Add unified logs platform with Helm-managed central Elasticsearch.

Deploy cloudhost-logging on cluster registration, ship app and optional service logs to ES with owner isolation, and fix Kibana 8.12 auth via kibana_system.

Co-authored-by: Cursor <cursoragent@cursor.com>

backend/src/clusters/clusters.service.ts

@@ -1,4 +1,4 @@
-import { Injectable, NotFoundException, Logger, BadRequestException } from '@nestjs/common';
+import { Injectable, NotFoundException, Logger, BadRequestException, Inject, forwardRef } from '@nestjs/common';
 import { InjectRepository } from '@nestjs/typeorm';
 import { ConfigService } from '@nestjs/config';
 import { Repository, DataSource, In } from 'typeorm';
@@ -8,6 +8,7 @@ import { ClusterPool } from './entities/cluster-pool.entity';
 import { CreateClusterDto, UpdateClusterDto } from './dto/cluster.dto';
 import { CreateClusterPoolDto, UpdateClusterPoolDto } from './dto/cluster-pool.dto';
 import { ClusterStatus } from '../common/enums';
+import { ElasticsearchService } from '../kubernetes/elasticsearch.service';
 
 @Injectable()
 export class ClustersService {
@@ -22,6 +23,8 @@ export class ClustersService {
     private poolsRepository: Repository<ClusterPool>,
     private dataSource: DataSource,
     private configService: ConfigService,
+    @Inject(forwardRef(() => ElasticsearchService))
+    private elasticsearchService: ElasticsearchService,
   ) {}
 
   /**
@@ -81,6 +84,11 @@ export class ClustersService {
       this.logger.error(`Failed to bootstrap cluster "${saved.name}": ${err.message}`);
     });
 
+    // Deploy central logging (Elasticsearch + Kibana) via Helm
+    this.elasticsearchService.deploy(saved.id).catch((err) => {
+      this.logger.error(`Failed to deploy central logging on "${saved.name}": ${err.message}`);
+    });
+
     return saved;
   }