Page MenuHomePhabricator

Analytics cluster should connect to elasticsearch over SSL
Closed, ResolvedPublic

Description

While working on T157435, @elukey realized that the analytics ACLs still refer to port 9200 (HTTP) instead of 9243 (HTTPS). All traffic should move to HTTPS.

To do:

  • open port 9243 from analytics cluster to elasticsearch (should be done as port of T157435)
  • modify analytics jobs to use HTTPS on port 9243
  • close port 9200 from analytics cluster to elasticsearch

@dcausse, @EBernhardson: I'm not familiar with the jobs we have on the analytics cluster, could you point me in the right direction to change this port? Thansk!

Event Timeline

ES hosts used by analytics jobs are defined in bundle.xml. The project is wikimedia/discovery/analytics.

Change 337425 had a related patch set uploaded (by Gehel):
analytics - elasticsearch: communicate over HTTPS

https://gerrit.wikimedia.org/r/337425

debt triaged this task as Medium priority.Mar 2 2017, 11:21 PM
debt edited projects, added Discovery-Search (Current work); removed Discovery-Search.
debt moved this task from Incoming to Needs review on the Discovery-Search (Current work) board.

Change 337425 merged by jenkins-bot:
[wikimedia/discovery/analytics] analytics - elasticsearch: communicate over HTTPS

https://gerrit.wikimedia.org/r/337425

debt claimed this task.