Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support auth for Elasticsearch janitor #64

Closed
tamalsaha opened this issue Jul 27, 2017 · 3 comments

Comments

Projects
None yet
2 participants
@tamalsaha
Copy link
Member

commented Jul 27, 2017

No description provided.

@tamalsaha

This comment has been minimized.

Copy link
Member Author

commented Aug 10, 2017

Example setup:
https://github.com/upmc-enterprises/elasticsearch-operator elasticsearch-operator with an image using search-guard-ssl.
ES version 5.5.0 also.
TLS client cert.

@tamalsaha tamalsaha assigned tamalsaha and unassigned tamalsaha Aug 10, 2017

@tamalsaha

This comment has been minimized.

Copy link
Member Author

commented Aug 10, 2017

func NewClient(options ...ClientOptionFunc) (*Client, error) {
func SetHttpClient(httpClient *http.Client) ClientOptionFunc {

Then we can set client TLS, in that http client.
https://github.com/appscode/go/blob/master/net/httpclient/httpclient.go#L86

something like this will do, I believe

@tamalsaha tamalsaha added this to the 4.1.0 milestone Sep 5, 2017

@tamalsaha tamalsaha modified the milestones: 4.0.0, 4.1.0 Sep 5, 2017

@tamalsaha

This comment has been minimized.

Copy link
Member Author

commented Sep 19, 2017

- kind: Elasticsearch
  ttl: 2160h
  elasticsearch:
    version: 5.0
    endpoint: http://elasticsearch-logging.kube-system:9200
    logIndexPrefix: logstash-
    secretName: <>

https://github.com/upmc-enterprises/elasticsearch-operator

secret format

type AuthInfo struct {
	CACertData string `envconfig:"CA_CERT_DATA"`
	ClientCertData string `envconfig:"CLIENT_CERT_DATA"`
	ClientKeyData string `envconfig:"CLIENT_KEY_DATA"`

	Port       int    `envconfig:"PORT" default:"56977"`
	Username   string `envconfig:"USERNAME"`
	Password   string `envconfig:"PASSWORD"`
	Token      string `envconfig:"TOKEN"`
}

create test secret

https://github.com/appscode/searchlight/blob/master/docs/hostfacts.md

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.