Added ops file for cf-kibana

Author: axelaris

deployment/operations/README.md

@@ -28,4 +28,10 @@ Includes [logsearch-for-cloudfoundry](https://github.com/cloudfoundry-community/
 
 To use this extention, you have to provide following variables: `cf_admin_password`, `uaa_admin_client_secret` and `system_domain`. You can find them in your CloudFoundry deployment variables.
 
-After deployment, please run `create-uaa-client` errand to create UAA client. After that, you will be able to login into Logsearch UI using your CloudFoundry credentials, and use `https://logs.<YOUR_DOMAIN>` endpoint to access Logsearch UI.
+After deployment, please run `create-uaa-client` errand to create UAA client. After that, you will be able to login into Logsearch UI using your CloudFoundry credentials, and use `https://logs.<YOUR_DOMAIN>` endpoint to access Logsearch UI.
+
+## cf-kibana.yml
+Errand to push Kibana application into CloudFoundry as an alternative to running it as a separate job.
+
+- Depend from **cloudfoundry.yml**
+- Requires `cf-kibana_client_secre` variable

deployment/operations/cf-kibana.yml

@@ -0,0 +1,28 @@
+---
+- type: replace
+  path: /instance_groups/name=maintenance/jobs/-
+  value:
+    name: cf-kibana
+    release: logsearch-for-cloudfoundry
+    lifecycle: errand
+    consumes:
+      elasticsearch: {from: elasticsearch_master}
+      cloud_controller: {from: cloud_controller, deployment: cf}
+    properties:
+      cloudfoundry:
+        admin_password: "((cf_admin_password))"
+      cf-kibana:
+        app_name: kibana
+        app_memory: 4G
+        oauth2_client_secret: "((cf-kibana_client_secret))"
+        cloudfoundry:
+          uaa_admin_client_secret: "((uaa_admin_client_secret))"
+          api_security_group: public_networks
+          system_org: system
+          apps_domain: ((system_domain))
+        config_options:
+          xpack.monitoring.enabled: false
+          xpack.graph.enabled: false
+          xpack.ml.enabled: false
+          xpack.security.enabled: false
+          xpack.watcher.enabled: false