We are running our v8.7.0 application in AKS with the following pods (using tomcat amd azure sql DB)-

1) Web

2) Batch

3) BIX

4) Stream

5) SRS (connecting to an Externalized elastic search)

6) Clustering-Service (hazelcast)

The setup is fine, however, our as part of our governance tasks our security engineers have to document the communication between the different components i.e. protocol, ports, auth etc.

So hoping someone would be able to clarify few things?

1. Which pods need to be able to communicate to the external elastic search? I assume this will be the Batch and Web pods to create indexes and then to retrieve indexed data respectively? Or do any other pods also need to communicate to the externalized elastic search?

2. What does SRS pod actually do other than enabling SRS capability which gets managed via the search landing page  the Web Pod?

3. Which other components/pods within the cluster would require communication with the SRS pod?

4. Of the 6 pod types we have deployed which ones will need to communicate with the Stream pod? would it be all of them, including the SRS pod?