Elasticsearch Labs

Signed, sealed, delivered: ECK certificate management with Vault and cert-manager

Replace ECK's self-signed certificates with your enterprise PKI without renewing a certificate by hand, as Vault signs with a CA key sealed outside Kubernetes and cert-manager delivers fresh certificates to every Elasticsearch pod.