From 42f8e53f9d2eb0695513a665e24573b1234c351f Mon Sep 17 00:00:00 2001
From: Richard Dennehy <richard.dennehy@elastic.co>
Date: Thu, 1 May 2025 13:53:16 +0100
Subject: [PATCH] add documentation for JWT realm proxy settings

---
 .../settings/security-settings.asciidoc          | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/docs/reference/settings/security-settings.asciidoc b/docs/reference/settings/security-settings.asciidoc
index db95ac48f5be8..6a0cbe7f2abb3 100644
--- a/docs/reference/settings/security-settings.asciidoc
+++ b/docs/reference/settings/security-settings.asciidoc
@@ -2341,6 +2341,22 @@ keystore then calling the <<cluster-nodes-reload-secure-settings, reload API>>.
 Defaults to `1m`.
 // end::jwt-client-authentication-rotation-grace-period-tag[]
 
+`http.proxy.host`::
+(<<static-cluster-setting,Static>>)
+Specifies the address of the proxy server for the HTTP client used for
+fetching the JSON Web Key Set from a remote URL.
+
+`http.proxy.scheme`::
+(<<static-cluster-setting,Static>>)
+Specifies the protocol to use to connect to the proxy server for the
+HTTP client used for fetching the JSON Web Key Set from a remote URL.
+Must be `http`.
+
+`http.proxy.port`::
+(<<static-cluster-setting,Static>>)
+Specifies the port of the proxy server for the HTTP client used for
+fetching the JSON Web Key Set from a remote URL. Defaults to `80`
+
 // tag::jwt-http-connect-timeout-tag[]
 `http.connect_timeout` {ess-icon}::
 (<<static-cluster-setting,Static>>)