Skip to content

OpenSearch Client Certificate Authentication #633

@dlvenable

Description

@dlvenable

Is your feature request related to a problem? Please describe.

Data Prepper supports HTTP Basic authentication to OpenSearch clusters. However, it does not support client certificate authentication. As a client, Data Prepper can authenticate using a client certificate. This can replace HTTP Basic authentication or be combined with HTTP Basic authentication.

Describe the solution you'd like

Provide a mechanism for client client certificate authentication to OpenSearch clusters. Data Prepper pipeline authors would need to supply as input paths to both a certificate file and a private key file. Additionally, Data Prepper should allow this in conjunction with HTTP Basic authentication, for any cluster which requires both.

sink:
  - opensearch:
      authentication:
        mutual_tls:
          private_key: -----BEGIN PRIVATE KEY----- ...

Additional context

This was originally requested in a discussion as part of #310.

Metadata

Metadata

Labels

Type

No type

Projects

Status

Unplanned

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions