FIPS

[ira-gordin-sap]

Is elastic curator FIPS compliant?

[untergeek]

I can't confirm that, unfortunately. That would be a function of the upstream client library capabilities.

The elasticsearch8 Python module does not in itself have any mechanism to determine acceptable and unacceptable encryption algorithms from what I can see. Everything of that nature is upstream in the transport module.

Curator itself does not use any extra modules, so it uses the default Urllib3HttpNode means of communication. If urllib3 can be FIPS compliant, then there's probably a way to make elasticsearch8 FIPS compliant, which would make es_client and therefore Curator FIPS compliant.