EK Init Container drop capabilities and logging chart bump

Package Merge Request

Package Changes

Adds drop capabilities for ek init containers and bumps to the newest ek chart version

Package MR

https://repo1.dso.mil/platform-one/big-bang/apps/core/elasticsearch-kibana/-/merge_requests/111

For Issue

Closes https://repo1.dso.mil/platform-one/big-bang/apps/core/elasticsearch-kibana/-/issues/55

BB Processes

Add labels for affected packages so that they are deployed in CI as well as a status label:

Be sure to assign to yourself:

Once it is ready for review switch the status and assign reviewers:

chart/templates/logging/elasticsearch-kibana/values.yaml

@@ -72,21 +72,124 @@ kibana:
 elasticsearch:
   imagePullSecrets:
     - name: private-registry
-{{- if .Values.istio.enabled }}
   master:
+    initContainers:
+      - name: elastic-internal-init-filesystem
+        securityContext:
+          privileged: false
+          capabilities:
+            drop:
+              - ALL
+      - name: elastic-internal-suspend
+        securityContext:
+          privileged: false
+          capabilities:
+            drop:
+              - ALL
+    {{- if .Values.istio.enabled }}
+      - name: elastic-internal-init-keystore
+        securityContext:
+          privileged: false
+          capabilities:
+            drop:
+              - ALL
     podAnnotations:
       {{ include "istioAnnotation" . }}
+    {{- end }}
   data:
+    initContainers:
+      - name: elastic-internal-init-filesystem
+        securityContext:
+          privileged: false
+          capabilities:
+            drop:
+              - ALL
+      - name: elastic-internal-suspend
+        securityContext:
+          privileged: false
+          capabilities:
+            drop:
+              - ALL
+    {{- if .Values.istio.enabled }}
+      - name: elastic-internal-init-keystore
+        securityContext:
+          privileged: false
+          capabilities:
+            drop:
+              - ALL
     podAnnotations:
       {{ include "istioAnnotation" . }}
+    {{- end }}
   ingest:
+    initContainers:
+      - name: elastic-internal-init-filesystem
+        securityContext:
+          privileged: false
+          capabilities:
+            drop:
+              - ALL
+      - name: elastic-internal-suspend
+        securityContext:
+          privileged: false
+          capabilities:
+            drop:
+              - ALL
+    {{- if .Values.istio.enabled }}
+      - name: elastic-internal-init-keystore
+        securityContext:
+          privileged: false
+          capabilities:
+            drop:
+              - ALL
     podAnnotations:
       {{ include "istioAnnotation" . }}
+    {{- end }}
   ml:
+    initContainers:
+      - name: elastic-internal-init-filesystem
+        securityContext:
+          privileged: false
+          capabilities:
+            drop:
+              - ALL
+      - name: elastic-internal-suspend
+        securityContext:
+          privileged: false
+          capabilities:
+            drop:
+              - ALL
+    {{- if .Values.istio.enabled }}
+      - name: elastic-internal-init-keystore
+        securityContext:
+          privileged: false
+          capabilities:
+            drop:
+              - ALL
     podAnnotations:
       {{ include "istioAnnotation" . }}
+    {{- end }}
   coord:
+    initContainers:
+      - name: elastic-internal-init-filesystem
+        securityContext:
+          privileged: false
+          capabilities:
+            drop:
+              - ALL
+      - name: elastic-internal-suspend
+        securityContext:
+          privileged: false
+          capabilities:
+            drop:
+              - ALL
+    {{- if .Values.istio.enabled }}
+      - name: elastic-internal-init-keystore
+        securityContext:
+          privileged: false
+          capabilities:
+            drop:
+              - ALL
     podAnnotations:
       {{ include "istioAnnotation" . }}
-{{- end }}
+    {{- end }}
 {{- end -}}