Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[DOCS] Add information for setting up Elasticsearch S3 snapshot repo with custom CA #5652

Closed
a03nikki opened this issue May 10, 2022 · 0 comments · Fixed by #5969
Closed
Assignees
Labels
>docs Documentation

Comments

@a03nikki
Copy link
Contributor

a03nikki commented May 10, 2022

Proposal

Expand the documentation for setting up Elasticsearch snapshots to include S3.

Use case. Why is this important?

Create automated snapshots (v2.2) documentation only includes an example for Google Cloud Storage (GCS). It would be helpful if there was also an example and directions for S3 both AWS and S3-compatable services. AWS' S3 is easier to set-up because it does not involve dealing with TLS settings that S3-compable services, such as Minio and Ceph, that may use custom CAs.

There is elastic/elasticsearch#77081 to make managing the certificates easier for the repositories so users no longer need to edit the "JVM-wide trustore":

By default Elasticsearch communicates with your storage system using HTTPS, and validates the repository’s certificate chain using the JVM-wide truststore. Ensure that the JVM-wide truststore includes an entry for your repository.

However, an example and directions for using Minio (the recommended non-AWS S3 provider for ECE) or another S3-compatable service with HTTPS and certificates is still needed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
>docs Documentation
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants