-charts/pull/127) - @Crazybus - WIP add metricbeat chart
+
+---
+## 7.2.0 - 2019/07/01
+
+* 7.2.0 as the default stack version
+* Updated the beta status messaging and added proper descriptions to each chart [#158](https://github.com/elastic/helm-charts/pull/158)
+* Add GKE 1.13 to automated testing suite [#169](https://github.com/elastic/helm-charts/pull/169) and [#181](https://github.com/elastic/helm-charts/pull/181)
+
+### Elasticsearch
+
+* [#123](https://github.com/elastic/helm-charts/pull/123) - @kimxogus - Make the service configurable
+* [#141](https://github.com/elastic/helm-charts/pull/141) - @satchpx - Add capability to specify alternate scheduler
+* [#161](https://github.com/elastic/helm-charts/pull/161) - @Crazybus - Add configurable nodePort to the service spec
+* [#170](https://github.com/elastic/helm-charts/pull/170) - @Crazybus - Update security example docs to match reality
+* [#182](https://github.com/elastic/helm-charts/pull/182) - @hxquangnhat - Fix secretName field for secretMounts
+* [#186](https://github.com/elastic/helm-charts/pull/186) - @Crazybus - Fix pvc annotations with multiple fields
+* [#189](https://github.com/elastic/helm-charts/pull/189) - @gnatpat - Add resources to sidecar container
+
+
+### Kibana
+
+* [#160](https://github.com/elastic/helm-charts/pull/160) - @Crazybus - Add configurable nodePort to the service spec
+* [#168](https://github.com/elastic/helm-charts/pull/168) - @Crazybus - Always set server.host to the docker default
+* [#172](https://github.com/elastic/helm-charts/pull/172) - @naseemkullah - Run Kibana as the non-root kibana user (1000)
+* [#182](https://github.com/elastic/helm-charts/pull/182) - @hxquangnhat - Fix secretName field for secretMounts
+* [#184](https://github.com/elastic/helm-charts/pull/184) - @diegofernandes - Fix wildcard support for ingress
+
+### Filebeat
+
+* [#182](https://github.com/elastic/helm-charts/pull/182) - @hxquangnhat - Fix secretName field for secretMounts
+* [#188](https://github.com/elastic/helm-charts/pull/188) - @cclauss - Fix octal literal to work in both Python 2 and Python 3
+
+---
+## 7.1.1 - 2019/06/07
+
+* 7.1.1 as the default stack version
+* Helm 2.14.0 as the tested version. Helm 2.14.0 has some extra validation built in which caused an issue with an [invalid field in the filebeat chart](https://github.com/elastic/helm-charts/issues/136).
+
+### Elasticsearch
+
+* [#146](https://github.com/elastic/helm-charts/pull/146) - @Crazybus - Add instructions for how to enable snapshots
+
+### Kibana
+
+* [#151](https://github.com/elastic/helm-charts/pull/151) - @natebwangsut - Added an option to add annotations(s) to service resource
+
+### Filebeat
+
+* [#140](https://github.com/elastic/helm-charts/pull/140) - @Crazybus - Remove fsGroup from container level security context
 
 ---
 ## 7.1.0 - 2019/05/21

README.md

@@ -2,19 +2,22 @@
 
 [![Build Status](https://img.shields.io/jenkins/s/https/devops-ci.elastic.co/job/elastic+helm-charts+master.svg)](https://devops-ci.elastic.co/job/elastic+helm-charts+master/)
 
-This functionality is in beta status and may be changed or removed completely in a future release. Elastic will take a best effort approach to fix any issues, but beta features are not subject to the support SLA of official GA features.
+This functionality is in beta and is subject to change. The design and code is less mature than official GA features and is being provided as-is with no warranties. Beta features are not subject to the support SLA of official GA features.
 
 ## Charts
 
 Please look in the chart directories for the documentation for each chart. These helm charts are designed to be a lightweight way to configure our official docker images. Links to the relevant docker image documentation has also been added below.
 
-* [Elasticsearch](./elasticsearch/README.md) - [docker image docs](https://www.elastic.co/guide/en/elasticsearch/reference/current/docker.html)
-* [Kibana](./kibana/README.md) - [docker image docs](https://www.elastic.co/guide/en/kibana/current/docker.html)
-* [Filebeat](./filebeat/README.md) - [docker image docs](https://www.elastic.co/guide/en/beats/filebeat/current/running-on-docker.html)
+| Chart                                      | Docker documentation                                                            |
+| ------------------------------------------ | ------------------------------------------------------------------------------- |
+| [Elasticsearch](./elasticsearch/README.md) | https://www.elastic.co/guide/en/elasticsearch/reference/current/docker.html     |
+| [Kibana](./kibana/README.md)               | https://www.elastic.co/guide/en/kibana/current/docker.html                      |
+| [Filebeat](./filebeat/README.md)           | https://www.elastic.co/guide/en/beats/filebeat/current/running-on-docker.html   |
+| [Metricbeat](./metricbeat/README.md)       | https://www.elastic.co/guide/en/beats/metricbeat/current/running-on-docker.html |
 
 ## Kubernetes versions
 
-The charts are [currently tested](https://devops-ci.elastic.co/job/elastic+helm-charts+master/) against all GKE versions available. 
+The charts are [currently tested](https://devops-ci.elastic.co/job/elastic+helm-charts+master/) against all GKE versions available. The exact versions are defined under `KUBERNETES_VERSIONS` in [helpers/matrix.yml](/helpers/matrix.yml)
 
 
 

elasticsearch/Chart.yaml

@@ -1,11 +1,11 @@
-description: Elasticsearch
+description: Official Elastic helm chart for Elasticsearch
 home: https://github.com/elastic/helm-charts
 maintainers:
 - email: helm-charts@elastic.co
   name: Elastic
 name: elasticsearch
-version: 7.1.0
-appVersion: 7.1.0
+version: 7.3.0
+appVersion: 7.3.0
 sources:
   - https://github.com/elastic/elasticsearch
 icon: https://helm.elastic.co/icons/elasticsearch.png