While working on T157435, @elukey realized that the analytics ACLs still refer to port 9200 (HTTP) instead of 9243 (HTTPS). All traffic should move to HTTPS.
@dcausse, @EBernhardson: I'm not familiar with the jobs we have on the analytics cluster, could you point me in the right direction to change this port? Thansk!
ES hosts used by analytics jobs are defined in bundle.xml. The project is wikimedia/discovery/analytics.
Change 337425 had a related patch set uploaded (by Gehel):
analytics - elasticsearch: communicate over HTTPS
Change 337425 merged by jenkins-bot:
[wikimedia/discovery/analytics] analytics - elasticsearch: communicate over HTTPS
Created T160380 to deploy the new version