Basic authentication on ES helm chart

Elastic Stack Elasticsearch
,
9

You can do that, however it will prevent a some features (e.g. API Keys) from being enabled.

No, if you run a cluster on https, then the client needs to decide whether to trust the certificate that is provided by the server. There are 3 main ways that could happen:

  1. Your server uses a certificate that is issued by one of the default issuing authorities (CAs) that your client already trusts.
  2. Your client is configured to trust a specific certificate or CA for this specific connection (e.g. using the --cacert option to curl)
  3. Your client just trusts everything (e.g. the --insecure option to curl).

Any of those will be more secure than turning off ssl.

1 Like