Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

rip out tls for now #32

Merged
merged 1 commit into from
Aug 31, 2022
Merged

rip out tls for now #32

merged 1 commit into from
Aug 31, 2022

Conversation

jaketf
Copy link
Contributor

@jaketf jaketf commented Aug 31, 2022

spoke with @xpositivityx and for now we will move forward with opensearch w/o TLS and fluentbit talking to it with the demo admin user. reasoning being the only way this service will be exposed for now requires kubectl portforward access.

to add back the TLS support and using a more secure username / password for fluentbit has been captured in this issue #31

Copy link
Contributor

@WillBeebe WillBeebe left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks like it simplifies quite a bit 👍

Copy link
Contributor

@chrisghill chrisghill left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

FYI, this might be hard to back out of down the road. Changing these certificates will probably cause the primary nodes to not trust each other, so when we restart a primary it probably won't hit "ready". All primaries will need to be restarted at once.

@jaketf jaketf merged commit 5fc9525 into main Aug 31, 2022
@jaketf jaketf deleted the rip-out-tls branch August 31, 2022 20:47
chrisghill pushed a commit that referenced this pull request Dec 27, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants