-
Notifications
You must be signed in to change notification settings - Fork 156
Clarifications added to remote clusters, self-managed, api key based auth #3245
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
🔍 Preview links for changed docs |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Approving to unblock you, @eedugon!
I've left a few minor suggestions, but am afraid don't know enough about this subject to contribute more meaningfully. Many thanks!
Co-authored-by: Vlada Chirmicci <[email protected]>
Co-authored-by: Vlada Chirmicci <[email protected]>
Co-authored-by: Vlada Chirmicci <[email protected]>
Co-authored-by: Vlada Chirmicci <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
great quick wins. nice
This is a preliminary / quick solution to address the issues and noise caused by the lack of details of the doc to configure remote clusters from a self-managed cluster towards ECK.
This PR improves:
xpack.security.remote_cluster_client.ssl.certificate_authorities
is NOT needed when remote is ECH.9443
.sniff
mode if the remote is on ECH, ECE or ECK, as that will never be an option.In a next iteration we will refine the content to cover other remote possibilities, such as ECE or ECK, completely, as we have in other docs.
For example for self-manged --> ECE we will require the user to add the ECE proxy CA into the self-managed list of trusted certs, but that's not covered yet.
Related issues and SDHs:
https://github.com/elastic/docs-content-internal/issues/241
https://github.com/elastic/sdh-elasticsearch/issues/9166
https://github.com/elastic/sdh-elasticsearch/issues/8951