search

jetstack / navigator

Managed Database-as-a-Service (DBaaS) on Kubernetes
Apache License 2.0
271 stars 31 forks source link

Support X-Pack security #200

Open munnerz opened 6 years ago

munnerz commented 6 years ago

Elasticsearch optionally supports security through X-Pack (when using a non-basic license).

Currently, it's hard coded to disabled x-pack auth in order to simplify the Pilot (as it's local elasticsearch client will need securely telling how to communicate with the ES API).

If the user has a valid non-basic license installed, we should allow the user to configure security/users/groups.

/kind feature /area elasticsearch

munnerz commented 6 years ago

As of Elasticsearch 6.x, x-pack security now requires TLS is configured on all nodes in order to use.

In order to manage this, it'd be ideal if we could utilise cert-manager in some form (to save duplicating CA management efforts).

wallrj commented 6 years ago

Part of: https://github.com/jetstack/navigator/issues/362