In theory this is possible, but in my opinion it does not make much sense, and we also have not tested this specific scenario.
A tribe node simply creates a node client and then joins the remote cluster. If the remote cluster does not have Search Guard installed, you can just omit all Search Guard specific settings and connect to the remote cluster as if Search Guard was not present at all. In other words:
For the connection to the Search Guard secured remote cluster, follow the instructions here: http://docs.search-guard.com/latest/cross-cluster-tribe
For the connection to the non-secured cluster, follow the instructions here: https://www.elastic.co/guide/en/elasticsearch/reference/current/modules-tribe.html
Please be aware that tribe nodes have been deprecated by Elasticsearch from 5.4.x onwards, and have been replaced by Cross Cluster Search: https://www.elastic.co/blog/tribe-nodes-and-cross-cluster-search-the-future-of-federated-search-in-elasticsearch
On Tuesday, January 2, 2018 at 8:29:32 AM UTC+1, 王翔宇 wrote:
I am using tribe node to connect two elasticsearch clusters. My elasticsearch version is 5.4.3 with additional x-pack monitor.
Because of some reason, search guard can only be deployed on one cluster. So is it possible to let tribe node to connect to one cluster with sg and one without ?
Thank you very much!