<p>I'm running ECK cluster with rancher2. There are 3 nodes: 2 for elasticsearch, 1 for kibana.</p>
<p>I want to change Elastic-server configuration with operator, for example, disable ssl communication.</p>
<p>But what right way to do it? Mount config-file from host? Please give some ideas</p>

Ivan Vovk
<p>Quoting the <a href="https://www.elastic.co/guide/en/cloud-on-k8s/1.2/k8s-tls-certificates.html#k8s-disable-tls" rel="nofollow noreferrer">documentation</a>:</p>
<blockquote>
<p>You can explicitly disable TLS for Kibana, APM Server, Enterprise Search and the HTTP layer of Elasticsearch.</p>
</blockquote>
<pre><code>spec:
  http:
    tls:
      selfSignedCertificate:
        disabled: true
</code></pre>
<p>That is generally useful when you want to run ECK with Istio and want to let that manage TLS.</p>
<p>However, you cannot disable TLS for the transport communication (between the Elasticsearch nodes). For security reasons that is always enabled.</p>
<p>PS: For a highly available cluster, you'd want at least 3 Elasticsearch nodes. Having 2 isn't helping you — if one of them is going down, the other one will degrade as well, since Elasticsearch is built around a majority based consensus protocol.</p>
