Summary
In 8.0, security is enabled by default. We should enhance our "copy as curl" capability in code snippets to automatically include an environment variable for the auto-generated node security certificate.
Changes
In the current security documentation for 8.0, we include the following snippet so that users can test the connection to their cluster:
curl --cacert config/tls_auto_config_initial_node_<timestamp>/http_ca.crt -u elastic https://localhost:9200
We could instead replace the location of the security in the certificate in the Elasticsearch configuration directory with an environment variable, such as $ES_CA_CERT_LOCATION, which we would instruct users to set. We also need to set https as the default connection:
curl --cacert $ES_CA_CERT_LOCATION -u elastic https://localhost:9200
To enact this change, we would need to enhance the console widget code.
Summary
In 8.0, security is enabled by default. We should enhance our "copy as curl" capability in code snippets to automatically include an environment variable for the auto-generated node security certificate.
Changes
In the current security documentation for 8.0, we include the following snippet so that users can test the connection to their cluster:
We could instead replace the location of the security in the certificate in the Elasticsearch configuration directory with an environment variable, such as
$ES_CA_CERT_LOCATION, which we would instruct users to set. We also need to sethttpsas the default connection:To enact this change, we would need to enhance the console widget code.