Elastic cloud with auth but without https

hello,

I wonder the proper way to disable https but remain authentication for this example https://www.elastic.co/guide/en/cloud-on-k8s/current/k8s-quickstart.html#k8s-deploy-eck

Hello,

In 0.9, you can explicitly disable TLS for Kibana or APM Server as shown here: https://www.elastic.co/guide/en/cloud-on-k8s/current/k8s-accessing-elastic-services.html#k8s-disable-tls.

The same behaviour has recently been added for Elasticsearch (https://github.com/elastic/cloud-on-k8s/pull/1623) and will be possible in the next release.

Thank you, @Thibault_Richard

BTW, is ECK described here https://www.elastic.co/guide/en/cloud-on-k8s/current/k8s-quickstart.html#k8s-deploy-eck free?

TL;DR Yes, the default distribution of ECK is free.

Since the early days of Elasticsearch, Elastic's goal has always been to provide new users with a rich getting started experience by packing a lot of powerful features into the free, default distribution. ECK is no different.

The default distribution of ECK is forever free under the Basic license (https://www.elastic.co/subscriptions). In the spirit of openness and transparency, Elastic has also made all the source code for ECK publicly viewable, licensed under the Elastic License, in the Elastic cloud-on-k8s GitHub repository.

An Enterprise (paid) subscription enables additional features, including the ability to deploy clusters with advanced features such as field- and document-level access control, machine learning, graph analytics, and more. In the future, the Enterprise subscription will also unlock additional advanced orchestration features.

1 Like

Hi @Thibault_Richard

Do you know what might be the reason of getting timeout error while loggining into kibana with elastic username (both http/https) with port-forward to localhost? This issue doesn't occur while using helm charts

{"statusCode":503,"error":"Service Unavailable","message":"Request Timeout after 30000ms"} 

{"type":"response","@timestamp":"2019-09-07T20:38:01Z","tags":[],"pid":1,"method":"post","statusCode":503,"req":{"url":"/api/security/v1/login","method":"post","headers":{"host":"localhost:5601","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:69.0) Gecko/20100101 Firefox/69.0","accept":"application/json, text/plain, */*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","content-type":"application/json;charset=utf-8","kbn-version":"7.2.0","content-length":"60","connection":"keep-alive","referer":"http://localhost:5601/login?next=%2F"},"remoteAddress":"127.0.0.1","userAgent":"127.0.0.1","referer":"http://localhost:5601/login?next=%2F"},"res":{"statusCode":503,"responseTime":38458,"contentLength":9},"message":"POST /api/security/v1/login 503 38458ms - 9.0B"}