Forums

Articles
Create
cancel
Showing results for 
Search instead for 
Did you mean: 

Can Elasticsearch URL on Bitbucket be wrapped in SSL?

OneTech IT
Contributor
February 15, 2018

I know that the default URL for Elasticsearch on Bitbucket is http://localhost:7992. 

Is there a way to wrap Elasticsearch in SSL, so that the URL becomes https://localhost:7992, so all traffic to and from Elasticsearch is encrypted?

Version: Bitbucket 5.5.0

1 answer

0 votes
Craig Castle-Mead
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
February 18, 2018

Hi,

While ensuring SSL is on is generally a good rule of thumb, just wondering if this is a necessity given your Bitbucket and Elasticsearch are running on the same node and if someone is logged in to your server to get access to the lo interface to intercept the traffic, you've got a bigger issue anyway.

Unsure if the bundled elasticsearch would allow it, but https://www.elastic.co/guide/en/shield/current/ssl-tls.html outlines the general steps to SSL enable ElasticSearch. This seems to require Elastic Security (formerly Shield) is required and that is a paid subscription product https://www.elastic.co/subscriptions.

If you're deployed to AWS, you might consider using Elastic Cloud but deployed in AWS (https://www.elastic.co/cloud/as-a-service). Their pricing includes the AWS resources and the full elastic X-pack (includes security) and comes with SSL out of the box.

CCM

Suggest an answer

Log in or Sign up to answer
TAGS
atlassian, bitbucket, ci/cd workflows, scale ci cd, bitbucket webinar, devops pipeline, continuous integration, continuous delivery, atlassian learning, software automation, developer tools, build and deploy, pipeline optimization, atlassian community

Scale CI/CD workflows faster with Bitbucket Pipelines 🪣

Join this webinar on June 25/26th to learn how to build secure CI/CD workflows using Bitbucket Pipelines and get tips from our own engineers on how to speed up builds and operate at scale.

Register today
AUG Leaders

Atlassian Community Events