added api info for reloadcerts (#753)

Signed-off-by: cwillum <cwmmoore@amazon.com>
This commit is contained in:
cwillum 2022-07-05 07:58:50 -07:00 committed by GitHub
parent ff4a818965
commit d4738c73b1
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 22 additions and 0 deletions

View File

@ -1326,6 +1326,28 @@ GET _plugins/_security/api/ssl/certs
]
}
```
### Reload certificates
Introduced 1.0
{: .label .label-purple }
Reloads SSL certificates that are about to expire without restarting the OpenSearch node.
This call assumes that new certificates are in the same location specified by the security configurations in opensearch.yml. To keep sensitive certificate reloads secure, this call only allows hot reload with certificates issued by the same issuer and subject DN and SAN with expiry dates after the current certificate.
#### Request
```
PUT _opendistro/_security/api/ssl/transport/reloadcerts
PUT _opendistro/_security/api/ssl/http/reloadcerts
```
#### Sample response
```json
{
"message": "updated http certs"
}
```
---
## Cache