Add ssl.certificate_authorities configuration

[tetianakravchenko]

Signed-off-by: Tetiana Kravchenko tetiana.kravchenko@elastic.co

What does this PR do?

To support Openshift k8s package is missing some configuration settings - for more details - https://github.com/elastic/observability-docs/pull/1498/files and https://github.com/elastic/beats/pull/30054/files

for kubernetes.state_*:
no way to set:

  bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token
  ssl.certificate_authorities:
    - /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt

to all datastreams that connnect to https://${env.NODE_NAME}:10250 (like kubernetes.container) no way to set:

  bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token
  ssl.certificate_authorities:
    - /path/to/ca-bundle.crt

Checklist

• I have reviewed tips for building integrations and this pull request is aligned with them.
• I have verified that all data streams collect metrics or logs.
• I have added an entry to my package's changelog.yml file.
• I have verified that Kibana version constraints are current according to guidelines.

How to test this PR locally

Related issues

• Relates Test and verify that Elastic-Agent with k8s and system integrations run on Openshift #2065

Screenshots

For kubernetes.state_* resources:

for kubernetes.container:

[tetianakravchenko]

I did not set here a default value, though it is mostly standard - /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt (for kubernetes.state_* datasets) just to avoid getting ssl.certificate_authorities setting in final config.
@ChrsMark @MichaelKatsoulis is there any better way to handle it?

[ChrsMark]

I think leaving it blank is just fine since you have the ifs in the handlebars file (stream.yml.hbs ).

[MichaelKatsoulis]

+1

[ChrsMark]

Nice @tetianakravchenko ! Could you maybe move node and namespace settings under advanced settings too? This would make the basic setting panel more compact.

[elasticmachine]

💚 Build Succeeded

the below badges are clickable and redirect to their specific view in the CI or DOCS

Expand to view the summary

Build stats

• Reason: null

• Start Time: 2022-02-02T11:34:42.431+0000

• Duration: 38 min 9 sec

• Commit: 6f48fba

Test stats 🧪

Test	Results
Failed	0
Passed	116
Skipped	0
Total	116

🤖 GitHub comments

To re-run your PR in the CI, just comment with:

• /test : Re-trigger the build.

[tetianakravchenko]

@ChrsMark done f5bb008, also updated the screenshot in description

[ChrsMark]

Thank you @tetianakravchenko ! It looks good now but there are some conflicts to be resolved.