Certificate
![Card image cap](https://stoeps.de/posts/2022/update-elasticsearch-certificates/renaldo-matamoro-WzgnhsodeqU-unsplash_hud151d2b86ef3afb45a13879274dc93cf_1584887_350x175_fill_q75_box_smart1.jpg)
Elasticsearch in HCL Connections Componentpack is secured with Searchguard and needs certificates to work properly. These certificates are generated by bootstrap during the initial container deployment with helm
.
These certificates are valid for 10 years (chain_ca.pem
) or 2 years (elasticsearch*.pem
) and stored in the Kubernetes secrets elasticsearch-secret
, elasticsearch-7-secret
. So when your HCL Connections deployment is running for 2 years, the certficates stop working.
Created: Read in about 3 min