conditionally include certs (#7725)

Signed-off-by: Richard Maynard <richard.maynard@gmail.com>

stable/elastalert/Chart.yaml

@@ -1,6 +1,6 @@
 description: ElastAlert is a simple framework for alerting on anomalies, spikes, or other patterns of interest from data in Elasticsearch.
 name: elastalert
-version: 0.8.1
+version: 0.8.2
 appVersion: 0.1.35
 home: https://github.com/Yelp/elastalert
 icon: https://static-www.elastic.co/assets/blteb1c97719574938d/logo-elastic-elasticsearch-lt.svg

stable/elastalert/templates/config.yaml

@@ -31,8 +31,14 @@ data:
     writeback_index: {{ .Values.writebackIndex }}
     use_ssl: {{ .Values.elasticsearch.useSsl }}
     verify_certs: {{ .Values.elasticsearch.verifyCerts }}
+{{- if .Values.elasticsearch.clientCert }}
     client_cert: {{ .Values.elasticsearch.clientCert }}
+{{- end }}
+{{- if .Values.elasticsearch.clientKey }}
     client_key: {{ .Values.elasticsearch.clientKey }}
+{{- end }}
+{{- if .Values.elasticsearch.caCerts }}
     ca_certs: {{ .Values.elasticsearch.caCerts }}
+{{- end }}
     alert_time_limit:
       minutes: {{ .Values.alertRetryLimitMins }}

stable/elastalert/values.yaml

@@ -45,12 +45,13 @@ elasticsearch:
   password: ""
   # whether or not to verify TLS certificates
   verifyCerts: "True"
+  # Enable certificate based authentication
   # path to a PEM certificate to use as the client certificate
-  clientCert: "/certs/client.pem"
+  # clientCert: "/certs/client.pem"
   # path to a private key file to use as the client key
-  clientKey: "/certs/client-key.pem"
+  # clientKey: "/certs/client-key.pem"
   # path to a CA cert bundle to use to verify SSL connections
-  caCerts: "/certs/ca.pem"
+  # caCerts: "/certs/ca.pem"
   # # certs volumes, required to mount ssl certificates when elasticsearch has tls enabled
   # certsVolumes:
   #   - name: es-certs