Yeah, the JvmInitializer would be necessary if you wanted to use a file
based keystore but I have seen people create in memory keystores[1].

Take a look at the contribution guide[2].

1: https://gist.github.com/mikeapr4/3b2b5d05bc57640e77d0
2: https://beam.apache.org/contribute/

On Fri, Sep 25, 2020 at 9:17 AM Mohil Khare <mo...@prosimo.io> wrote:

> Hi Luke,
> Yeah, I looked at withTrustSelfSignedCerts options, but after looking at
> elasticsearchIO code, it seems that flag comes into effect only when
> "withKeystorePath" is provided.
> I don't think that can be any gcs path. I believe that is a path in worker
> VM and for that I will have to use JvmInitliazer to add a custom keystore.
>
> Regarding: "Feel free to create a PR and add any options following the
> pattern that is already there in the code" . What are the guidelines for
> adding code and creating PR for beam codebase. Can you point me to the
> relevant document?
>
> Thanks and regards
> Mohil
>
>
> On Fri, Sep 25, 2020 at 8:45 AM Luke Cwik <lc...@google.com> wrote:
>
>> It doesn't look like it based upon the javadoc:
>>
>> https://beam.apache.org/releases/javadoc/2.23.0/org/apache/beam/sdk/io/elasticsearch/ElasticsearchIO.ConnectionConfiguration.html
>>
>> You can allow self signed certs which might be enough for you though:
>>
>> https://beam.apache.org/releases/javadoc/2.23.0/org/apache/beam/sdk/io/elasticsearch/ElasticsearchIO.ConnectionConfiguration.html#withTrustSelfSignedCerts-boolean-
>>
>> Feel free to create a PR and add any options following the pattern that
>> is already there in the code.
>>
>> On Thu, Sep 24, 2020 at 8:36 PM Mohil Khare <mo...@prosimo.io> wrote:
>>
>>> Hello team and elasticSearchIO users,
>>>
>>> I am using beam java sdk 2.23.0 with elastic search as one of the sinks.
>>>
>>> Is there any way to turn off ssl check i.e. set cert verify false for
>>> https connection with elasticsearchIO ? I know using regular clients, you
>>> can do that. But can we achieve the same using elasticsearchIO ?
>>>
>>> Thanks and regards
>>> Mohil
>>>
>>

Reply via email to