Skip to content

Commit 4fcf134

Browse files
committed
bug fix
1 parent c801bc9 commit 4fcf134

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

deploy-manage/security/remote-cluster-filtering.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -81,23 +81,23 @@ To create a remote cluster filter:
8181
5. Add a meaningful name and description for the rule set.
8282
6. In the **Organization ID** and **{{es}} ID** fields, enter the organization or cluster ID of the deployments from which you want to allow traffic. Provide one or both values; traffic is allowed if it matches either ID. To add multiple rules to the filter, use the plus (`+`) button.
8383

84-
::::note
84+
:::note
8585
* ECE supports filtering remote cluster traffic from deployments in the same ECE system, in other ECE environments, or in {{ecloud}}.
8686
* For ECE systems, use the **Environment ID** from **Platform → Trust Management → Trust parameters** as the organization ID.
8787
* In {{ecloud}}, the organization ID is shown on the organization page in the top-right menu.
8888
* To get a deployment’s {{es}} ID, select **Copy cluster ID** on its management page in the Cloud UI.
89-
::::
89+
:::
9090

9191
7. Select if this rule set should be automatically attached to new deployments.
9292
8. Select **Create filter** to create the remote cluster filter.
9393

94-
::::{important}
94+
:::{important}
9595
Because this type of filter operates at the proxy level, if the local deployments or organizations in the filter belong to a different ECE environment or to ECH, you must add the transport TLS CA certificate of the local environment to the ECE proxy:
9696

9797
* Find the TLS CA certificate in the **Security -> Remote Connections -> CA certificates** section of any deployment of the environment that initiates the remote connection. In {{ecloud}}, each provider and region has its own CA certificate, while in ECE a single CA certificate is used per installation.
9898

9999
* To add a CA certificate to the ECE proxy, go to **Platform -> Settings -> TLS certificates** in the UI and update the certificate chain used when configuring your ECE installation. Append the required CA certificates to the end of the chain. The final chain should look like this: `Proxy private key`, `Proxy SSL certificate`, `Proxy CA(s)`, followed by the remaining CAs. For more details, refer to [Add a proxy certificate](/deploy-manage/security/secure-your-elastic-cloud-enterprise-installation/manage-security-certificates.md#ece-tls-proxy).
100-
::::
100+
:::
101101

102102

103103
::::

0 commit comments

Comments
 (0)