In my redis.conf I can specify this config to run Redis w TLS
tls-cert-file "redis.crt"
tls-key-file "redis.key"
Is there a way I can avoid saving certs to file and perhaps use a keystore? Or would a RAM drive work?
Comment From: itamarhaber
Hi @dmitrypol (again!!!11one :))
I'm not aware of such functionality for Sentinel or Redis, although I'm sure that correctly setting up and provisioning the certs in a RAM drive "should work".
P.S. I get why you'd want this, but personally, it doesn't feel within the project's scope. Do you have examples of other projects that implement this?
Comment From: dmitrypol
thanks @itamarhaber. As an example of other projects Kibana and Elasticsearch support keystore. https://www.elastic.co/guide/en/kibana/current/secure-settings.html and https://www.elastic.co/guide/en/elasticsearch/reference/current/elasticsearch-keystore.html