<p>i want to set basic authentication only username:password to ES clutser. i have created kubernetes secret and added in <code>values.yaml</code> file also added <code>xpack.security.enabled: true</code>.</p>
<p>my web app would be sending request over simple HTTP only.</p>
<p>Please let me know if it is possible just set basic authentication username: credentials without setting up SSL transport layer security.</p>
<p><strong>UPDATE</strong></p>
<p>i am done with basic setup, mean basic auth and certificate creation working well also cluster is up.</p>
<p>but when i am sending curl request getting</p>
<p><code>curl localhost:9200</code></p>
<p><code>curl: (52) Empty reply from server</code></p>
<p>but when sending curl with <code>--insecure</code> or with <code>-k</code> getting response</p>
<pre><code>
{
  &quot;name&quot; : &quot;elasticsearch-master-0&quot;,
  &quot;cluster_name&quot; : &quot;elasticsearch&quot;,
  &quot;cluster_uuid&quot; : &quot;sUVANxDTQI2L8iSYBXIijg&quot;,
  &quot;version&quot; : {
    &quot;number&quot; : &quot;7.3.2&quot;,
    &quot;build_flavor&quot; : &quot;default&quot;,
    &quot;build_type&quot; : &quot;docker&quot;,
    &quot;build_hash&quot; : &quot;1c1faf1&quot;,
    &quot;build_date&quot; : &quot;2019-09-06T14:40:30.409026Z&quot;,
    &quot;build_snapshot&quot; : false,
    &quot;lucene_version&quot; : &quot;8.1.0&quot;,
    &quot;minimum_wire_compatibility_version&quot; : &quot;6.8.0&quot;,
    &quot;minimum_index_compatibility_version&quot; : &quot;6.0.0-beta1&quot;
  },
  &quot;tagline&quot; : &quot;You Know, for Search&quot;
}
</code></pre>
<p>any solution of this <code>--insecure</code> i think error occurring due to self-sign certificates.</p>
<p><code>elasticsearach.yaml file</code></p>
<pre><code>esConfig:
  elasticsearch.yml: |
    xpack.security.enabled: true
    xpack.security.transport.ssl.enabled: true
    xpack.security.transport.ssl.verification_mode: certificate
    xpack.security.transport.ssl.keystore.path: /usr/share/elasticsearch/config/certs/elastic-certificates.p12
    xpack.security.transport.ssl.truststore.path: /usr/share/elasticsearch/config/certs/elastic-certificates.p12
    xpack.security.http.ssl.enabled: true
    xpack.security.http.ssl.truststore.path: /usr/share/elasticsearch/config/certs/elastic-certificates.p12
    xpack.security.http.ssl.keystore.path: /usr/share/elasticsearch/config/certs/elastic-certificates.p12
    xpack.security.authc.realms.native.local.order: 0
</code></pre>
<p>Thanks. Please help</p>

chagan
<p>Sure. Comment any http.ssl strings. You will connect via http not https but your password will be transferred in plain text. Not recommend in prod.</p>
