Why OpenSearch Operator Should Not Manage Certificates Independently" #913
CoderYellow
started this conversation in
Ideas
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
When deploying OpenSearch in an enterprise environment, it is common to use a custom enterprise CA for certificate management. However, the OpenSearch Operator has several issues with handling custom HTTP CAs. Additionally, managing certificates (e.g., signing, rotating, and distributing the OpenSearch-generated CA to clients for trust) is a complex and error-prone process.
To address this, I believe it’s better to leverage specialized frameworks like Cert-Manager or AutoCert for certificate management. These tools are designed to handle the lifecycle of certificates more efficiently and reliably, aligning with enterprise standards.
Thoughts?
Beta Was this translation helpful? Give feedback.
All reactions