Skip to content

Commit ff063c6

Browse files
added sections and references in credentials handling in ECK (#2366)
This PR improves [ECK managed credentials](https://www.elastic.co/docs/deploy-manage/users-roles/cluster-or-deployment-auth/managed-credentials-eck) doc, with: - Making it more complete, to look more similar to the original https://www.elastic.co/guide/en/cloud-on-k8s/2.16/k8s-users-and-roles.html - Adding a link to that doc from the ECK Configure deployments landing page, otherwise it's not easy to find that document. - Updated the example to use {{version.stack}} variable. [Preview](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/2366/deploy-manage/users-roles/cluster-or-deployment-auth/managed-credentials-eck) --------- Co-authored-by: shainaraskas <[email protected]>
1 parent 48b0e74 commit ff063c6

File tree

2 files changed

+32
-2
lines changed

2 files changed

+32
-2
lines changed

deploy-manage/deploy/cloud-on-k8s/configure-deployments.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,8 @@ This section provides details around {{kib}} and {{es}} configuration when runni
1919

2020
Additionally, the following topics apply to both {{es}} and {{kib}}, and in some cases, to other applications supported by ECK:
2121

22+
* [**Users and roles**](/deploy-manage/users-roles/cluster-or-deployment-auth/managed-credentials-eck.md): Learn how to work with managed credentials, create custom users, and configure authentication realms.
23+
2224
* [**Access services**](accessing-services.md): Learn how to access to the orchestrated clusters and how to adapt the Kubernetes services to your needs.
2325

2426
* [**Customize Pods**](customize-pods.md): Learn how to adapt the `podTemplate` field to your needs.

deploy-manage/users-roles/cluster-or-deployment-auth/managed-credentials-eck.md

Lines changed: 30 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -36,13 +36,13 @@ kubectl get secret quickstart-es-elastic-user -o go-template='{{.data.elastic |
3636

3737
If your prefer to manage all users via SSO, for example using [SAML Authentication](../../../deploy-manage/users-roles/cluster-or-deployment-auth/saml.md) or OpenID Connect, you can disable the default `elastic` superuser by setting the `auth.disableElasticUser` field in the {{es}} resource to `true`:
3838

39-
```yaml
39+
```yaml subs=true
4040
apiVersion: elasticsearch.k8s.elastic.co/v1
4141
kind: Elasticsearch
4242
metadata:
4343
name: elasticsearch-sample
4444
spec:
45-
version: 8.16.1
45+
version: {{version.stack}}
4646
auth:
4747
disableElasticUser: true
4848
nodeSets:
@@ -72,3 +72,31 @@ kubectl delete secret -l eck.k8s.elastic.co/credentials=true
7272
::::{warning}
7373
This command regenerates auto-generated credentials of **all** {{stack}} applications in the namespace.
7474
::::
75+
76+
## Creating custom users
77+
78+
{{eck}} provides functionality to facilitate custom user creation through various authentication realms. You can create users using the native realm, file realm, or external authentication methods.
79+
80+
### File realm
81+
82+
ECK supports creating users through Kubernetes secrets referenced in the {{es}} resource. These secrets can contain either file realm content or standard authentication credentials with a username and password.
83+
84+
For more information, refer to [File-based user authentication > Add users](/deploy-manage/users-roles/cluster-or-deployment-auth/file-based.md#add-users), and check the ECK examples.
85+
86+
### Native realm
87+
88+
You can create custom users in the {{es}} native realm using {{es}} user management APIs or {{kib}}.
89+
90+
Refer to [Native user authentication](/deploy-manage/users-roles/cluster-or-deployment-auth/native.md) for more details.
91+
92+
### External authentication realms
93+
94+
You can also configure external authentication realms such as LDAP, OpenID Connect, or SAML in your ECK deployments by providing the appropriate {{es}} or {{kib}} configuration settings and any required [certificates or configuration files](/deploy-manage/deploy/cloud-on-k8s/custom-configuration-files-plugins.md).
95+
96+
For more information, refer to [External authentication](/deploy-manage/users-roles/cluster-or-deployment-auth/external-authentication.md).
97+
98+
## Creating custom roles
99+
100+
ECK facilitates file-based role management through Kubernetes secrets containing the roles specification. Alternatively, you can use the Role management API or the Role management UI in {{kib}}.
101+
102+
Refer to [Managing custom roles](/deploy-manage/users-roles/cluster-or-deployment-auth/defining-roles.md#managing-custom-roles) for details and ECK based examples.

0 commit comments

Comments
 (0)