diff --git a/docs/reference/modules/cluster/remote-clusters-api-key.asciidoc b/docs/reference/modules/cluster/remote-clusters-api-key.asciidoc index 506e834e0b1c1..5f462b14405ba 100644 --- a/docs/reference/modules/cluster/remote-clusters-api-key.asciidoc +++ b/docs/reference/modules/cluster/remote-clusters-api-key.asciidoc @@ -1,8 +1,6 @@ [[remote-clusters-api-key]] === Add remote clusters using API key authentication -beta::[] - API key authentication enables a local cluster to authenticate itself with a remote cluster via a <>. The API key needs to be created by an administrator of the remote diff --git a/docs/reference/modules/cluster/remote-clusters-settings.asciidoc b/docs/reference/modules/cluster/remote-clusters-settings.asciidoc index bba8c7ffb3491..1cad537845221 100644 --- a/docs/reference/modules/cluster/remote-clusters-settings.asciidoc +++ b/docs/reference/modules/cluster/remote-clusters-settings.asciidoc @@ -68,7 +68,6 @@ mode are described separately. `cluster.remote..credentials` (<>, <>):: [[remote-cluster-credentials-setting]] -beta:[] Per cluster setting for configuring <>. This setting takes the encoded value of a <> and must be set diff --git a/docs/reference/modules/remote-cluster-network.asciidoc b/docs/reference/modules/remote-cluster-network.asciidoc index ac2b4cbf65d0a..c57f0bb31e270 100644 --- a/docs/reference/modules/remote-cluster-network.asciidoc +++ b/docs/reference/modules/remote-cluster-network.asciidoc @@ -1,8 +1,6 @@ [[remote-cluster-network-settings]] ==== Advanced remote cluster (API key based model) settings -beta::[] - Use the following advanced settings to configure the remote cluster interface (API key based model) independently of the <>. You can also configure both interfaces together using the <>. diff --git a/docs/reference/modules/remote-clusters.asciidoc b/docs/reference/modules/remote-clusters.asciidoc index 8dcdfb009dab5..25217302b7631 100644 --- a/docs/reference/modules/remote-clusters.asciidoc +++ b/docs/reference/modules/remote-clusters.asciidoc @@ -45,8 +45,7 @@ with either of the connection modes. ==== Security models API key based security model:: -beta:[] -For clusters on version 8.10 or later, you can use an API key to authenticate +For clusters on version 8.14 or later, you can use an API key to authenticate and authorize cross-cluster operations to a remote cluster. This model offers administrators of both the local and the remote cluster fine-grained access controls. <>. diff --git a/docs/reference/rest-api/security/create-cross-cluster-api-key.asciidoc b/docs/reference/rest-api/security/create-cross-cluster-api-key.asciidoc index 6cb00815c0ce7..13f2a60e6a9e0 100644 --- a/docs/reference/rest-api/security/create-cross-cluster-api-key.asciidoc +++ b/docs/reference/rest-api/security/create-cross-cluster-api-key.asciidoc @@ -2,8 +2,6 @@ [[security-api-create-cross-cluster-api-key]] === Create Cross-Cluster API key API -beta::[] - ++++ Create Cross-Cluster API key ++++ diff --git a/docs/reference/rest-api/security/create-roles.asciidoc b/docs/reference/rest-api/security/create-roles.asciidoc index 532ea60d3e46a..4f41c0b54bb1d 100644 --- a/docs/reference/rest-api/security/create-roles.asciidoc +++ b/docs/reference/rest-api/security/create-roles.asciidoc @@ -74,7 +74,7 @@ that begin with `_` are reserved for system usage. For more information, see <>. -`remote_indices`:: beta:[] (list) A list of remote indices permissions entries. +`remote_indices`:: (list) A list of remote indices permissions entries. + -- NOTE: Remote indices are effective for <>. diff --git a/docs/reference/rest-api/security/update-cross-cluster-api-key.asciidoc b/docs/reference/rest-api/security/update-cross-cluster-api-key.asciidoc index c22a1347c8262..b90cb6368eefb 100644 --- a/docs/reference/rest-api/security/update-cross-cluster-api-key.asciidoc +++ b/docs/reference/rest-api/security/update-cross-cluster-api-key.asciidoc @@ -2,8 +2,6 @@ [[security-api-update-cross-cluster-api-key]] === Update Cross-Cluster API key API -beta::[] - ++++ Update Cross-Cluster API key ++++ diff --git a/docs/reference/security/authorization/managing-roles.asciidoc b/docs/reference/security/authorization/managing-roles.asciidoc index 25d1c20471e9c..a6197327db683 100644 --- a/docs/reference/security/authorization/managing-roles.asciidoc +++ b/docs/reference/security/authorization/managing-roles.asciidoc @@ -31,8 +31,7 @@ A role is defined by the following JSON structure: <4> A list of indices permissions entries. This field is optional (missing `indices` privileges effectively mean no index level permissions). <5> A list of application privilege entries. This field is optional. -<6> beta:[] - A list of indices permissions entries for +<6> A list of indices permissions entries for <>. This field is optional (missing `remote_indices` privileges effectively mean no index level permissions for any API key based remote clusters). @@ -165,8 +164,6 @@ no effect, and will not grant any actions in the [[roles-remote-indices-priv]] ==== Remote indices privileges -beta::[] - For <>, remote indices privileges can be used to specify desired indices privileges for matching remote clusters. The final effective index privileges will be an intersection of the remote indices privileges diff --git a/docs/reference/security/authorization/privileges.asciidoc b/docs/reference/security/authorization/privileges.asciidoc index f85ff6bc92845..9153b5fbdcab3 100644 --- a/docs/reference/security/authorization/privileges.asciidoc +++ b/docs/reference/security/authorization/privileges.asciidoc @@ -21,7 +21,7 @@ Privileges to create snapshots for existing repositories. Can also list and view details on existing repositories and snapshots. `cross_cluster_replication`:: -beta:[] Privileges to connect to <> +Privileges to connect to <> for cross-cluster replication. + -- @@ -32,7 +32,7 @@ to manage cross-cluster API keys. -- `cross_cluster_search`:: -beta:[] Privileges to connect to <> +Privileges to connect to <> for cross-cluster search. + -- @@ -310,13 +310,13 @@ requires the `manage` privilege as well, on both the index and the aliases names. `cross_cluster_replication`:: -beta:[] Privileges to perform cross-cluster replication for indices located on +Privileges to perform cross-cluster replication for indices located on <>. This privilege should only be used for the `privileges` field of <>. `cross_cluster_replication_internal`:: -beta:[] Privileges to perform supporting actions for cross-cluster replication from +Privileges to perform supporting actions for cross-cluster replication from <>. + -- diff --git a/docs/reference/security/using-ip-filtering.asciidoc b/docs/reference/security/using-ip-filtering.asciidoc index 1280ffd281dac..b59f90c92c776 100644 --- a/docs/reference/security/using-ip-filtering.asciidoc +++ b/docs/reference/security/using-ip-filtering.asciidoc @@ -114,8 +114,6 @@ xpack.security.http.filter.deny: _all [discrete] === Remote cluster (API key based model) filtering -beta::[] - If other clusters connect <> for {ccs} or {ccr}, you may want to have different IP filtering for the remote cluster server interface. diff --git a/docs/reference/settings/security-settings.asciidoc b/docs/reference/settings/security-settings.asciidoc index c620d97fda425..e0d01965479ce 100644 --- a/docs/reference/settings/security-settings.asciidoc +++ b/docs/reference/settings/security-settings.asciidoc @@ -2639,8 +2639,6 @@ include::ssl-settings.asciidoc[] [[remote-cluster-server-tls-ssl-settings]] -beta::[] - :ssl-prefix: xpack.security.remote_cluster_server :component: Remote cluster server (API key based model) :enabled-by-default: @@ -2655,8 +2653,6 @@ include::ssl-settings.asciidoc[] [[remote-cluster-client-tls-ssl-settings]] -beta::[] - :ssl-prefix: xpack.security.remote_cluster_client :component: Remote cluster client (API key based model) :enabled-by-default: @@ -2714,12 +2710,12 @@ List of IP addresses to deny for this profile. `xpack.security.remote_cluster.filter.allow`:: (<>) -beta:[] List of IP addresses to allow just for the +List of IP addresses to allow just for the <>. `xpack.security.remote_cluster.filter.deny`:: (<>) -beta:[] List of IP addresses to deny just for the remote cluster server configured with +List of IP addresses to deny just for the remote cluster server configured with the <>. include::security-hash-settings.asciidoc[]