mirror of
https://github.com/honeymoose/OpenSearch.git
synced 2025-02-11 15:35:05 +00:00
a224b54973
This puts one keystore in the SSLService. An optional truststore can be configured but the keystore defaults as the truststore. This change also removed the ability to do certificate authentication with clients. Resolves https://github.com/elasticsearch/elasticsearch-shield/issues/292 Original commit: elastic/x-pack-elasticsearch@59920db32a
42 lines
1.3 KiB
Plaintext
42 lines
1.3 KiB
Plaintext
{
|
|
"defaults": {
|
|
"plugins": [ "lmenezes/elasticsearch-kopf", { "name": "shield", "path" : "file:./target/releases/elasticsearch-shield-1.0.0-SNAPSHOT.zip" } ],
|
|
"config" : {
|
|
"cluster": { "name": "shield" },
|
|
"indices.store.throttle.max_bytes_per_sec": "100mb",
|
|
"discovery" : {
|
|
"type" : "zen",
|
|
"zen.ping.multicast.enabled": false,
|
|
"zen.ping.unicast.hosts" : [ "localhost:9300", "localhost:9301" ]
|
|
},
|
|
"shield" : {
|
|
"enabled" : true,
|
|
"system_key.file": ".esvm-shield-config/system_key",
|
|
"audit.enabled" : false,
|
|
"transport.ssl": true,
|
|
"http.ssl": true,
|
|
"ssl" : {
|
|
"keystore" : "src/test/resources/org/elasticsearch/shield/transport/ssl/certs/simple/testnode.jks",
|
|
"keystore_password" : "testnode"
|
|
},
|
|
"authc": {
|
|
"esusers.files" : {
|
|
"users" : ".esvm-shield-config/users",
|
|
"users_roles" : ".esvm-shield-config/users_roles"
|
|
}
|
|
},
|
|
"authz.store.files.roles" : ".esvm-shield-config/roles.yml"
|
|
}
|
|
}
|
|
},
|
|
"clusters": {
|
|
"shield": {
|
|
"version": "1.4",
|
|
"nodes": [
|
|
{ "node": { "name": "node01" } },
|
|
{ "node": { "name": "node02" } }
|
|
]
|
|
}
|
|
}
|
|
}
|