Support TLS with recent Solr 9.x versions

apache / solr-operator

Official Kubernetes operator for Apache Solr

https://solr.apache.org/operator

Apache License 2.0

243 stars 112 forks source link

Support TLS with recent Solr 9.x versions #610

Closed HoustonPutman closed 9 months ago

HoustonPutman commented 10 months ago

Resolves #609

This is a WIP

There are various things that Solr 9.4+ will help with, but we need to support 8.11 at the very least.

Therefore, this is a part of #616

Basically we need to:

[x] Make sure the hostname for the Solr API is always correct
[x] Use the solr api command instead of invoking SolrCLI explicitly
[x] Mention SOLR_TOOL_OPTS in the future Solr version usages, and find a workaround for 8.11/9.3
[x] Changelog entry
[x] Upgrade Notes
[x] Supported Versions matrix

HoustonPutman commented 10 months ago

Thanks to SOLR-16964, Solr 9.4 will come with the correct SNI hostCheck default given the value of CheckPeerName. Because of this, and the fact that we only really will support SSL for 9.4+, we don't need to set this value. (And it isn't an issue in 8.11, so 8.11 and 9.4+ will work without this setting).

sarkaramrit2 commented 8 months ago

Thank you @HoustonPutman