Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature Request] Allow separation of security configurations between Aux transports #17795

Open
finnegancarroll opened this issue Apr 4, 2025 · 0 comments
Labels
enhancement Enhancement or improvement to existing feature or request Plugins untriaged

Comments

@finnegancarroll
Copy link
Contributor

Is your feature request related to a problem? Please describe

Per #17406 aux transport security configurations are configured under a single setting "namespace", i.e. However, aux transports are pluggable and multiple implementations may be enabled and configured.

plugins.security.ssl.aux.<setting option...>

Describe the solution you'd like

Ideally in the case where multiple aux transports are configured and enabled, the user should distinguish between security configurations for each aux transport.

plugins.security.ssl.aux.arrow.<setting option...>
plugins.security.ssl.aux.grpc.<setting option...>
plugins.security.ssl.aux.other.<setting option...>

From the developer perspective each new aux transport should be declared and consumed by security plugin to enable basic TLS client cert authentication without need to introduce sweeping settings changes to security plugin or discrete implementations for the particular transport.

Additional discussion: #17406 (comment)
PR adding single aux security config namespace to security plugin: opensearch-project/security#5152

Related component

Plugins

Describe alternatives you've considered

Keeping aux transports as a single security configuration which all transports will share.

Additional context

No response

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement Enhancement or improvement to existing feature or request Plugins untriaged
Projects
None yet
Development

No branches or pull requests

1 participant