grafana elasticsearch authentication

Author: codeyourweb

config/grafana/datasources/elasticsearch.yml

@@ -3,24 +3,33 @@ apiVersion: 1
 datasources:
   - name: Elasticsearch-logs-es01
     type: elasticsearch
-    url: http://sentinel-kit-db-elasticsearch-es01:9200
+    url: https://sentinel-kit-db-elasticsearch-es01:9200
     access: proxy
     isDefault: false
     version: 9
     database: '*'
+    basicAuth: true 
+    basicAuthUser: elastic
+    secureJsonData:
+      basicAuthPassword: "${ES_PASSWORD}"
     jsonData:
       esVersion: 90
       timeField: '@timestamp'
       maxConcurrentShardRequests: 5
     readOnly: false
     orgId: 1
+    
   - name: Elasticsearch-logs-es02
     type: elasticsearch
-    url: http://sentinel-kit-db-elasticsearch-es02:9200
+    url: https://sentinel-kit-db-elasticsearch-es02:9200
     access: proxy
     isDefault: false
     version: 9
     database: '*'
+    basicAuth: true 
+    basicAuthUser: elastic
+    secureJsonData:
+      basicAuthPassword: "${ES_PASSWORD}"
     jsonData:
       esVersion: 90
       timeField: '@timestamp'

docker-compose.yml

@@ -313,20 +313,29 @@ services:
     hostname: ${SENTINELKIT_GRAFANA_HOSTNAME}
     image: grafana/grafana:latest
     restart: on-failure
+    user: "0"
     volumes:
-      - ./config/certificates/grafana:/etc/grafana/ssl:ro
+      - ./config/certificates/elasticsearch/ca/ca.crt:/etc/grafana/certs/elasticsearch-ca.crt:ro
       - ./data/grafana:/var/lib/grafana
       - ./config/grafana/datasources:/etc/grafana/provisioning/datasources
       - ./config/grafana/dashboards:/etc/grafana/provisioning/dashboards
     environment:
       - GF_SECURITY_ADMIN_USER=${GF_SECURITY_ADMIN_USER}
       - GF_SECURITY_ADMIN_PASSWORD=${GF_SECURITY_ADMIN_PASSWORD}
       - GF_SERVER_HTTP_PORT=3000
+      - ES_PASSWORD=${ELASTICSEARCH_PASSWORD}
     networks:
       - sentinel-kit-network
     depends_on:
       - sentinel-kit-utils-prometheus
       - sentinel-kit-db-elasticsearch-es01
+    entrypoint: 
+      - /bin/sh
+      - -c
+      - |
+        cp /etc/grafana/certs/elasticsearch-ca.crt /usr/local/share/ca-certificates/elasticsearch-ca.crt
+        update-ca-certificates
+        /run.sh
 
   sentinel-kit-utils-phpmyadmin:
     container_name: sentinel-kit-utils-phpmyadmin