<p>I am trying to setup ElasticSearch OpenDistro but I am not able to understand what is meant by <code>&lt;CERTIFICATE_DATA_REDACTED&gt;</code> in the link </p>

<p><a href="https://github.com/opendistro-for-elasticsearch/community/blob/master/open-distro-elasticsearch-kubernetes/elasticsearch/35-es-bootstrap-secrets.yml" rel="nofollow noreferrer">https://github.com/opendistro-for-elasticsearch/community/blob/master/open-distro-elasticsearch-kubernetes/elasticsearch/35-es-bootstrap-secrets.yml</a> . </p>

<p>How should I use this yaml file? Do I need to put the base64 encoded values here replacing the  and then <code>kubectl apply -f secrets.yaml</code> or what? </p>

<p>Can someone provide any reference link around this which explains the same?</p>

<pre><code>kind: Secret
metadata:
  name: elasticsearch-tls-data
  namespace: elasticsearch
type: Opaque
stringData:
  elk-crt.pem: |-
    &lt;CERTIFICATE_DATA_REDACTED&gt;
  elk-key.pem: |-
    &lt;CERTIFICATE_DATA_REDACTED&gt;
  elk-root-ca.pem: |-
    &lt;CERTIFICATE_DATA_REDACTED&gt;
  admin-crt.pem: |-
    &lt;CERTIFICATE_DATA_REDACTED&gt;
  admin-key.pem: |-
    &lt;CERTIFICATE_DATA_REDACTED&gt;
  admin-root-ca.pem: |-
    &lt;CERTIFICATE_DATA_REDACTED&gt; ````
</code></pre>

<p>I have not used this configuration before, but on my opinion what you should do is create your own certificates <code>elk-crt.pem, elk-key.pem, elk-root-ca.pem, admin-crt.pem, admin-key.pem, admin-root-ca.pem</code> same thing with Kibana (if you will use it), then just create your Secret with raw values, </p>

<p>please read this:</p>

<p><code>
For certain scenarios, you may wish to use the stringData field instead. This field allows you to put a non-base64 encoded string directly into the Secret, and the string will be encoded for you when the Secret is created or updated.
</code></p>

<p><a href="https://kubernetes.io/docs/concepts/configuration/secret/" rel="nofollow noreferrer">https://kubernetes.io/docs/concepts/configuration/secret/</a></p>
