Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update 8.0+ "Configure security in Kibana" docs to align with Stack security docs #117223

Closed
Tracked by #80170
jportner opened this issue Nov 2, 2021 · 3 comments · Fixed by #118088
Closed
Tracked by #80170

Update 8.0+ "Configure security in Kibana" docs to align with Stack security docs #117223

jportner opened this issue Nov 2, 2021 · 3 comments · Fixed by #118088
Labels
docs Feature:Security/Interactive Setup Platform Security - Interactive setup mode impact:needs-assessment Product and/or Engineering needs to evaluate the impact of the change. loe:small Small Level of Effort Team:Security Team focused on: Auth, Users, Roles, Spaces, Audit Logging, and more!

Comments

@jportner
Copy link
Contributor

jportner commented Nov 2, 2021

Meta issue for Stack security: elastic/elasticsearch#80170

Docs links:

  • Configure security in Kibana (7.16, 8.0)
  • Configure security for the Elastic Stack (7.16, 8.0)

Starting in 8.0, Security will be on by default in Elasticsearch, and Kibana can be configured to connect to Elasticsearch using an enrollment token.
The 8.0 Elastic Stack docs have been updated to instruct users to use Kibana's interactive setup mode to configure Kibana using the enrollment token.

We should update Kibana's docs in 8.0 accordingly. I suggest:

  • Change "1. Configure security in Elasticsearch." to point directly to the Stack Security page, and changing the link text to say "Configure Security in Elasticsearch and enroll Kibana"
  • Change "2. Configure Kibana to use the appropriate built-in user.", remove this section completely

@lockewritesdocs do you have any opinions?

@jportner jportner added Team:Security Team focused on: Auth, Users, Roles, Spaces, Audit Logging, and more! docs labels Nov 2, 2021
@elasticmachine
Copy link
Contributor

Pinging @elastic/kibana-security (Team:Security)

@lockewritesdocs
Copy link
Contributor

@jportner, I agree with those changes, but think there's more work to be done than just updating those two steps. For example, we need to update the introduction to explain that security is enabled by default, and that we're writing the configuration to kibana.yml. The links in steps 5 & 6 need to be updated instead of linking to old, redirected pages. Step 8 is no longer required, because users log in as the elastic user when enrolling Kibana. I plan on addressing all of these changes.

Related is the question about what to do with pages like Encrypt communications in Kibana that just point to the Elasticsearch docs. Other pages like Mutual TLS with Elasticsearch should be retained for users who want to configure it, but we should revisit that information and update it.

@jportner
Copy link
Contributor Author

I opened another issue for follow-on work to restructure the Kibana docs, we'll start by making an outline: #118283

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
docs Feature:Security/Interactive Setup Platform Security - Interactive setup mode impact:needs-assessment Product and/or Engineering needs to evaluate the impact of the change. loe:small Small Level of Effort Team:Security Team focused on: Auth, Users, Roles, Spaces, Audit Logging, and more!
Projects
None yet
Development

Successfully merging a pull request may close this issue.

4 participants