From da38f0d1b4beedf77398acc6b81b0b30377fdaaa Mon Sep 17 00:00:00 2001
From: Kevin Qualters <56408403+kqualters-elastic@users.noreply.github.com>
Date: Tue, 9 Feb 2021 08:36:06 -0500
Subject: [PATCH] Add --ssl flag to make resolver generator use ssl with kbn
 and elasticsearch clients (#89873) (#90364)

Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
---
 .../endpoint/resolver_generator_script.ts     | 46 ++++++++++++++-----
 1 file changed, 35 insertions(+), 11 deletions(-)

diff --git a/x-pack/plugins/security_solution/scripts/endpoint/resolver_generator_script.ts b/x-pack/plugins/security_solution/scripts/endpoint/resolver_generator_script.ts
index 7e7922dfa09eb..a4664e4a51ca2 100644
--- a/x-pack/plugins/security_solution/scripts/endpoint/resolver_generator_script.ts
+++ b/x-pack/plugins/security_solution/scripts/endpoint/resolver_generator_script.ts
@@ -7,9 +7,10 @@
 
 /* eslint-disable no-console */
 import yargs from 'yargs';
+import fs from 'fs';
 import { Client, ClientOptions } from '@elastic/elasticsearch';
 import { ResponseError } from '@elastic/elasticsearch/lib/errors';
-import { KbnClient, ToolingLog } from '@kbn/dev-utils';
+import { KbnClient, ToolingLog, CA_CERT_PATH } from '@kbn/dev-utils';
 import { AxiosResponse } from 'axios';
 import { indexHostsAndAlerts } from '../../common/endpoint/index_data';
 import { ANCESTRY_LIMIT, EndpointDocGenerator } from '../../common/endpoint/generate_data';
@@ -204,15 +205,41 @@ async function main() {
       type: 'boolean',
       default: false,
     },
+    ssl: {
+      alias: 'ssl',
+      describe: 'Use https for elasticsearch and kbn clients',
+      type: 'boolean',
+      default: false,
+    },
   }).argv;
+  let ca: Buffer;
+  let kbnClient: KbnClientWithApiKeySupport;
+  let clientOptions: ClientOptions;
 
-  const kbnClient = new KbnClientWithApiKeySupport({
-    log: new ToolingLog({
-      level: 'info',
-      writeTo: process.stdout,
-    }),
-    url: argv.kibana,
-  });
+  if (argv.ssl) {
+    ca = fs.readFileSync(CA_CERT_PATH);
+    const url = argv.kibana.replace('http:', 'https:');
+    const node = argv.node.replace('http:', 'https:');
+    kbnClient = new KbnClientWithApiKeySupport({
+      log: new ToolingLog({
+        level: 'info',
+        writeTo: process.stdout,
+      }),
+      url,
+      certificateAuthorities: [ca],
+    });
+    clientOptions = { node, ssl: { ca: [ca] } };
+  } else {
+    kbnClient = new KbnClientWithApiKeySupport({
+      log: new ToolingLog({
+        level: 'info',
+        writeTo: process.stdout,
+      }),
+      url: argv.kibana,
+    });
+    clientOptions = { node: argv.node };
+  }
+  const client = new Client(clientOptions);
 
   try {
     await doIngestSetup(kbnClient);
@@ -221,9 +248,6 @@ async function main() {
     process.exit(1);
   }
 
-  const clientOptions: ClientOptions = { node: argv.node };
-  const client = new Client(clientOptions);
-
   if (argv.delete) {
     await deleteIndices(
       [argv.eventIndex, argv.metadataIndex, argv.policyIndex, argv.alertIndex],