Reload the keystore on nodes in the cluster

POST /_nodes/{node_id}/reload_secure_settings
POST /_nodes/reload_secure_settings

Secure settings are stored in an on-disk keystore. Certain of these settings are reloadable. That is, you can change them on disk and reload them without restarting any nodes in the cluster. When you have updated reloadable secure settings in your keystore, you can use this API to reload those settings on each node.

When the Elasticsearch keystore is password protected and not simply obfuscated, you must provide the password for the keystore when you reload the secure settings. Reloading the settings for the whole cluster assumes that the keystores for all nodes are protected with the same password; this method is allowed only when inter-node communications are encrypted. Alternatively, you can reload the secure settings on each node by locally accessing the API and passing the node-specific Elasticsearch keystore password.

Path Parameters

node_id union NodeId | [] NodeId optional

The names of particular nodes in the cluster to target.

Leave it out to use /_nodes/reload_secure_settings.

Query Parameters

timeout string Duration · default: 30s: Period to wait for a response. If no response is received before the timeout expires, the request fails and returns an error.

Request

secure_settings_password string: The password for the Elasticsearch keystore.

Response

application/json

Examples

Run POST _nodes/reload_secure_settings to reload the keystore on nodes in the cluster.

Request Console 1 / 8 languages

Console Kibana Dev Tools

POST _nodes/reload_secure_settings
{
  "secure_settings_password": "keystore-password"
}

JavaScript Elasticsearch JavaScript Client

const response = await client.nodes.reloadSecureSettings({
  secure_settings_password: "keystore-password",
});

Python Elasticsearch Python Client

resp = client.nodes.reload_secure_settings(
    secure_settings_password="keystore-password",
)

curl Shell

curl -X POST "$ELASTICSEARCH_URL/_nodes/reload_secure_settings" \
  -H "Authorization: ApiKey $ELASTIC_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "secure_settings_password": "keystore-password"
  }'

Java Elasticsearch Java Client

client.nodes().reloadSecureSettings(r -> r
    .secureSettingsPassword("keystore-password")
);

C# Elasticsearch .NET Client

var response = await client.Nodes
    .ReloadSecureSettingsAsync(d1 => d1
        .SecureSettingsPassword("keystore-password")
    );

PHP Elasticsearch PHP Client

$resp = $client->nodes()->reloadSecureSettings([
    "body" => [
        "secure_settings_password" => "keystore-password",
    ],
]);

Ruby Elasticsearch Ruby Client

response = client.nodes.reload_secure_settings(
  body: {
    "secure_settings_password": "keystore-password"
  }
)

Response

{
  "_nodes": {
    "total": 1,
    "successful": 1,
    "failed": 0
  },
  "cluster_name": "my_cluster",
  "nodes": {
    "pQHNt5rXTTWNvUgOrdynKg": {
      "name": "node-0"
    }
  }
}