support http auth & custom index name

relay-server/elasticsearch/adapter.go

@@ -1,4 +1,4 @@
 package elasticsearch
 
 import (
 	"bytes"
@@ -38,7 +38,7 @@
 // NewElasticsearchClient creates a new Elasticsearch client with the given Elasticsearch URL
 // and kubearmor LogClient with endpoint. It has a retry mechanism for certain HTTP status codes and a backoff function for retry delays.
 // It then creates a new NewBulkIndexer with the esClient
-func NewElasticsearchClient(esURL string) (*ElasticsearchClient, error) {
+func NewElasticsearchClient(esURL string, esUser string, esPassword string) (*ElasticsearchClient, error) {
 	retryBackoff := backoff.NewExponentialBackOff()
 	cfg := elasticsearch.Config{
 		Addresses: []string{esURL},
@@ -56,6 +56,11 @@
 		MaxRetries: 5,
 	}
 
+	if len(esUser) != 0 && len(esPassword) != 0 {
+		cfg.Username = esUser
+		cfg.Password = esPassword
+	}
+
 	esClient, err := elasticsearch.NewClient(cfg)
 	if err != nil {
 		return nil, fmt.Errorf("failed to create Elasticsearch client: %v", err)
@@ -115,7 +120,7 @@
 // and starting goroutines to consume messages from the alert channel and bulk index them.
 // The method starts a goroutine for each stream and waits for messages to be received.
 // Additional goroutines consume alert from the alert channel and bulk index them.
-func (ecl *ElasticsearchClient) Start() error {
+func (ecl *ElasticsearchClient) Start(AlertsIndex string) error {
 	start = time.Now()
 	ecl.ctx, ecl.cancel = context.WithCancel(context.Background())
 	var wg sync.WaitGroup
@@ -126,7 +131,7 @@
 			for {
 				select {
 				case alert := <-ecl.alertCh:
-					ecl.bulkIndex(alert, "alert")
+					ecl.bulkIndex(alert, AlertsIndex)
 				case <-ecl.ctx.Done():
 					return
 				}

relay-server/main.go

@@ -1,7 +1,7 @@
 // SPDX-License-Identifier: Apache-2.0
 // Copyright 2021 Authors of KubeArmor
 
 package main
 
 import (
 	"os"
@@ -56,7 +56,13 @@
 
 	//get env
 	enableEsDashboards := os.Getenv("ENABLE_DASHBOARDS")
 	esUrl := os.Getenv("ES_URL")
+	esUser := os.Getenv("ES_USERNAME")
+	esPassword := os.Getenv("ES_PASSWORD")
+	esAlertsIndex := os.Getenv("ES_ALERTS_INDEX")
+	if esAlertsIndex == "" {
+		esAlertsIndex = "kubearmor-alerts"
+	}
 	endPoint := os.Getenv("KUBEARMOR_SERVICE")
 	if endPoint == "" {
 		endPoint = "localhost:32767"
@@ -84,13 +90,13 @@
 
 	// check and start an elasticsearch client
 	if enableEsDashboards == "true" {
-		esCl, err := elasticsearch.NewElasticsearchClient(esUrl)
+		esCl, err := elasticsearch.NewElasticsearchClient(esUrl, esUser, esPassword)
 		if err != nil {
 			kg.Warnf("Failed to start a Elasticsearch Client")
 			return
 		}
 		relayServer.ELKClient = esCl
-		go relayServer.ELKClient.Start()
+		go relayServer.ELKClient.Start(esAlertsIndex)
 		defer relayServer.ELKClient.Stop()
 	}