apiVersion: v1 kind: ConfigMap metadata: name: logstash-configmap namespace: logging data: logstash.yml: | http.host: "0.0.0.0" path.config: /usr/share/logstash/pipeline logstash.conf: | # all input will come from filebeat, no local logs input { beats { port => 5044 } } filter { } output { elasticsearch { index => "logstash-%{[@metadata][beat]}" hosts => [ "${ES_HOSTS}" ] user => "${ES_USER}" password => "${ES_PASSWORD}" cacert => '/etc/logstash/certificates/ca.crt' } }