# Opendistro security plugin and kubernetes readiness probe

**URL:** <https://discuss.elastic.co/t/opendistro-security-plugin-and-kubernetes-readiness-probe/187005>\
**Category:** Elasticsearch\
**Created:** [June 23, 2019, 12:35pm UTC](https://discuss.elastic.co/t/opendistro-security-plugin-and-kubernetes-readiness-probe/187005 "2019-06-23T12:35:22Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Tom\_Klinorain](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tom_klinorain/32/48591_2.png) [@Tom\_Klinorain](https://discuss.elastic.co/u/Tom_Klinorain)\
**Post date:** [June 23, 2019, 12:35pm UTC](https://discuss.elastic.co/t/opendistro-security-plugin-and-kubernetes-readiness-probe/187005/1 "2019-06-23T12:35:22Z")

</div>

Hi guys,

I'm trying to setup elasticsearch with opendistro security plugin.  
Since my elasticsearch setup is a kubernetes statefulset, this introduced the following problem:  
elastic has began responding to all http calls to 9200 with an error unless communication is done over https with valid client certs. This is mostly okay only that it also does that for the health api (/\_cluster/health).  
In my kubernetes setup, there is a readiness probe checking that api and failing, since it does not have the client certificates (I'm not sure if it's even possible to have a readiness probe that uses client certificates)  
In order for the cluster to function well in my environment, I need the readiness probe to pass, if it doesn't, kubernetes will not start the other nodes, and will also kill the node that did not answer a "200 Okay" on its readiness probe.

So my question is: Can I enable tls but allow the health API to respond to requests without client certificates? Or, any other ideas about getting the opendistro security plugin to work in kubernetes?

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [June 23, 2019, 12:37pm UTC](https://discuss.elastic.co/t/opendistro-security-plugin-and-kubernetes-readiness-probe/187005/2 "2019-06-23T12:37:38Z")

</div>

I would recommend [opening an issue at the OpenDistro forum](https://discuss.opendistrocommunity.dev/latest).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 21, 2019, 12:37pm UTC](https://discuss.elastic.co/t/opendistro-security-plugin-and-kubernetes-readiness-probe/187005/3 "2019-07-21T12:37:43Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.