-
Notifications
You must be signed in to change notification settings - Fork 8.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Adding option to always present the certificate when connecting to ES #24304
Conversation
💚 Build Succeeded |
retest |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM pending green CI!
@@ -42,7 +42,8 @@ export default function (kibana) { | |||
certificateAuthorities: array().single().items(string()), | |||
certificate: string(), | |||
key: string(), | |||
keyPassphrase: string() | |||
keyPassphrase: string(), | |||
alwaysPresentCertificate: boolean().default(false), |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think we'll need this in monitoring too, iirc it uses its own copy if url is set.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Good call, thanks JBudz
Dearest Jenkins, please test this. |
💚 Build Succeeded |
…elastic#24304) * Adding option to always present the certificate when connecting to ES * Updating docs * Adding some more tests * Adding alwaysPresentCertificate option to monitoring
Pinging @elastic/kibana-security |
Resolves #22643
"Release Note: Added option to always present certificate when connecting to Elasticsearch using
elasticsearch.ssl.alwaysPresentCertificate: true