Skip to content

Conversation

@fabianaromagnoli
Copy link
Member

This PR makes ESB work when Elasticsearch has security pack enabled and requires authentication with username and password.

"doctrine/annotations": "^1.8",
"ramsey/uuid": "^3.8",
"webgriffe/amp-elasticsearch": "^2.1",
"webgriffe/amp-elasticsearch": "dev-allow-es-authentication",
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This will be changed to require the correct release version of webgriffe/amp-elasticsearch

- "discovery.type=${ES_DISCOVERY_TYPE:-single-node}"
- "ES_JAVA_OPTS=${ES_JAVA_OPTS:--Xms512m -Xmx512m}"
- xpack.security.enabled=true
- action.destructive_requires_name= false # because in unit tests setup we delete all indexes, and wildcards and _all are not allowed with security enabled
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This should be removed: it needs to work also with this restriction active. We use _all wildcard in tests/KernelTestCase.php:106, but we could remove that, reading all indexes first (I think the _all wildcard is allowed when reading), and deleting them one by one.

- method: 'setCredentials'
arguments:
- '%elasticsearch_user%'
- '%elasticsearch_password%'
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What if someone is working with Elasticsearch without the security pack, meaning no user/password authentication is required? We need to ensure backward compatibility and support scenarios where a username and password are not provided.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants