Document Elasticsearch firewall rules for lab subnets

2026-06-25 00:56:38 +00:00
parent 9deda7fcb1
commit c9faa517d1
1 changed files with 10 additions and 0 deletions
@@ -44,3 +44,13 @@ print(s3.list_buckets())
 ```bash
 ./scripts/sync-gitea.sh
 ```
+
+## Elasticsearch firewall (atc-elastic01)
+
+Port **9200** opened via firewalld rich rules for lab subnets:
+- `10.0.21.0/24` (Command Center, lakehouse, kafka, …)
+- `10.0.20.0/24` (ObjectScale, db01, …)
+
+Kibana **5601** was already public on elastic01.
+
+`elastic` password: set in `/opt/atc-agents/.env` as `ELASTIC_PASSWORD` (not in git).