Skip to content
This repository has been archived by the owner on Mar 30, 2023. It is now read-only.

7.1.1

Compare
Choose a tag to compare
@russcam russcam released this 19 Jun 00:09
· 95 commits to master since this release

Elasticsearch, Kibana and Logstash 7.1.1

This release adds support for deploying Elasticsearch Kibana and Logstash 7.1.1 to Azure!

Features

#281 Add Elastic Stack 7.1.1 馃

This release adds Elastic Stack 7.1.1 to the template, with 7.1.1 now the default version.

The most notable feature of Elastic Stack 7.1.1 is that some Security features are now free with the basic license tier, starting in 6.8.0 and 7.1.0. These features include

  • File and Native realms for creating and managing users, the latter of which the template uses to configure the built-in users such as elastic, kibana
  • Transport Layer Security (TLS)

This means that if you're deploying 6.8.0 or 7.1.1 with this version of the template, Basic Authentication will be configured for the built-in users using the supplied passwords whether you deploy with the basic license or a trial license.

If deploying with a basic license by specifying xPackPlugins with a value of No, you must also configure TLS for at least the Elasticsearch Transport layer by supplying a PKCS#12 archive for the esTransportCaCertBlob parameter. It is highly recommended that you also configure TLS for the Elasticsearch HTTP layer and Kibana too.

If deploying with a trial license by specifying xPackPlugins with a value of Yes, configuring TLS is optional, however, it is still highly recommended that you configure TLS, since TLS is required for at least the Elasticsearch Transport layer with basic, gold and platinum license levels, so configuring at deployment time may be easier than configuring TLS on each Elasticsearch node at a later point.

#282 Certificates can now be configured in the Azure Marketplace

A step has been added to the UI definition to allow Transport Layer Security (TLS) to be configured as part of template deployment from the Azure Marketplace

marketplace_step6

Since a deployment from the Marketplace always deploys with a trial license, configuring TLS is optional, to keep the getting started experience simple for those wishing to try the offering out. It is strongly recommended that you configure TLS however.

Breaking Changes

#285 Prefix loadbalancers, application gateway and ip addresses with vmHostNamePrefix

Loadbalancer, Application Gateway and public IP address resources are now all prefixed with the value of vmHostNamePrefix, if provided. This allows a new cluster to be deployed to an existing resource group and connected to an existing vnet where another cluster has already been deployed. Note that the vnet resource, if deployed, is not prefixed with vmHostNamePrefix, since its name can be supplied as part of template deployment.

Miscellaneous

  • #284 Add important admonition to the docs about existing vnet subnet sizes