Expose the service externally

pires / kubernetes-elasticsearch-cluster

Elasticsearch cluster on top of Kubernetes made easy.

Apache License 2.0

1.51k stars 690 forks source link

Expose the service externally #143

Closed khfayzullaev closed 6 years ago

khfayzullaev commented 6 years ago

LoadBalancer: Exposes the service externally using a cloud provider’s load balancer. NodePort and ClusterIP services, to which the external load balancer will route, are automatically created.

pires commented 6 years ago

I'm sorry but this would, by default, open your Elasticsearch cluster to the world. We did this in the past and decided to remove it. Would be great if it could be documented or somehow opt-in.

thiru85-zz commented 6 years ago

This can be alleviated by (I wager it may not be the best way) having a reverse proxy in place. I tried this with the GCP Endpoint Service Proxy and that seems to be a relatively easy way to include "authentication" to access the ES cluster.

Thoughts?

khfayzullaev commented 6 years ago

@pires I see your point. Well, now it is just a comment. I have updated the README too. It is up too you to merge or not this PR. If you think that it is better to keep it out of this project, close this PR 👍