Common Module - Add SSL to Kibana

salt/common/nginx/nginx.conf.so-master

@@ -84,7 +84,7 @@ http {
         #include /etc/nginx/default.d/*.conf;
 
         location / {
-            try_files $uri $uri.html index.html;
+            try_files $uri $uri.html /index.html;
         }
 
         location /app/kibana {
@@ -93,7 +93,7 @@ http {
           proxy_set_header Connection 'upgrade';
           proxy_set_header Host $host;
           proxy_cache_bypass $http_upgrade;
-          proxy_pass http://{{ masterip }}:5601/;
+          proxy_pass http://{{ masterip }}:5601/app/kibana;
         }
 
         error_page 404 /404.html;

salt/kibana/etc/kibana.yml

@@ -9,3 +9,6 @@ elasticsearch.url: http://172.17.0.9:9200
 #xpack.monitoring.ui.container.elasticsearch.enabled: true
 elasticsearch.requestTimeout: 90000
 logging.dest: /var/log/kibana/kibana.log
+ssl:
+  key: /etc/pki/server.key
+  cert: /etc/pki/serer.crt

salt/kibana/init.sls

@@ -72,5 +72,7 @@ so-kibana:
       - /opt/so/log/kibana:/var/log/kibana:rw
       - /opt/so/conf/kibana/custdashboards:/usr/share/kibana/custdashboards:ro
       - /sys/fs/cgroup:/sys/fs/cgroup:ro
+      - /etc/pki/masterssl.crt:/etc/pki/server.crt:ro
+      - /etc/pki/masterssl.key:/etc/pki/server.key:ro
     - port_bindings:
       - 0.0.0.0:5601:5601