OpenSearch/plugins/discovery-ec2
Albert Zaharovits 3378240b29
Reload secure settings for plugins (#31383)
Adds the ability to reread and decrypt the local node keystore.
Commonly, the contents of the keystore, backing the `SecureSettings`,
are not retrievable except during node initialization. This changes that
by adding a new API which broadcasts a password to every node. The
password is used to decrypt the local keystore and use it to populate
a `Settings` object that is passes to all the plugins implementing the
`ReloadablePlugin` interface. The plugin is then responsible to do
whatever "reload" means in his case. When the `reload`handler returns,
the keystore is closed and its contents are no longer retrievable.
Password is never stored persistently on any node.
Plugins that have been moded in this commit are: `repository-azure`,
`repository-s3`, `repository-gcs` and `discovery-ec2`.
2018-06-18 09:42:11 +03:00
..
config/discovery-ec2 Configure AWS SDK logging configuration 2016-09-03 06:41:07 -04:00
licenses Upgrade AWS SDK Jackson Databind to 2.6.7.1 2017-11-13 12:05:14 -05:00
qa Add QA project and fixture based test for discovery-ec2 plugin (#31107) 2018-06-15 15:49:14 +02:00
src Reload secure settings for plugins (#31383) 2018-06-18 09:42:11 +03:00
build.gradle Add QA project and fixture based test for discovery-ec2 plugin (#31107) 2018-06-15 15:49:14 +02:00