Skip to content

Conversation

@lockewritesdocs
Copy link
Contributor

@lockewritesdocs lockewritesdocs commented Aug 23, 2021

Extracts some guidance from the existing Scripting and security page to create a top-level set of security principles for Elasticsearch.

Preview link: https://elasticsearch_76850.docs-preview.app.elstc.co/guide/en/elasticsearch/reference/master/es-security-principles.html

Closes #67061

@lockewritesdocs lockewritesdocs added >docs General docs changes :Security/Security Security issues without another label v8.0.0 v7.14.1 v7.15.0 labels Aug 23, 2021
@lockewritesdocs lockewritesdocs self-assigned this Aug 23, 2021
@elasticmachine elasticmachine added Team:Security Meta label for security team Team:Docs Meta label for docs team labels Aug 23, 2021
@elasticmachine
Copy link
Collaborator

Pinging @elastic/es-security (Team:Security)

@elasticmachine
Copy link
Collaborator

Pinging @elastic/es-docs (Team:Docs)

Copy link
Contributor

@bytebilly bytebilly left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@lockewritesdocs thanks for putting this together! I left a few comments.

@lockewritesdocs
Copy link
Contributor Author

@elasticmachine update branch

@martijnvg martijnvg added v7.14.2 and removed v7.14.1 labels Aug 26, 2021
@lockewritesdocs
Copy link
Contributor Author

@elasticmachine update branch

@lockewritesdocs
Copy link
Contributor Author

@nik9000 and @bytebilly, I incorporated your review feedback. I haven't resolved most of Nik's comments in case either of you wants to dig through them. Let me know if you think additional changes are required or if this PR is good to merge.

Copy link
Member

@nik9000 nik9000 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I left a question about adding a link and about changing the intro sentence in another spot. Thanks for iterating on it!

@lockewritesdocs
Copy link
Contributor Author

@elasticmachine update branch

Copy link
Contributor

@bytebilly bytebilly left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Member

@nik9000 nik9000 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍 too. thanks so much for all the iterations!

@lockewritesdocs lockewritesdocs added v7.16.0 auto-backport Automatically create backport pull requests when merged labels Aug 31, 2021
@lockewritesdocs lockewritesdocs merged commit b9ad986 into elastic:master Aug 31, 2021
@lockewritesdocs lockewritesdocs deleted the docs__clarify-exposing-clusters branch August 31, 2021 16:37
@elasticsearchmachine
Copy link
Collaborator

💔 Backport failed

Status Branch Result
7.15 Commit could not be cherrypicked due to conflicts
7.x Commit could not be cherrypicked due to conflicts
7.14 Commit could not be cherrypicked due to conflicts

To backport manually run backport --upstream elastic/elasticsearch --pr 76850

lockewritesdocs pushed a commit to lockewritesdocs/elasticsearch that referenced this pull request Aug 31, 2021
* [DOCS] Add ES security principles

* Incorporating review feedback

* More changes from review feedback

* Fix cross-link to Painless guide

* Clarify callout text

* Add information about elasticsearch user

* Minor wording edits

* Consolidate Java Security Manager description, plus other edits

* Clarify not running as root

Co-authored-by: Elastic Machine <[email protected]>
lockewritesdocs pushed a commit that referenced this pull request Sep 1, 2021
* [DOCS] Add ES security principles (#76850)

* [DOCS] Add ES security principles

* Incorporating review feedback

* More changes from review feedback

* Fix cross-link to Painless guide

* Clarify callout text

* Add information about elasticsearch user

* Minor wording edits

* Consolidate Java Security Manager description, plus other edits

* Clarify not running as root

Co-authored-by: Elastic Machine <[email protected]>

* Remove links specific to 8.0

Co-authored-by: Elastic Machine <[email protected]>
lockewritesdocs pushed a commit to lockewritesdocs/elasticsearch that referenced this pull request Sep 1, 2021
* [DOCS] Add ES security principles (elastic#76850)

* [DOCS] Add ES security principles

* Incorporating review feedback

* More changes from review feedback

* Fix cross-link to Painless guide

* Clarify callout text

* Add information about elasticsearch user

* Minor wording edits

* Consolidate Java Security Manager description, plus other edits

* Clarify not running as root

Co-authored-by: Elastic Machine <[email protected]>

* Remove links specific to 8.0

Co-authored-by: Elastic Machine <[email protected]>
lockewritesdocs pushed a commit to lockewritesdocs/elasticsearch that referenced this pull request Sep 1, 2021
* [DOCS] Add ES security principles (elastic#76850)

* [DOCS] Add ES security principles

* Incorporating review feedback

* More changes from review feedback

* Fix cross-link to Painless guide

* Clarify callout text

* Add information about elasticsearch user

* Minor wording edits

* Consolidate Java Security Manager description, plus other edits

* Clarify not running as root

Co-authored-by: Elastic Machine <[email protected]>

* Remove links specific to 8.0

Co-authored-by: Elastic Machine <[email protected]>
lockewritesdocs pushed a commit that referenced this pull request Sep 1, 2021
* [DOCS] Add ES security principles (#76850)

* [DOCS] Add ES security principles

* Incorporating review feedback

* More changes from review feedback

* Fix cross-link to Painless guide

* Clarify callout text

* Add information about elasticsearch user

* Minor wording edits

* Consolidate Java Security Manager description, plus other edits

* Clarify not running as root

Co-authored-by: Elastic Machine <[email protected]>

* Remove links specific to 8.0

Co-authored-by: Elastic Machine <[email protected]>

Co-authored-by: Elastic Machine <[email protected]>
lockewritesdocs pushed a commit that referenced this pull request Sep 1, 2021
* [DOCS] Add ES security principles (#76850)

* [DOCS] Add ES security principles

* Incorporating review feedback

* More changes from review feedback

* Fix cross-link to Painless guide

* Clarify callout text

* Add information about elasticsearch user

* Minor wording edits

* Consolidate Java Security Manager description, plus other edits

* Clarify not running as root

Co-authored-by: Elastic Machine <[email protected]>

* Remove links specific to 8.0

Co-authored-by: Elastic Machine <[email protected]>

Co-authored-by: Elastic Machine <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto-backport Automatically create backport pull requests when merged >docs General docs changes :Security/Security Security issues without another label Team:Docs Meta label for docs team Team:Security Meta label for security team v7.14.2 v7.15.0 v7.16.0 v8.0.0-alpha2

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Clarify docs on exposing Elasticsearch to the internet

7 participants