Destination ElasticSearch strict encrypt

[VitaliiMaltsev]

What

It is currently possible to set up ES destination with authentication method = "none". This should not be allowed in Airbyte Cloud as it exposes publicly exploitable ES installations.

How

Added a strict-encrypt version for destination Elasticsearch

Recommended reading order

1. x.java
2. y.python

🚨 User Impact 🚨

No breaking changes. New connector

Pre-merge Checklist

Expand the relevant checklist and delete the others.

New Connector

Community member or Airbyter

• Community member? Grant edit access to maintainers (instructions)
• Secrets in the connector's spec are annotated with airbyte_secret
• Unit & integration tests added and passing. Community members, please provide proof of success locally e.g: screenshot or copy-paste unit, integration, and acceptance test output. To run acceptance tests for a Python connector, follow instructions in the README. For java connectors run ./gradlew :airbyte-integrations:connectors:<name>:integrationTest.
• Code reviews completed
• Documentation updated
  • Connector's README.md
  • Connector's bootstrap.md. See description and examples
  • docs/integrations/<source or destination>/<name>.md including changelog. See changelog example
  • docs/integrations/README.md
  • airbyte-integrations/builds.md
• PR name follows PR naming conventions

Airbyter

If this is a community PR, the Airbyte engineer reviewing this PR is responsible for the below items.

• Create a non-forked branch based on this PR and test the below items on it
• Build is successful
• If new credentials are required for use in CI, add them to GSM. Instructions.
• /test connector=connectors/<name> command is passing
• New Connector version released on Dockerhub by running the /publish command described here
• After the connector is published, connector added to connector index as described here
• Seed specs have been re-generated by building the platform and committing the changes to the seed spec files, as described here

Updating a connector

Community member or Airbyter

• Grant edit access to maintainers (instructions)
• Secrets in the connector's spec are annotated with airbyte_secret
• Unit & integration tests added and passing. Community members, please provide proof of success locally e.g: screenshot or copy-paste unit, integration, and acceptance test output. To run acceptance tests for a Python connector, follow instructions in the README. For java connectors run ./gradlew :airbyte-integrations:connectors:<name>:integrationTest.
• Code reviews completed
• Documentation updated
  • Connector's README.md
  • Connector's bootstrap.md. See description and examples
  • Changelog updated in docs/integrations/<source or destination>/<name>.md including changelog. See changelog example
• PR name follows PR naming conventions

Airbyter

If this is a community PR, the Airbyte engineer reviewing this PR is responsible for the below items.

• Create a non-forked branch based on this PR and test the below items on it
• Build is successful
• If new credentials are required for use in CI, add them to GSM. Instructions.
• /test connector=connectors/<name> command is passing
• New Connector version released on Dockerhub and connector version bumped by running the /publish command described here

Connector Generator

• Issue acceptance criteria met
• PR name follows PR naming conventions
• If adding a new generator, add it to the list of scaffold modules being tested
• The generator test modules (all connectors with -scaffold in their name) have been updated with the latest scaffold by running ./gradlew :airbyte-integrations:connector-templates:generator:testScaffoldTemplates then checking in your changes
• Documentation which references the generator is updated as needed

Tests

Unit

Put your unit tests output here.

Integration

Put your integration tests output here.

Acceptance

Put your acceptance tests output here.

[github-actions]

NOTE ⚠️ Changes in this PR affect the following connectors. Make sure to run corresponding integration tests:

• destination-elasticsearch-strict-encrypt
• destination-elasticsearch

[VitaliiMaltsev]

/test connector=connectors/destination-elasticsearch-strict-encrypt

🕑 connectors/destination-elasticsearch-strict-encrypt https://github.com/airbytehq/airbyte/actions/runs/3081457152
✅ connectors/destination-elasticsearch-strict-encrypt https://github.com/airbytehq/airbyte/actions/runs/3081457152
No Python unittests run

Build Passed

Test summary info:

All Passed

[github-actions]

NOTE ⚠️ Changes in this PR affect the following connectors. Make sure to run corresponding integration tests:

• destination-elasticsearch-strict-encrypt
• destination-elasticsearch

[github-actions]

NOTE ⚠️ Changes in this PR affect the following connectors. Make sure to run corresponding integration tests:

• destination-elasticsearch-strict-encrypt
• destination-elasticsearch

[alexandr-shegeda]

LGTM. we can proceed with publishing and merging without airbyte review

[VitaliiMaltsev]

/publish connector=connectors/destination-elasticsearch-strict-encrypt

🕑 Publishing the following connectors:
connectors/destination-elasticsearch-strict-encrypt
https://github.com/airbytehq/airbyte/actions/runs/3099080899

Connector	Did it publish?	Were definitions generated?
connectors/destination-elasticsearch-strict-encrypt	✅	❌

if you have connectors that successfully published but failed definition generation, follow step 4 here ▶️

[github-actions]

NOTE ⚠️ Changes in this PR affect the following connectors. Make sure to run corresponding integration tests:

• destination-elasticsearch
• destination-elasticsearch-strict-encrypt