From 0609b51f167206da6b7835719a2176dd597b6723 Mon Sep 17 00:00:00 2001 From: abram axel booth Date: Thu, 25 Jun 2026 15:51:42 -0400 Subject: [PATCH] allow setting elasticsearch ssl_assert_hostname via environment variable ELASTICSEARCH8_ASSERT_HOSTNAME --- project/settings.py | 1 + share/search/index_strategy/elastic8.py | 1 + 2 files changed, 2 insertions(+) diff --git a/project/settings.py b/project/settings.py index 95fed6109..de070e1f6 100644 --- a/project/settings.py +++ b/project/settings.py @@ -308,6 +308,7 @@ def split(string, delim): ELASTICSEARCH8_CERT_PATH = os.environ.get('ELASTICSEARCH8_CERT_PATH') ELASTICSEARCH8_USERNAME = os.environ.get('ELASTICSEARCH8_USERNAME', 'elastic') ELASTICSEARCH8_SECRET = os.environ.get('ELASTICSEARCH8_SECRET') +ELASTICSEARCH8_ASSERT_HOSTNAME = os.environ.get('ELASTICSEARCH8_ASSERT_HOSTNAME') # Seconds, not an actual celery settings CELERY_RETRY_BACKOFF_BASE = int(os.environ.get('CELERY_RETRY_BACKOFF_BASE', 2 if DEBUG else 10)) diff --git a/share/search/index_strategy/elastic8.py b/share/search/index_strategy/elastic8.py index ea4ea713b..bc4b30f2e 100644 --- a/share/search/index_strategy/elastic8.py +++ b/share/search/index_strategy/elastic8.py @@ -126,6 +126,7 @@ def _get_elastic8_client(cls) -> elasticsearch8.Elasticsearch: timeout = settings.ELASTICSEARCH['TIMEOUT'] return elasticsearch8.Elasticsearch( hosts=settings.ELASTICSEARCH8_URL, + ssl_assert_hostname=settings.ELASTICSEARCH8_ASSERT_HOSTNAME, # security: ca_certs=settings.ELASTICSEARCH8_CERT_PATH, basic_auth=(