elasticsearch 6.4 w/ tls

Author: icereval

elasticsearch/6.4/tls/Dockerfile

@@ -0,0 +1,11 @@
+FROM docker.elastic.co/elasticsearch/elasticsearch:6.4.1
+
+USER root
+
+# https://www.elastic.co/guide/en/elasticsearch/reference/current/docker.html#_c_customized_image
+ADD elasticsearch.yml /usr/share/elasticsearch/config/
+RUN chown elasticsearch:elasticsearch config/elasticsearch.yml
+
+USER elasticsearch
+
+RUN bin/elasticsearch-plugin install -b com.floragunn:search-guard-6:6.4.1-23.1

elasticsearch/6.4/tls/elasticsearch.yml

@@ -0,0 +1,21 @@
+network.host: 0.0.0.0
+
+processors: ${PROCESSORS:}
+
+# minimum_master_nodes need to be explicitly set when bound on a public IP
+# set to 1 to allow single node clusters
+# Details: https://github.com/elastic/elasticsearch/pull/17288
+discovery.zen.minimum_master_nodes: ${DISCOVERY_ZEN_MINIMUM_MASTER_NODES:1}
+
+# XPack - https://www.elastic.co/guide/en/x-pack/current/xpack-settings.html
+xpack.ml.enabled: ${XPACK_ML_ENABLED:false}
+xpack.monitoring.enabled: ${XPACK_MONITORING_ENABLED:false}
+xpack.security.enabled: ${XPACK_SECURITY_ENABLED:false}
+xpack.watcher.enabled: ${XPACK_WATCHER_ENABLED:false}
+
+# SearchGuard Community Edition - https://docs.search-guard.com/latest/search-guard-community-edition.html
+searchguard.enterprise_modules_enabled: ${SEARCHGUARD_ENTERPRISE_MODULES_ENABLED:false}
+
+# see https://github.com/floragunncom/search-guard-ssl/blob/master/src/main/java/com/floragunn/searchguard/ssl/util/SSLConfigConstants.java#L28
+searchguard.ssl.transport.enabled: ${SEARCHGUARD_SSL_TRANSPORT_ENABLED:false}
+searchguard.ssl.http.enabled: ${SEARCHGUARD_SSL_HTTP_ENABLED:false}