Hi All, I'm having a hard time setting up a repository with repository-s3 plugin and a ceph object store. I'm using elasticsearch:7.13.2 I used the following configurations: in elasticsearch.yml: s3: client: default: endpoint: <ceph endpoint> proxy: host: <proxy host> …

[image] raphaelSeguin: elasticsearch-keystore add-file s3.client.default.picerts That's not a setting that Elasticsearch knows about, so this won't do anything. Can you explain how you ended up trying to set a setting with this name? Maybe there's some bad docs somewhere that need fixing. Re…

I can now stop messing around with elasticsearch-keystore. I'll use jdk/bin/keytool in my container instead then. Would you know where this JVM-wide trust store sits in the elasticsearch container ? Or do I need to create this truststore from scratch and pass the java option in the ES_JAVA_OPTS en…

Great, thanks for working out the details and sharing them. One thing to be aware of is that I think this will replace the JVM's trust store with your custom one containing a single trusted CA certificate. That will fix communications with your Ceph system but means that anything else in Elasticsea…

I opened a feature request for support for more fine-grained control over the truststore used by a repository, rather than having to override the JVM-wide default: Add support for per-repository truststore opened 04:25PM - 31 Aug 21 UTC (U…

Configure certificate for repository-s3 with ceph

Elastic Stack Elasticsearch

raphaelSeguin (Raphaël Seguin) August 27, 2021, 1:37pm 4

I made a truststore

keytool -import -alias ceph -file ceph.crt -keystore ceph.jks

and then passed the file and password:

ES_JAVA_OPTS=-Xms2048m -Xmx2048m \
  -Djavax.net.ssl.trustStore=/usr/share/elasticsearch/config/ceph.jks \
  -Djavax.net.ssl.keyStorePassword=secretpasswordyoudontknow"

And now it works !
Thanks !!

Topic		Replies	Views
I cant access S3 repo CEPH using repository-s3 Elasticsearch	1	1486	May 11, 2019
How to give s3 client and server certificates to s3 repository client Elasticsearch	1	1484	February 10, 2020
Repository-s3 plugin does not support S3-compatible services as documentation says Elasticsearch snapshot-and-restore	2	815	February 10, 2021
Not able to create S3 Repo Elasticsearch	1	833	August 23, 2018
How to add certificates to java keystore Elastic Cloud on Kubernetes (ECK)	4	2643	April 14, 2020

Configure certificate for repository-s3 with ceph

Related topics