[RFE] OSD should not disable `secure_authentication` if sitting behind TLS-terminated LB

canonical / opensearch-dashboards-operator

Opensearch Dashboards Juju Charm

Apache License 2.0

0 stars 1 forks source link

[RFE] OSD should not disable `secure_authentication` if sitting behind TLS-terminated LB #137

Open phvalguima opened 1 hour ago

phvalguima commented 1 hour ago

Currently, OSD will disable secure_authentication if certificates endpoint is not related to anything. However, there is one scenario where we can have a TLS-terminated LB backed by HTTP-only OSDs. In this case, it makes sense to keep secure_authentication.

I recommend we have an option instead for secure_authentication. If both option + TLS not available, then we disable the secure_auth feature.

syncronize-issues-to-jira[bot] commented 1 hour ago

Thank you for reporting us your feedback!

The internal ticket has been created: https://warthogs.atlassian.net/browse/DPE-6068.

This message was autogenerated