Hi there.
I've read that setting up TLS between nodes in live cluster requires full cluster restart. When I set TLS on a node it will stop communicating with other nodes until they are reconfigured too.
So could someone please explain how to avoid split-brain or data loss in this scenario?
Of course i need to stop shard relocation during this process. But what else should i do?
Thanks.
See https://www.elastic.co/guide/en/elasticsearch/reference/current/restart-upgrade.html. You could follow steps until 4. Then shutdown all your nodes, configure them for TLS and start them again.