This commit initiates the 6.8 branch which will be dedicated to the 6.8.x releases for the Helm Charts. It will allow to:

- test this branch with the daily Stack Docker images 6.8.9-SNAPSHOT via dedicated Jenkins jobs
- test the staging 6.8.x Docker images before a release

This branch is based on [7.7](https://github.com/elastic/helm-charts/tree/7.7/) which was initiated in elastic#541.

[Elasticsearch upgrade test](https://github.com/elastic/helm-charts/tree/7.7/elasticsearch/examples/upgrade) has been removed as doesn't make sense to try an upgrade from `7.0.0-alpha1` to `6.8.x`.

…c.selector.matchLabels (elastic#622)

This fix metricbeat chart upgrades when .Chart.Version change.

UPGRADE FAILED
Error: Deployment.apps "metricbeat-metricbeat-metrics" is invalid: spec.selector: Invalid value: v1.LabelSelector{MatchLabels:map[string]string{"app":"metricbeat-metricbeat-metrics", "chart":"metricbeat-7.7.0", "heritage":"Tiller", "release":"metricbeat"}, MatchExpressions:[]v1.LabelSelectorRequirement(nil)}: field is immutable
Error: UPGRADE FAILED: Deployment.apps "metricbeat-metricbeat-metrics" is invalid: spec.selector: Invalid value: v1.LabelSelector{MatchLabels:map[string]string{"app":"metricbeat-metricbeat-metrics", "chart":"metricbeat-7.7.0", "heritage":"Tiller", "release":"metricbeat"}, MatchExpressions:[]v1.LabelSelectorRequirement(nil)}: field is immutable

See helm/charts#7680 for more details

…itContainers}` (elastic#637)

…tic#638)

…lastic#624)

This commit fix a bug introduced in elastic#572 where Metricbeat deployment doesn't start after an upgrade from a previous version when using a custom metricbeatConfig.

* Add ability to set the file permissions when mounting a secret

* Added test for defaultMode on secret mount

Common labels were moved to helpers template to have only one source of truth of common/added labels shared between all Kibana resources.

Also, this extends the capability to add a custom label and this will be common between all the resources.

* add CI tests for GKE 1.16
* add jq to Docker image

This PR prepare `6.8` branch for `6.8.10` release:
- bump chart and Docker images version from `6.8.10-SNAPSHOT` to `6.8.10`
- remove notices on README that this is a development branch and development branch specific install instructions

### Note
> - remove notices on README that this is a development branch and development branch specific install instructions

This is required because released Helm charts will be packaged from this PR commit including the README files that will be available inside the chart packages and in [Helm Hub](https://hub.helm.sh/charts/elastic) pages (example: [Elasticsearch chart page](https://hub.helm.sh/charts/elastic/elasticsearch)).

This change will be reverted in the next PR after release when we will bump `6.8` branch to `6.8.11-SNAPSHOT` version.

According to https://github.com/helm/charts/blob/master/REVIEW_GUIDELINES.md, service selector should not contain heritage.

It would break (future) migration from helm 2 to helm 3 (during the rolling update only, there could be a downtime when only old nodes are ready but new services is there).

…mes (elastic#542)

Prevents very long startup times when the namespace contains many services. Only valid for kubernetes versions >1.13

This commit makes probes customizable using values.
The values where already partly existing but weren't used
in the deployment template.

This commit add a security example to use Logstash Helm chart and Elasticsearch Helm chart with TLS encryption.

…elastic#655)

This commit add back the Beta notices for 6.8 branch. Only releases >= 7.7.0 are GA and eligible to support.

Co-authored-by: Julien Mailleret <8582351+jmlrt@users.noreply.github.com>

This commit fixes the expected version in security goss test.

…to its volumeClaimTemplate (elastic#665)

Co-authored-by: Maxime Gréau <maxime.greau@elastic.co>

This commit add a mandatory headless service for Logstash statefulset.

Headless service is required for Statefulsets.
While Helm 2 allowed to deploy Statefulsets without a serviceName, Helm 3 enforce this requirement and fails if serviceName is missing.

Note: Statefulsets don't accept serviceName field update during release upgrades. This change is therefore considered as a breaking change and will require using `helm upgrade --force` for upgrades.

This commit add permission to list nodes. 
This is required when using `add_resource_metadata: node.enabled: true`.

…lastic#715)

If the `--namespace` flag isn't provided to Helm, then it will use whatever the local configured namespace is, which could be different.

This can lead to tests failing that expect the `.Release.Namespace` to resolve to `default`

…astic#713)

Spotted that the `apm-server` chart isn't being tested by PR suite.

So add it to the `CHART` matrix.

…elastic#712)

Co-authored-by: Gavin Williams <fatmcgav@gmail.com>

This commit document the workaround to work with Filebeat output which don't support testing.

This is required as the default readiness probe use `filebeat test output` command.

In the most cases kube-state-metrics is already installed on the
cluster, so let's just re-use it, instead of installing another
one copy. By default, kube-state-metrics are installed as dependency,
so this PR doesn't change the default behaviour

Signed-off-by: Sergiy Kulanov <sergey@kulanov.org.ua>

…search.uname (elastic#670)

This addressing an issue where nodes are unable to locate the masters when fullnameOverride is used, due to the cluster.initial_master_nodes having the wrong name of the nodes.

)

This commit remove expected Logstash host and name in Logstash tests with 6.x.

When using a headless service (4a6067e), Logstash 6.x use the full name of the service related to the namespace (ie: helm-logstash-default-logstash-0.helm-logstash-oss-logstash-headless.helm-charts-testing.svc.cluster.local). Keeping this test would require a hard coupling between the test and the namespace where it is running.

…astic#723)

- Update oss docker image links to new Elastic registry
- Fix some other links

test_initial_master_nodes_when_using_full_name_override has been added in af288a9 but is not valid with 6.x version.

This commit remove from 6.8 branch the test and elasticsearch.endpoints template which are only used with 7.x version.

change
https://github.com/elastic/helm-charts/tree/master/kibana/examples/security/security.yaml
to be
https://github.com/elastic/helm-charts/tree/master/kibana/examples/security/security.yml

This commit add Slack notifications to Elastic Release team Slack channel for helm-charts branch and staging job templates.

This PR add Helm 3 support in beta as the main blockers were fixed in previous PR.

Note that adding automated tests with Helm 3 is still required to add full Helm 3 support.

These jobs are replaced by a single job which can manage every branch in 47a45cf

* [release] bump 6.8 branch to 6.8.12-SNAPSHOT

This commit bump the 6.8 branch which will be dedicated to the 6.8.x releases for the Helm Charts. It will allow to:
- test this branch with the daily Stack Docker images 6.8.12-SNAPSHOT via dedicated Jenkins jobs

* update toc

* fix indentation

* bump image version and format tables

* fix spaces

* bump version

* Revert "bump version"

This reverts commit 73907ab.

* update version in goss tests

[release] This PR bumps chart version and Docker images from SNAPSHOT to release for 6.8.12

See [New branching model](https://github.com/elastic/helm-charts/blob/master/BREAKING_CHANGES.md#new-branching-model) for more details.

This PR bumps chart version and Docker images used to 6.8.13-SNAPSHOT to test 6.8.13 development version

See [New branching model](https://github.com/elastic/helm-charts/blob/master/BREAKING_CHANGES.md#new-branching-model) for more details.

This PR fix CI builds failing because GKE 1.14 is no more available in GCP

Co-authored-by: Julien Mailleret <8582351+jmlrt@users.noreply.github.com>

Co-authored-by: Julien Mailleret <8582351+jmlrt@users.noreply.github.com>

Co-authored-by: Julien Mailleret <8582351+jmlrt@users.noreply.github.com>

…c#810)

Kubernetes doesn't accept `_` characters in resources names.
This commit fix the secrets names in the examples we provide by
replacing `_` by `-`which Kubernetes is accepting.

Source: helm/helm#6477

This PR disable nss dentry cache for Elasticsearch and Kibana
readinessProbe.

On affected system (nss < 3.52), the curl commands used by
readinessProbe are filling dentry cache which is observed in some
cases to be never reclaimed.

Elasticsearch and Kibana Docker images are based on CentOS 7 which
is using nss-3.44.0-7.el7_7.x86_64 and are affected by this bug.

This PR disable nss dentry cache in readinessProbe as a
workaround.

…stic#717)

* [metricbeat] support deployment/daemonset specific metrics
* chore: rename test_adding_legacy_labels to test_adding_deprecated_labels

Co-authored-by: Julien Mailleret <8582351+jmlrt@users.noreply.github.com>

This commit fix an issue introduced in 8ed75a9 where helm
install/upgrade is failing if a NodePort service is defined (see [0] for
more details).

Logstash headless service used to manage Statefulset does not anymore include
`.Values.service.ports` and include only Logstash httpPort.

This is done because headless service `ports` doesn't accept `nodePort`
values that can be included in `.Values.service.ports` when adding a
NodePort service.

[0]: elastic#807

If for daemonset/deployment is not enabled, dont generate useless config YAML.

* Update charts readme with instruction for dev and release installs
* Reword warning statement on dev branch README
* Fix TOC
* Reword warning statement

* Bump version to 6.8.13

Co-authored-by: Nassim Kammah <nassim.kammah@elastic.co>

Co-authored-by: Nassim Kammah <nassim.kammah@elastic.co>

This commit add a coordinator node group to elasticsearch multi test.
This also add ml and remote_cluster_client roles to default values.

This commit fix a bug introduced in 702ca8f where elasticsearch 6.8
start is failing because ml and remote_cluster_client node roles
are unavailable in 6.8 versions.

- Bump Helm version used in tests from 2.16.2 to 2.17.0
- Add CI tests on GKE 1.17

…c#882)

This commit update metricbeat chart dependencies to get
kube-state-metrics subchart from the newly relocated stable repo url
(https://charts.helm.sh/stable).

This is required because the legacy stable repo url will not work
anymore starting November 13th.

More details in https://helm.sh/blog/new-location-stable-incubator-charts/

This commit updates Kubernetes [rbac.authorization.k8s.io][0] api from
v1beta1 in apm-server, filebeat and metricbeat charts.

- `rbac.authorization.k8s.io/v1` has been released in Kubernetes 1.8
- `rbac.authorization.k8s.io/v1beta1` is being deprecated in Kubernetes
1.17 and will be fully removed in 1.22

In addition, this is required for Helm 3 support to make
`helm lint --strict` happy.

[0]: https://kubernetes.io/docs/reference/access-authn-authz/rbac/

This commit increase the timeout for helm upgrade commands examples to
avoid timeout error when deploying all example releases in // in helm
test gke cluster.

* bump helm version to helm 3.4.1
* update doc to make helm 3 the recommended version
* update helm commands arguments for helm 3
* remove helm init and tiller install commands
* add stable repo for metricbeat dependencies
* remove the charts dance in helmignore (related to elastic#127)
* optimize docker images
* replace deprecated gitversion capability (related to helm/helm#5601)
* remove some heritage labels in immutable fields