Details
-
Bug
-
Resolution: Unresolved
-
Major
-
7.0.0
-
None
-
Untriaged
-
1
-
Unknown
Description
Encrypted Port Mapping in the GSI currently maps ports from un encrypted ones to the encrypted counterparts by getting the data from node services endpoint.
But we can remap ports at node level as defined in https://docs.couchbase.com/server/current/install/install-ports.html#_footnotedef_5
We maintain one map for all the nodes in every indexer. If we only remap say indexer https port for a node our mapping will not have different indexer https port for same key i.e. indexer http port. We will end up using wrong ports.
Work Around
1. Use same http and https ports in all the nodes that we will have same value for same key
2. Change both http and https ports if one is changed. That way we will have a new key value pair.
We must fix the EncryptedPortMapping and make it per node level.
Options
Attachments
Issue Links
- relates to
-
MB-42370 Enforce TLS - Indexing
- Closed
Gerrit Reviews
For Gerrit Dashboard: MB-47916 | ||||||
---|---|---|---|---|---|---|
# | Subject | Branch | Project | Status | CR | V |
159717,3 | MB-47916 : Support Encrypted Port Map in cluster_run like setup | unstable | indexing | Status: NEW | 0 | 0 |