Details
-
Feature Request
-
Resolution: Fixed
-
L3 - Default
-
None
Description
User Story (Required on creation):
As a Operations Engineer I want be able to disable "verifyHostname". This is needed to integration with a secure Elasticsearch cluster that uses self-signed certificates.
Functional Requirements (Required before implementation):
httpClientBuilder.setSSLHostnameVerifier((s, sslSession) -> true);
Limitations of Scope (Optional):
Hints (Optional):
- Discuss if configuration can be set as an environment variable too (Check with other components)
Testing Notes:
- Using Optimize config, you can disable this property. It should then be respected in the ES client. This might be hard to test as it is ssl specific
- This can also be configurable using an env var: CAMUNDA_OPTIMIZE_ELASTICSEARCH_CONNECTION_SKIP_HOSTNAME_VERIFICATION
- In terms of testing it, you can probably just start Optimize as a kind of smoke test and make sure that things work as expected
- Test that this new config option is in the next version of the docs