Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add prompts for security on OpenSearch and ElasticSearch services #288

Merged
merged 1 commit into from
Dec 26, 2022

Conversation

datashaman
Copy link
Contributor

@datashaman datashaman commented May 26, 2022

Using the search services without security is not simply a case of changing client config, the services need to be configured as well.

This makes using Opensearch and Elasticsearch without security or SSL possible. The defaults are set to secure.

Note that the opensearch change enables HTTP access, which is less troublesome than HTTPS.

The Elasticsearch change enables access without having to provide username and password like:

curl http://elastic:changeme@127.0.0.1:9200

HTTPS access on Elasticsearch is only available to paid subscriptions and requires a license key, which I dont think this tool would use.

@datashaman datashaman marked this pull request as draft May 26, 2022 15:24
@datashaman datashaman marked this pull request as ready for review May 26, 2022 15:36
@mattstauffer mattstauffer merged commit cb1cfcf into tighten:main Dec 26, 2022
@mattstauffer
Copy link
Member

Thanks @datashaman!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants