From bca5fbe82b8ef2bf707427aab115679ef41562d3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Edu=20Gonz=C3=A1lez=20de=20la=20Herr=C3=A1n?= <25320357+eedugon@users.noreply.github.com> Date: Thu, 30 Oct 2025 18:26:57 +0100 Subject: [PATCH 1/5] snippet and FIPS message added --- deploy-manage/deploy/_snippets/ece-supported-combinations.md | 5 +++++ deploy-manage/deploy/cloud-enterprise/configure-host-rhel.md | 3 +-- deploy-manage/deploy/cloud-enterprise/configure-host-suse.md | 3 +-- .../deploy/cloud-enterprise/configure-host-ubuntu.md | 3 +-- .../deploy/cloud-enterprise/configure-operating-system.md | 5 ++--- 5 files changed, 10 insertions(+), 9 deletions(-) create mode 100644 deploy-manage/deploy/_snippets/ece-supported-combinations.md diff --git a/deploy-manage/deploy/_snippets/ece-supported-combinations.md b/deploy-manage/deploy/_snippets/ece-supported-combinations.md new file mode 100644 index 0000000000..91158c22a5 --- /dev/null +++ b/deploy-manage/deploy/_snippets/ece-supported-combinations.md @@ -0,0 +1,5 @@ +::::{important} +Make sure to use a supported combination of Linux distribution and container engine version as defined in our official [Support matrix](https://www.elastic.co/support/matrix#elastic-cloud-enterprise). Unsupported combinations can lead to various issues in your ECE environment, including failures when creating system deployments, upgrading workload deployments, proxy timeouts, and more. + +Note that FIPS (Federal Information Processing Standards) compliance is not officially supported in ECE. While ECE may function on FIPS-enabled systems, this configuration has not been validated through our testing processes and is not recommended for production environments. +:::: diff --git a/deploy-manage/deploy/cloud-enterprise/configure-host-rhel.md b/deploy-manage/deploy/cloud-enterprise/configure-host-rhel.md index fc9d83daf3..a6e5c7e916 100644 --- a/deploy-manage/deploy/cloud-enterprise/configure-host-rhel.md +++ b/deploy-manage/deploy/cloud-enterprise/configure-host-rhel.md @@ -25,8 +25,7 @@ Verify that required traffic is allowed. Check the [Networking prerequisites](ec **Example:** For AWS, allowing traffic between hosts is implemented using security groups. -::::{important} -Make sure to use a supported combination of Linux distribution and container engine version as defined in our official [Support matrix](https://www.elastic.co/support/matrix#elastic-cloud-enterprise). Unsupported combinations can lead to various issues in your ECE environment, including failures when creating system deployments, upgrading workload deployments, proxy timeouts, and more. +::::{include} /deploy-manage/deploy/_snippets/ece-supported-combinations.md :::: ## Install Podman and configure the host [ece-configure-hosts-rhel8-podman] diff --git a/deploy-manage/deploy/cloud-enterprise/configure-host-suse.md b/deploy-manage/deploy/cloud-enterprise/configure-host-suse.md index c1406fe68d..a644717690 100644 --- a/deploy-manage/deploy/cloud-enterprise/configure-host-suse.md +++ b/deploy-manage/deploy/cloud-enterprise/configure-host-suse.md @@ -28,8 +28,7 @@ Regardless of which approach you take, the steps in this section need to be perf ## Install Docker on SLES [ece-install-docker-sles12] -::::{important} -Make sure to use a supported combination of Linux distribution and container engine version as defined in our official [Support matrix](https://www.elastic.co/support/matrix#elastic-cloud-enterprise). Unsupported combinations can lead to various issues in your ECE environment, including failures when creating system deployments, upgrading workload deployments, proxy timeouts, and more. +::::{include} /deploy-manage/deploy/_snippets/ece-supported-combinations.md :::: diff --git a/deploy-manage/deploy/cloud-enterprise/configure-host-ubuntu.md b/deploy-manage/deploy/cloud-enterprise/configure-host-ubuntu.md index d424c8c176..00a5356515 100644 --- a/deploy-manage/deploy/cloud-enterprise/configure-host-ubuntu.md +++ b/deploy-manage/deploy/cloud-enterprise/configure-host-ubuntu.md @@ -24,8 +24,7 @@ The following instructions show you how to prepare your hosts on Ubuntu. Install a compatible Docker version on Ubuntu. -::::{important} -Make sure to use a supported combination of Linux distribution and container engine version as defined in our official [Support matrix](https://www.elastic.co/support/matrix#elastic-cloud-enterprise). Unsupported combinations can lead to various issues in your ECE environment, including failures when creating system deployments, upgrading workload deployments, proxy timeouts, and more. +::::{include} /deploy-manage/deploy/_snippets/ece-supported-combinations.md :::: diff --git a/deploy-manage/deploy/cloud-enterprise/configure-operating-system.md b/deploy-manage/deploy/cloud-enterprise/configure-operating-system.md index 566623ccab..89cdbae122 100644 --- a/deploy-manage/deploy/cloud-enterprise/configure-operating-system.md +++ b/deploy-manage/deploy/cloud-enterprise/configure-operating-system.md @@ -17,6 +17,5 @@ Before installing {{ece}}, you have to prepare your hosts with one of the follow * [Red Hat Enterprise Linux (RHEL) and Rocky Linux](configure-host-rhel.md) * [SUSE Linux Enterprise Server (SLES)](configure-host-suse.md) -::::{important} -Make sure to use a supported combination of Linux distribution and container engine version, such as `Docker` or `Podman`, as defined in our official [Support matrix](https://www.elastic.co/support/matrix#elastic-cloud-enterprise). Unsupported combinations can lead to various issues in your ECE environment, including failures when creating system deployments, upgrading workload deployments, proxy timeouts, and more. -:::: \ No newline at end of file +::::{include} /deploy-manage/deploy/_snippets/ece-supported-combinations.md +:::: From ad21ff90d5ada23aff98e0090a0f55f1040a7403 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Edu=20Gonz=C3=A1lez=20de=20la=20Herr=C3=A1n?= <25320357+eedugon@users.noreply.github.com> Date: Fri, 31 Oct 2025 09:05:37 +0100 Subject: [PATCH 2/5] Update deploy-manage/deploy/_snippets/ece-supported-combinations.md Co-authored-by: shainaraskas <58563081+shainaraskas@users.noreply.github.com> --- deploy-manage/deploy/_snippets/ece-supported-combinations.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/deploy-manage/deploy/_snippets/ece-supported-combinations.md b/deploy-manage/deploy/_snippets/ece-supported-combinations.md index 91158c22a5..bcc681fd66 100644 --- a/deploy-manage/deploy/_snippets/ece-supported-combinations.md +++ b/deploy-manage/deploy/_snippets/ece-supported-combinations.md @@ -1,5 +1,5 @@ ::::{important} Make sure to use a supported combination of Linux distribution and container engine version as defined in our official [Support matrix](https://www.elastic.co/support/matrix#elastic-cloud-enterprise). Unsupported combinations can lead to various issues in your ECE environment, including failures when creating system deployments, upgrading workload deployments, proxy timeouts, and more. -Note that FIPS (Federal Information Processing Standards) compliance is not officially supported in ECE. While ECE may function on FIPS-enabled systems, this configuration has not been validated through our testing processes and is not recommended for production environments. +FIPS (Federal Information Processing Standards) compliance is not officially supported in ECE. While ECE may function on FIPS-enabled systems, this configuration has not been validated through our testing processes and is not recommended for production environments. :::: From b6a8b455ff1f9dca636f3e2926ec53f780087211 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Edu=20Gonz=C3=A1lez=20de=20la=20Herr=C3=A1n?= <25320357+eedugon@users.noreply.github.com> Date: Fri, 31 Oct 2025 09:34:24 +0100 Subject: [PATCH 3/5] added fips message in extra docs --- .../deploy/cloud-enterprise/ece-software-prereq.md | 3 +++ deploy-manage/deploy/cloud-enterprise/install.md | 11 +++++++---- deploy-manage/security/fips.md | 2 ++ 3 files changed, 12 insertions(+), 4 deletions(-) diff --git a/deploy-manage/deploy/cloud-enterprise/ece-software-prereq.md b/deploy-manage/deploy/cloud-enterprise/ece-software-prereq.md index 227d9c8f7e..cffe6ac69c 100644 --- a/deploy-manage/deploy/cloud-enterprise/ece-software-prereq.md +++ b/deploy-manage/deploy/cloud-enterprise/ece-software-prereq.md @@ -12,6 +12,9 @@ products: To install ECE, make sure you prepare your environment with the following software. Pay special attention to what Linux kernel and Docker or Podman versions you plan to use and follow our recommendations. Our testing has shown that not all software combinations work well together. +::::{include} /deploy-manage/deploy/_snippets/ece-supported-combinations.md +:::: + * [Supported Linux kernel](#ece-linux-kernel) * [Linux distributions with compatible Docker versions](#ece-linux-docker) * [Free RAM](#ece-free-ram) diff --git a/deploy-manage/deploy/cloud-enterprise/install.md b/deploy-manage/deploy/cloud-enterprise/install.md index d102e00272..5667190248 100644 --- a/deploy-manage/deploy/cloud-enterprise/install.md +++ b/deploy-manage/deploy/cloud-enterprise/install.md @@ -17,6 +17,10 @@ products: You can deploy {{ece}} (ECE) on public or private clouds, virtual machines, or on-premises. +::::{tip} +If you already have an ECE platform up and running, and you want to add hosts to your installation, refer to [](./install-ece-on-additional-hosts.md). +:::: + In ECE, a host refers to any server, VM, or cloud instance where the ECE software is installed. An ECE platform consists of multiple hosts working together to orchestrate {{stack}} applications. For public cloud deployments, you can choose from the following providers: @@ -25,10 +29,6 @@ For public cloud deployments, you can choose from the following providers: * Google Cloud Platform (GCP) * Microsoft Azure -::::{tip} -If you already have an ECE platform up and running, and you want to add hosts to your installation, refer to [](./install-ece-on-additional-hosts.md). -:::: - ::::{note} In these pages we frequently refer to [Docker](https://www.docker.com/), as its currently the most common container engine, but these instructions are generally valid for [Podman](https://podman.io/) as well, with `podman` replacing `docker` in commands as appropriate. :::: @@ -41,6 +41,9 @@ Before you start, make sure to [identify your deployment scenario](identify-depl After completing the prerequisites, proceed to configure your ECE hosts. This includes installing Docker or Podman, setting up XFS quotas, preparing mount points, and other required configurations. +::::{include} /deploy-manage/deploy/_snippets/ece-supported-combinations.md +:::: + ECE supports a [wide range of OS versions](https://www.elastic.co/support/matrix#elastic-cloud-enterprise). Below are some OS-specific instructions for preparing your hosts, though other versions follow a similar process. Choose the appropriate guide for your operating system and follow the instructions: * [Ubuntu 20.04 LTS (Focal Fossa) and Ubuntu 22.04 LTS (Jammy Jellyfish)](configure-host-ubuntu.md) diff --git a/deploy-manage/security/fips.md b/deploy-manage/security/fips.md index 996d152f57..e2b8ff4033 100644 --- a/deploy-manage/security/fips.md +++ b/deploy-manage/security/fips.md @@ -23,5 +23,7 @@ The Federal Information Processing Standard (FIPS) Publication 140-2, (FIPS PUB :::{note} If you are running {{es}} through {{eck}}, refer to [ECK FIPS compatibility](/deploy-manage/deploy/cloud-on-k8s/deploy-fips-compatible-version-of-eck.md). + +FIPS compliance is not officially supported in {{ece}} (ECE). While ECE may function on FIPS-enabled systems, this configuration has not been validated through our testing processes and is not recommended for production environments. ::: From a459490059391333e271f953161fff85666a6dcf Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Edu=20Gonz=C3=A1lez=20de=20la=20Herr=C3=A1n?= <25320357+eedugon@users.noreply.github.com> Date: Fri, 31 Oct 2025 09:51:44 +0100 Subject: [PATCH 4/5] converted to two snippets --- deploy-manage/deploy/_snippets/ece-fips-message.md | 1 + .../deploy/_snippets/ece-supported-combinations.md | 3 ++- .../deploy/cloud-enterprise/ece-software-prereq.md | 9 ++++++--- 3 files changed, 9 insertions(+), 4 deletions(-) create mode 100644 deploy-manage/deploy/_snippets/ece-fips-message.md diff --git a/deploy-manage/deploy/_snippets/ece-fips-message.md b/deploy-manage/deploy/_snippets/ece-fips-message.md new file mode 100644 index 0000000000..c7626f8141 --- /dev/null +++ b/deploy-manage/deploy/_snippets/ece-fips-message.md @@ -0,0 +1 @@ +FIPS (Federal Information Processing Standards) compliance is not officially supported in ECE. While ECE may function on FIPS-enabled systems, this configuration has not been validated through our testing processes and is not recommended for production environments. \ No newline at end of file diff --git a/deploy-manage/deploy/_snippets/ece-supported-combinations.md b/deploy-manage/deploy/_snippets/ece-supported-combinations.md index bcc681fd66..cfbf7cdbba 100644 --- a/deploy-manage/deploy/_snippets/ece-supported-combinations.md +++ b/deploy-manage/deploy/_snippets/ece-supported-combinations.md @@ -1,5 +1,6 @@ ::::{important} Make sure to use a supported combination of Linux distribution and container engine version as defined in our official [Support matrix](https://www.elastic.co/support/matrix#elastic-cloud-enterprise). Unsupported combinations can lead to various issues in your ECE environment, including failures when creating system deployments, upgrading workload deployments, proxy timeouts, and more. -FIPS (Federal Information Processing Standards) compliance is not officially supported in ECE. While ECE may function on FIPS-enabled systems, this configuration has not been validated through our testing processes and is not recommended for production environments. +:::{include} /deploy-manage/deploy/_snippets/ece-fips-message.md +::: :::: diff --git a/deploy-manage/deploy/cloud-enterprise/ece-software-prereq.md b/deploy-manage/deploy/cloud-enterprise/ece-software-prereq.md index cffe6ac69c..2e8083a639 100644 --- a/deploy-manage/deploy/cloud-enterprise/ece-software-prereq.md +++ b/deploy-manage/deploy/cloud-enterprise/ece-software-prereq.md @@ -12,9 +12,6 @@ products: To install ECE, make sure you prepare your environment with the following software. Pay special attention to what Linux kernel and Docker or Podman versions you plan to use and follow our recommendations. Our testing has shown that not all software combinations work well together. -::::{include} /deploy-manage/deploy/_snippets/ece-supported-combinations.md -:::: - * [Supported Linux kernel](#ece-linux-kernel) * [Linux distributions with compatible Docker versions](#ece-linux-docker) * [Free RAM](#ece-free-ram) @@ -84,3 +81,9 @@ You must use XFS and have quotas enabled on all allocators, otherwise disk usage :::: +## FIPS compliance + +:::{include} /deploy-manage/deploy/_snippets/ece-fips-message.md +::: + +For more information about FIPS compliance across the {{stack}}, refer to [](/deploy-manage/security/fips.md). From 8064f35a775daa40e52b6c9c1ab5ab76eab14077 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Edu=20Gonz=C3=A1lez=20de=20la=20Herr=C3=A1n?= <25320357+eedugon@users.noreply.github.com> Date: Fri, 31 Oct 2025 10:30:02 +0100 Subject: [PATCH 5/5] fips --- deploy-manage/deploy/cloud-enterprise/ece-software-prereq.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/deploy-manage/deploy/cloud-enterprise/ece-software-prereq.md b/deploy-manage/deploy/cloud-enterprise/ece-software-prereq.md index 2e8083a639..31c17df2c0 100644 --- a/deploy-manage/deploy/cloud-enterprise/ece-software-prereq.md +++ b/deploy-manage/deploy/cloud-enterprise/ece-software-prereq.md @@ -16,6 +16,7 @@ To install ECE, make sure you prepare your environment with the following softwa * [Linux distributions with compatible Docker versions](#ece-linux-docker) * [Free RAM](#ece-free-ram) * [XFS](#ece-xfs) +* [FIPS compliance](#ece-fips) ## Supported Linux kernel [ece-linux-kernel] @@ -81,7 +82,7 @@ You must use XFS and have quotas enabled on all allocators, otherwise disk usage :::: -## FIPS compliance +## FIPS compliance [ece-fips] :::{include} /deploy-manage/deploy/_snippets/ece-fips-message.md :::