Ingress support in Logstash

[jnbelo]

The current Logstash helm chart lacks ingress support. I did find, in a commit that it was initially added but removed soon after.

It states:

Logstash HTTP API shouldn't be exposed externally as Logstash doesn't manage any authentication on this API.
Also as Logstash doesn't support clustering, being able to access this API via a service doesn't make sense.

As far as I saw, the HTTP plugin does support some level of authentication and I really can't see how the lack of clustering support influences this decision. Do these conditions still hold?

[KristapsT]

Found lacking this same support in the Logstash helm chart.

HTTP Plugin supports HTTP basic authentication, so it shouldn't be an issue to secure it.
Moreover, whoever would wish to have more than HTTP basic auth can ensure that in ingress itself - depending on choice of ingress provider and its integrations, such as client SSL verification, OAuth, etc. - I don't see a reason why helm chart wouldn't give an option to enable HTTP input + add ingress.

[jmlrt]

Hi @jnbelo @KristapsT, thanks for reporting this issue. The mentionned commit was about not exposing Logstash API externally. We didn't add the feature to attach an ingress for HTTP plugin yet but may do it later.

[botelastic]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[camerondavison]

Is this a good place holder issue for the support coming later? I have been watching it to see when it comes

[jmlrt]

Is this a good place holder issue for the support coming later? I have been watching it to see when it comes

Yes it is, despite we don't plan to work on it in short/mid-term unless someone submit a PR.

[baniga]

Is there any workaround for this? I do need to expose our Logstash API via an internal load balancer.

[jnbelo]

Since this seems to be something some people require, I decided to submit a PR. (Sorry for taking months to actually do it, but at the time, I ended up not requiring this feature in my project)