I've read that setting up TLS between nodes in live cluster requires full cluster restart. When I set TLS on a node it will stop communicating with other nodes until they are reconfigured too.
So could someone please explain how to avoid split-brain or data loss in this scenario?
Of course i need to stop shard relocation during this process. But what else should i do?
See https://www.elastic.co/guide/en/elasticsearch/reference/current/restart-upgrade.html. You could follow steps until 4. Then shutdown all your nodes, configure them for TLS and start them again.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.