rzo1 opened a new pull request, #2173: URL: https://github.com/apache/stormcrawler/pull/2173
Fixes #2103. In both `opensearch` and `opensearch-java`, the Basic credentials were registered for any host. They are now registered only for the host and port of each configured address, so nodes found by the sniffer no longer receive them. Also logs a warning when: - credentials go to a non-loopback address over plain http - `opensearch.disable.tls.validation` is on - sniffing and credentials are both enabled The default scheme stays `http`, because switching to https would break existing setups. **Release note:** with sniffing on (the default), requests to nodes that report an address other than the configured ones are sent without credentials. On a secured cluster, list every node in `opensearch.<type>.addresses` or disable sniffing. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
