Require security to be provided by X-Pack #66814
Closed
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Disable 3rd party security plugins
In order to provide a stronger guarantee to our solutions, that if a cluster is running the default distribution and has security (authentication) enabled, then it will be provided by Elastic's security features, and users can rely on it behaving in the ways they expect, this change 1) mandate that security in default distribution is provided by X-Pack by always installing the Security Rest Filter and 2) adding warnings if credentials are provided to a cluster that does not have security enabled. Related: elastic#188
BigPandaToo
added
:Security/Authentication
|
Pinging @elastic/es-security (Team:Security) |
BigPandaToo
removed
:Security/Authentication
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
In order to provide a stronger guarantee to our solutions, that if a
cluster is running the default distribution and has security
(authentication) enabled,
then it will be provided by Elastic's security features, and users can
rely on it behaving in the ways they expect, this change 1) mandate
that security in default distribution is provided by X-Pack by always
installing the Security Rest Filter and 2) adding warnings if
credentials are provided to a cluster that does not have security
enabled.
Related: #188