Try: use dummy service tokens (#650)

* Use kibana_system user

* Use dummy service tokens

* Set password for kibana_system

* Revert "Set password for kibana_system"

This reverts commit ac917bb.

* Try

Author: mtojek

internal/install/_static/service_tokens

@@ -0,0 +1,2 @@
+elastic/fleet-server/elastic-package-fleet-server-token:{PBKDF2_STRETCH}10000$PNiVyY96dHwRfoDszBvYPAz+mSLbC+NhtPh63dblDZU=$dAY1tXX1U5rXB+2Lt7m0L2LUNSb1q5nRaIqPNZTBxb8=
+elastic/kibana/elastic-package-kibana-token:{PBKDF2_STRETCH}10000$wIEFHIIIZ2ap0D0iQsyw0MfB7YuFA1bHnXAmlCoL4Gg=$YxvIJnasjLZyDQZpmFBiJHdR/CGXd5BnVm013Jty6p0=

internal/install/install.go

@@ -188,6 +188,12 @@ func writeStackResources(elasticPackagePath *locations.LocationManager) error {
 		return errors.Wrapf(err, "copying GeoIP country database failed (%s)", geoIpCountryMmdbPath)
 	}
 
+	serviceTokensPath := filepath.Join(elasticPackagePath.StackDir(), "service_tokens")
+	err = writeStaticResource(err, serviceTokensPath, serviceTokens)
+	if err != nil {
+		return errors.Wrapf(err, "copying service_tokens failed (%s)", serviceTokensPath)
+	}
+
 	options := profile.Options{
 		PackagePath:       elasticPackagePath.ProfileDir(),
 		Name:              profile.DefaultProfile,

internal/install/static.go

@@ -26,3 +26,6 @@ var geoIpCityMmdb string
 
 //go:embed _static/GeoLite2-Country.mmdb
 var geoIpCountryMmdb string
+
+//go:embed _static/service_tokens
+var serviceTokens string

internal/profile/_static/docker-compose-stack.yml

@@ -12,6 +12,7 @@ services:
     volumes:
       - "./elasticsearch.config.${STACK_VERSION_VARIANT}.yml:/usr/share/elasticsearch/config/elasticsearch.yml"
       - "../../../stack/ingest-geoip:/usr/share/elasticsearch/config/ingest-geoip"
+      - "../../../stack/service_tokens:/usr/share/elasticsearch/config/service_tokens"
     ports:
       - "127.0.0.1:9200:9200"
 
@@ -81,6 +82,8 @@ services:
     - "KIBANA_FLEET_SETUP=1"
     - "KIBANA_FLEET_HOST=http://kibana:5601"
     - "FLEET_SERVER_HOST=0.0.0.0"
+    - "FLEET_SERVER_SERVICE_TOKEN=AAEAAWVsYXN0aWMvZmxlZXQtc2VydmVyL2VsYXN0aWMtcGFja2FnZS1mbGVldC1zZXJ2ZXItdG9rZW46bmgtcFhoQzRRQ2FXbms2U0JySGlWQQ"
+    - "KIBANA_FLEET_SERVICE_TOKEN=AAEAAWVsYXN0aWMvZmxlZXQtc2VydmVyL2VsYXN0aWMtcGFja2FnZS1mbGVldC1zZXJ2ZXItdG9rZW46bmgtcFhoQzRRQ2FXbms2U0JySGlWQQ"
     ports:
       - "127.0.0.1:8220:8220"
 

internal/profile/_static/kibana_config_8x.yml

@@ -2,8 +2,7 @@ server.name: kibana
 server.host: "0.0.0.0"
 
 elasticsearch.hosts: [ "http://elasticsearch:9200" ]
-elasticsearch.username: elastic
-elasticsearch.password: changeme
+elasticsearch.serviceAccountToken: "AAEAAWVsYXN0aWMva2liYW5hL2VsYXN0aWMtcGFja2FnZS1raWJhbmEtdG9rZW46b2x4b051SWNRa0tYMHdXazdLWmFBdw"
 
 monitoring.ui.container.elasticsearch.enabled: true