-
Notifications
You must be signed in to change notification settings - Fork 25.5k
Adjust file realm docs #52471
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Adjust file realm docs #52471
Conversation
The existing wording in the file realm docs proved confusing for users as it seemed to indicate that it should _only_ be used as a fallback/recovery realm and that it is not a first class realm. This change attempts to clarify this and point out that recovery is _a_ use case for the file realm but not the only intended one.
Pinging @elastic/es-docs (>docs) |
Pinging @elastic/es-security (:Security/Authentication) |
The `file` realm is very useful as a fallback/recovery realm, for instance in cases where | ||
the cluster is unresponsive or the security index is unavailable, or when you forget the | ||
password for your administrative users. | ||
In this type of scenarios, the `file` realm is a convenient way out - you can |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
In this type of scenarios, the `file` realm is a convenient way out - you can | |
In this type of scenario, the `file` realm is a convenient way out - you can |
(no one remembers their username/password). In this type of scenarios, the `file` | ||
realm is your only way out - you can define a new `admin` user in the `file` realm | ||
and use it to log in and reset the credentials of all other users. | ||
The `file` realm is very useful as a fallback/recovery realm, for instance in cases where |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Not mandatory, but I prefer spelling out "/" and splitting this long sentence in two:
The `file` realm is very useful as a fallback/recovery realm, for instance in cases where | |
The `file` realm is very useful as a fallback or recovery realm. For example, use it in cases where |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Minor comments, otherwise LGTM
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I feel like this softens the wording too much
I think we can away people away from over using the file realm by explicitly point out the the file realm users cannot be retrieved from the API or the Kibana Security Management UI.
I can come up with some possible wording when I'm not on mobile.
Fair enough
I felt like the "important" above + the docs on the user APIs are enough, but you're probably right, I'll amend this to spell it out |
How about now @tvernum ? |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM, thanks.
The existing wording in the file realm docs proved confusing for users as it seemed to indicate that it should _only_ be used as a fallback/recovery realm and that it is not a first class realm. This change attempts to clarify this and point out that recovery is _a_ use case for the file realm but not the only intended one.
The existing wording in the file realm docs proved confusing for users as it seemed to indicate that it should _only_ be used as a fallback/recovery realm and that it is not a first class realm. This change attempts to clarify this and point out that recovery is _a_ use case for the file realm but not the only intended one.
The existing wording in the file realm docs proved confusing for users as it seemed to indicate that it should _only_ be used as a fallback/recovery realm and that it is not a first class realm. This change attempts to clarify this and point out that recovery is _a_ use case for the file realm but not the only intended one.
The existing wording in the file realm docs proved confusing for users as it seemed to indicate that it should _only_ be used as a fallback/recovery realm and that it is not a first class realm. This change attempts to clarify this and point out that recovery is _a_ use case for the file realm but not the only intended one.
The existing wording in the file realm docs proved confusing for users as it seemed to indicate that it should _only_ be used as a fallback/recovery realm and that it is not a first class realm. This change attempts to clarify this and point out that recovery is _a_ use case for the file realm but not the only intended one.
The existing wording in the file realm docs proved confusing for users as it seemed to indicate that it should _only_ be used as a fallback/recovery realm and that it is not a first class realm. This change attempts to clarify this and point out that recovery is _a_ use case for the file realm but not the only intended one.
The existing wording in the file realm docs proved confusing
for users as it seemed to indicate that it should only be
used as a fallback/recovery realm and that it is not a
first class realm.
This change attempts to clarify this and point out that recovery
is a use case for the file realm but not the only intended one.