Skip to content

fix(searchable): enforce TLS 1.2 on OpenSearch domains (v2 transformer)#3470

Closed
sarayev wants to merge 1 commit into
release-api-plugin-stablefrom
fix/searchable-tls-v2-gen1
Closed

fix(searchable): enforce TLS 1.2 on OpenSearch domains (v2 transformer)#3470
sarayev wants to merge 1 commit into
release-api-plugin-stablefrom
fix/searchable-tls-v2-gen1

Conversation

@sarayev
Copy link
Copy Markdown
Contributor

@sarayev sarayev commented Apr 14, 2026

Cherry-pick of #3452 to release branch.

This adds TLS 1.2 enforcement to the v2 searchable transformer for Gen 1 LTS customers.

Changes

Testing

  • Unit tests passing
  • E2E tests to be triggered separately

@sarayev sarayev requested a review from a team as a code owner April 14, 2026 09:48
…mains (v2 transformer)

Sets tlsSecurityPolicy to TLS_1_2 on OpenSearch domains created by
the @searchable directive in the v2 transformer, ensuring Gen 1 LTS
customers using the v2 transformer get TLS 1.2 enforcement.

This is the same fix as PR #3452 on main, implemented directly on the
release branch.
@sarayev sarayev force-pushed the fix/searchable-tls-v2-gen1 branch from c1857ea to 855e059 Compare April 14, 2026 12:49
@sarayev
Copy link
Copy Markdown
Contributor Author

sarayev commented Apr 14, 2026

Closing in favor of a new PR from branch fix/tls-v2-release-stable. The original branch fix/searchable-tls-v2-gen1 had CodeBuild source resolution issues (sourceVersion was null, defaulting to main). The new branch has been verified to resolve correctly.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant