Skip to content

Conversation

eedugon
Copy link
Contributor

@eedugon eedugon commented Sep 18, 2025

This PR attempts to introduce and document the Remote Cluster filters that are available in ECH and ECE.

We had some small statements in certain remote clusters docs about needing this type of filter when network security was enabled in the remote cluster, but we didn't have the filter documented.

Changes:

  • Remote cluster filter is presented as a type of Private Connection policy in ECH and a type of filter rule set in ECE. This is located in Security -> Network Security docs, as filters belong there.

  • "Remote clusters and network security" information rehomed to the landing page of Remote Clusters, as it was duplicate in Remote Clusters > ECH and Remote Clusters > ECE docs --> If we prefer the previous approach we can use snippets and remove the content from the landing page, but let's start focusing on reviewing the content itself.

  • The notes of different use cases docs (ECE --> ECH, ECH --> ECH, etc) have been updated to reflect the reality, and to address https://github.com/elastic/docs-content-internal/issues/59.

For next PRs:

  • API based management of the remote cluster filters.

Preview links:

New filter type:

Landing page with the remote clusters and network security section:

Previous landing pages (small updates there due to the rehome):

Use case specific docs:

Network security landing page shows the new filter type in the list of available filters:

Closes #3034

@eedugon eedugon changed the title attempting to present remote cluster filters Introducing Remote cluster filters in the docs Sep 19, 2025
@eedugon eedugon marked this pull request as ready for review September 19, 2025 07:45
@eedugon eedugon requested a review from a team as a code owner September 19, 2025 07:45
@eedugon eedugon requested a review from alxchalkias September 19, 2025 07:45
Copy link
Contributor

@alxchalkias alxchalkias left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!!! Thanks a bunch for the great work

Copy link
Collaborator

@shainaraskas shainaraskas left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

these changes are so clear and useful. I see why that remote cluster filter topic was so important for sure 👍

I think my remaining questions are mostly around the impacts of network security policies on self-managed and eck deployments. we should clearly state how those work.

Copy link
Collaborator

@shainaraskas shainaraskas left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

looks really good. just a couple more small notes

@eedugon
Copy link
Contributor Author

eedugon commented Sep 24, 2025

@shainaraskas , thanks a lot for your help here!
Hopefully the final review. I've introduced the IP filters for the possible self-managed or ECK local clusters slightly better, in a couple of places.

And for the use cases sub-section, I've left 2 options so we can choose and decide, with a table or without a table. Which one would you choose? I'm inclined to not use a table in this case, as I don't see much value on it, not even visually.

Copy link
Collaborator

@shainaraskas shainaraskas left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

looking good. couple of comments you can hopefully address then ship with :)

@eedugon
Copy link
Contributor Author

eedugon commented Oct 2, 2025

@shainaraskas , @alxchalkias , here you have the final content and statements around network security and remote clusters interactions.
In short:

  • Remote cluster filers only support filtering by clusterID / orgID when the local and remote belong to the same type of environment (ECH or ECE).
  • For other cases IP Filters are needed.

The main changes of this PR are:

  • New section in remote clusters landing page describing the interaction of network security and RCS.
  • New page "remote cluster filters" describing the details of this filter and including the configuration guide.
  • Small statements in the RCS configuration instructions to warn users about what they have to do if the remote has network security enabled.

Copy link
Contributor

@alxchalkias alxchalkias left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@eedugon your work here has been nothing short of outstanding! Thanks so much for the care and attention!

Copy link
Collaborator

@shainaraskas shainaraskas left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

😅 what an effort!!! lgtm!!!!!!!

@eedugon eedugon merged commit fc348a6 into main Oct 6, 2025
6 checks passed
@eedugon eedugon deleted the remote_clusters_filters_notes branch October 6, 2025 09:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants