Notably, elastic's Kubernetes operator which just went 1.0 defaults to requiring a username and password (and generates one if it isn't provided). It also doesn't seem to allow you to opt out of using TLS.

https://www.elastic.co/guide/en/cloud-on-k8s/current/k8s-ove...