helm-charts icon indicating copy to clipboard operation
helm-charts copied to clipboard

Successful TLS certificate configuration by helm charts

Open LSangdarui opened this issue 1 year ago • 1 comments

Describe the bug I want to configure the TLS certificate and deploy opensearch2.5.0 through help chart. The reference is https://opensearch.org/docs/2.5/install-and-configure/install-opensearch/helm/ . Now opensearch 2.5.0 is running, but if I want to configure the TLS certificate and access the opensearch cluster through the domain name, what about the configuration. Is there a ready-made reference configuration instead of the parameter description on the official website Expected behavior

Host/Environment (please complete the following information):

  • Helm Version: v3.11.0 NAME NAMESPACE STATUS CHART APP VERSION opensearch thor-log-dev 1 deployed opensearch-2.10.0 2.5.0
  • Kubernetes Version: kubectl version WARNING: This version information is deprecated and will be replaced with the output from kubectl version --short. Use --output=yaml|json to get the full version. Client Version: version.Info{Major:"1", Minor:"26", GitVersion:"v1.26.1", GitCommit:"8f94681cd294aa8cfd3407b8191f6c70214973a4", GitTreeState:"clean", BuildDate:"2023-01-18T15:51:24Z", GoVersion:"go1.19.5", Compiler:"gc", Platform:"darwin/arm64"} Kustomize Version: v4.5.7 Server Version: version.Info{Major:"1", Minor:"23", GitVersion:"v1.23.1", GitCommit:"86ec240af8cbd1b60bcc4c03c20da9b98005b92e", GitTreeState:"clean", BuildDate:"2021-12-16T11:34:54Z", GoVersion:"go1.17.5", Compiler:"gc", Platform:"linux/amd64"

LSangdarui avatar Mar 03 '23 08:03 LSangdarui

[Triage] Hey @LSangdarui, thanks for raising an issue, if I'm not wrong you want to access the cluster with custom cert and domain name like https://example.com? if so then you can leverage running nginx and connect to existing OpenSearch, with the current chart ingress is already created, you just need to deploy nginx helm chart and point to OpenSearch ingress. Nginx has a way to use your custom TLS cert passing as secret and front end the https URL. Ref: https://github.com/kubernetes/ingress-nginx @bbarani @rishabh6788 Thank you

prudhvigodithi avatar Mar 07 '23 21:03 prudhvigodithi