-
Notifications
You must be signed in to change notification settings - Fork 159
Remote clusters: Snippets and improvements for ECE and ECH use cases #3365
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merged
Merged
Changes from all commits
Commits
Show all changes
11 commits
Select commit
Hold shift + click to select a range
2b33c44
Snippets and improvements for remote clusters Kibana UI and Elasticse…
eedugon 41cf55a
platform APIs for TLS cert auth marked as deprecated
eedugon f71f8ff
tip and note aligned
eedugon 11bb095
Apply suggestions from code review
eedugon df470b6
merged main
eedugon 618845c
resolving all pending issues
eedugon 59cdd61
Apply suggestions from code review
eedugon 964429e
Merge branch 'main' into rcs_kibana_ui_snippet
eedugon bd60760
remote alias and api key aligned
eedugon 71c8fcf
Apply suggestions from code review
eedugon fe50c52
Merge branch 'main' into rcs_kibana_ui_snippet
eedugon File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
47 changes: 47 additions & 0 deletions
47
deploy-manage/remote-clusters/_snippets/rcs-elasticsearch-api-snippet.md
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,47 @@ | ||
<!-- | ||
This snippet is in use in the following locations: | ||
- ec-remote-cluster-same-ess.md | ||
- ec-remote-cluster-other-ess.md | ||
- ec-remote-cluster-ece.md | ||
- ece-remote-cluster-same-ece.md | ||
- ece-remote-cluster-other-ece.md | ||
- ece-remote-cluster-ess.md | ||
|
||
It requires remote_type substitution to be defined | ||
--> | ||
To configure a deployment as a remote cluster, use the [cluster update settings API](https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-cluster-put-settings). Configure the following fields: | ||
|
||
* `Remote cluster alias`: When using API key authentication, the cluster alias must match the one you configured when adding the API key in the Cloud UI as **Remote cluster name**. | ||
eedugon marked this conversation as resolved.
Show resolved
Hide resolved
|
||
* `mode`: `proxy` | ||
* `proxy_address`: This value can be found on the **Security** page of the {{remote_type}} you want to use as a remote. Copy the **Proxy address** from the **Remote cluster parameters** section. | ||
|
||
Using the API, this value can be obtained from the {{es}} resource info, concatenating the field `metadata.endpoint` and port `9400` using a semicolon. | ||
|
||
::::{note} | ||
If you’re using API keys as security model, change the port to `9443`. | ||
:::: | ||
|
||
* `server_name`: This value can be found on the **Security** page of the {{remote_type}} you want to use as a remote. Copy the **Server name** from the **Remote cluster parameters** section. | ||
|
||
Using the API, this can be obtained from the {{es}} resource info field `metadata.endpoint`. | ||
|
||
This example shows the API call to add or update a remote cluster. The alias `alias-for-my-remote-cluster` must match the remote cluster name used when adding the API key to the deployment: | ||
|
||
```json | ||
PUT /_cluster/settings | ||
{ | ||
"persistent": { | ||
"cluster": { | ||
"remote": { | ||
"alias-for-my-remote-cluster": { // Remote cluster alias | ||
"mode":"proxy", | ||
"proxy_address": "a542184a7a7d45b88b83f95392f450ab.192.168.44.10.ip.es.io:9400", | ||
"server_name": "a542184a7a7d45b88b83f95392f450ab.192.168.44.10.ip.es.io" | ||
} | ||
} | ||
} | ||
} | ||
} | ||
``` | ||
|
||
For a full list of available client connection settings in proxy mode, refer to the [remote cluster settings reference](elasticsearch://reference/elasticsearch/configuration-reference/remote-clusters.md#remote-cluster-proxy-settings). |
37 changes: 37 additions & 0 deletions
37
deploy-manage/remote-clusters/_snippets/rcs-kibana-api-snippet.md
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,37 @@ | ||
<!-- | ||
This snippet is in use in the following locations: | ||
- ec-remote-cluster-same-ess.md | ||
- ec-remote-cluster-other-ess.md | ||
- ec-remote-cluster-ece.md | ||
- ece-remote-cluster-same-ece.md | ||
- ece-remote-cluster-other-ece.md | ||
- ece-remote-cluster-ess.md | ||
|
||
It requires remote_type substitution to be defined | ||
--> | ||
1. Go to the **Remote Clusters** management page in the navigation menu or use the [global search field](/explore-analyze/find-and-organize/find-apps-and-objects.md). | ||
2. Select **Add a remote cluster**. | ||
2. In **Select connection type**, choose the authentication mechanism you prepared earlier (**API keys** or **Certificates**), and then click **Next**. | ||
3. In **Add connection information**, fill in the following fields: | ||
|
||
* **Remote cluster name**: This *cluster alias* is a unique identifier that represents the connection to the remote cluster and is used to distinguish local and remote indices. | ||
|
||
When using API key authentication, this alias must match the **Remote cluster name** you configured when adding the API key in the Cloud UI. | ||
|
||
* **Remote address**: This value can be found on the **Security** page of the {{remote_type}} you want to use as a remote. Copy the **Proxy address** from the **Remote cluster parameters** section. | ||
|
||
::::{note} | ||
If you’re using API keys as security model, change the port to `9443`. | ||
:::: | ||
|
||
* **Configure advanced options** (optional): Expand this section if you need to customize additional settings. | ||
* **TLS server name**: Specify a value if the certificate presented by the remote cluster is signed for a different name than the remote address. | ||
|
||
This value can be found on the **Security** page of the {{remote_type}} you want to use as a remote. Copy the **Server name** from the **Remote cluster parameters** section. | ||
|
||
* **Socket connections**: Define the number of connections to open with the remote cluster. | ||
|
||
For a full list of available client connection settings, refer to the [remote cluster settings reference](elasticsearch://reference/elasticsearch/configuration-reference/remote-clusters.md#remote-cluster-proxy-settings). | ||
|
||
4. Click **Next**. | ||
5. In **Confirm setup**, click **Add remote cluster** (you have already established trust in a previous step). |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Uh oh!
There was an error while loading. Please reload this page.