kubectl -n elastic-system get secret homelab-es-es-elastic-user -o go-template='{{.data.elastic | base64decode}}'
kubectl -n elastic-system port-forward svc/homelab-kibana-kb-http 5601:5601

PUT _ilm/policy/homelab-logs-policy
{
  "policy": {
    "phases": {
      "hot": {
        "actions": {
          "rollover": { "max_size"
        }
      },
      "delete": {
        "min_age": "30d",
        "actions": { "delete"
      }
    }
  }
}

PUT _index_template/homelab-logs-template
{
  "index_patterns": ["logs-homelab-*"],
  "template": {
    "settings": {
      "index.lifecycle.name": "homelab-logs-policy",
      "index.number_of_shards": 1,
      "index.number_of_replicas": 0
    }
  }
}

ELASTIC_PASSWORD=$(kubectl -n elastic-system get secret homelab-es-es-elastic-user -o go-template='{{.data.elastic | base64decode}}')
kubectl -n elastic-system port-forward svc/homelab-es-es-http 9200:9200
curl -u "elastic:${ELASTIC_PASSWORD}" -k https://localhost:9200/

apiVersion: v1
kind: ConfigMap
metadata:
  name: elastic-agent-config
  namespace: elastic-system
data:
  agent.yml: |
    outputs:
      default:
        type: elasticsearch
        hosts: ["https://homelab-es-es-http.elastic-system.svc:9200"]
        username: "elastic"
        password: "${ELASTIC_PASSWORD}"
        ssl.verification_mode: none
    inputs:
      - type: logfile
        id: system-logs
        streams:
          - paths: ["/var/log/syslog"]

kubectl create namespace elastic-system
kubectl apply -f https://download.elastic.co/downloads/eck/2.12.1/crds.yaml
kubectl apply -f https://download.elastic.co/downloads/eck/2.12.1/operator.yaml

apiVersion: elasticsearch.k8s.elastic.co/v1
kind: Elasticsearch
metadata:
  name: homelab-es
  namespace: elastic-system
spec:
  version: 8.13.4
  nodeSets:
    - name: default
      count: 1
      config:
        node.store.allow_mmap: false
      podTemplate:
        spec:
          containers:
            - name: elasticsearch
              resources:
                requests:
                  cpu: "500m"
                  memory: "2Gi"
      volumeClaimTemplates:
        - metadata:
            name: elasticsearch-data
          spec:
            accessModes: ["ReadWriteOnce"]
            resources:
              requests:
                storage: 100Gi
            storageClassName: rook-ceph-block

kubectl apply -f elasticsearch.yaml

apiVersion: kibana.k8s.elastic.co/v1
kind: Kibana
metadata:
  name: homelab-kibana
  namespace: elastic-system
spec:
  version: 8.13.4
  count: 1
  elasticsearchRef:
    name: homelab-es

kubectl apply -f kibana.yaml

kubectl -n elastic-system get pods
kubectl -n elastic-system get elasticsearch,kibana