Add Security section in elasticsearch.yml (elastic#78337)

* Add Security section in elasticsearch.yml * Update distribution/src/config/elasticsearch.yml Co-authored-by: Adam Locke <[email protected]> * Update distribution/src/config/elasticsearch.yml Co-authored-by: Ioannis Kakavas <[email protected]> * Apply suggestions from code review Address feedback Co-authored-by: Tim Vernum <[email protected]> Co-authored-by: Adam Locke <[email protected]> Co-authored-by: Adam Locke <[email protected]> Co-authored-by: Ioannis Kakavas <[email protected]> Co-authored-by: Tim Vernum <[email protected]> Co-authored-by: Elastic Machine <[email protected]>
cbuescher · Oct 11, 2021 · 7f73fd4 · 7f73fd4
1 parent f3500cb
commit 7f73fd4
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/distribution/src/config/elasticsearch.yml b/distribution/src/config/elasticsearch.yml
@@ -80,3 +80,17 @@
 # Require explicit names when deleting indices:
 #
 #action.destructive_requires_name: true
+#
+# ---------------------------------- Security ----------------------------------
+#
+#                                 *** WARNING ***
+#
+# Elasticsearch security features are not enabled by default.
+# These features are free, but require configuration changes to enable them.
+# This means that users don’t have to provide credentials and can get full access
+# to the cluster. Network connections are also not encrypted.
+#
+# To protect your data, we strongly encourage you to enable the Elasticsearch security features. 
+# Refer to the following documentation for instructions.
+#
+# https://www.elastic.co/guide/en/elasticsearch/reference/7.16/configuring-stack-security.html