[BEAM-12632] ElasticsearchIO: Enabling both User/Pass auth and SSL overwrites User/Pass

• Type: Bug
• Status: Open
• Priority: P3
• Resolution: Unresolved
• Affects Version/s: 2.31.0
• Component/s: io-java-elasticsearch
• Assignee: Unassigned
• Reporter: Andrew Boshardy
• Created: 16/Jul/21 19:54
• Updated: 04/Jun/22 21:34

Description

When using the ElasticsearchIO class in the SDK, if you enable both username and password auth AND SSL, the SSL addition overwrites the username and password credentials as both utilize .setHttpClientConfigCallback()
See: https://github.com/apache/beam/blob/4fb05beb4b1063388432d4a66aa4ea245542cb02/sdks/java/io/elasticsearch/src/main/java/org/apache/beam/sdk/io/elasticsearch/ElasticsearchIO.java#L599

To recreate, set both the user/pw and keystore info for the write/read transform.  Authentication then fails when connecting to an SSL+user/pw auth cluster.