diff --git a/doc/platform/security/security.rst b/doc/platform/security/security.rst index b41910ff6..666a07b56 100644 --- a/doc/platform/security/security.rst +++ b/doc/platform/security/security.rst @@ -33,7 +33,7 @@ types of connections: * Over a binary port for read and write operations and procedure invocation. For more information on authentication and connection types, see the -:ref:`admin-security` section of the Tarantool manual. +:ref:`admin-security` section in :ref:`Administration `. In addition, Tarantool provides the following functionality: diff --git a/doc/tooling/tcm/_images/tcm_ui_cluster_security.png b/doc/tooling/tcm/_images/tcm_ui_cluster_security.png new file mode 100644 index 000000000..26a5b907e Binary files /dev/null and b/doc/tooling/tcm/_images/tcm_ui_cluster_security.png differ diff --git a/doc/tooling/tcm/tcm_cluster_management/index.rst b/doc/tooling/tcm/tcm_cluster_management/index.rst index 489233e28..fd1466981 100644 --- a/doc/tooling/tcm/tcm_cluster_management/index.rst +++ b/doc/tooling/tcm/tcm_cluster_management/index.rst @@ -17,6 +17,7 @@ to learn how to perform various management operations on Tarantool clusters from tcm_cluster_state tcm_cluster_config tcm_cluster_users + tcm_cluster_security tcm_cluster_metrics tcm_supervised_failover tcm_cluster_migrations \ No newline at end of file diff --git a/doc/tooling/tcm/tcm_cluster_management/tcm_cluster_security.rst b/doc/tooling/tcm/tcm_cluster_management/tcm_cluster_security.rst new file mode 100644 index 000000000..01f85bb12 --- /dev/null +++ b/doc/tooling/tcm/tcm_cluster_management/tcm_cluster_security.rst @@ -0,0 +1,30 @@ +.. _tcm_cluster_security: + +Security settings +================= + +.. include:: ../index.rst + :start-after: ee_note_tcm_start + :end-before: ee_note_tcm_end + +|tcm_full_name| includes a web interface for managing security settings of connected +clusters. It is available on the **Cluster** > **Security** page. On this page, +you can manage the following security features in the cluster: + +- *Authentication settings*: protocol (CHAP or PAP), number of retries, and + the delay after a failed authentication attempt (:ref:`security.auth_* ` + configuration options). To learn more about Tarantool authentication settings, see :ref:`configuration_authentication`. +- *Password policy*: minimal password length, required characters, expiration + period, and other settings (:ref:`security.password_* ` + configuration options). To learn more about Tarantool password policy, see :ref:`enterprise-password-policy`. +- *Guest access*: whether unauthenticated or :ref:`guest ` + users can connect to cluster (:ref:`security.disable_guest ` + configuration option). +- *Secure erasing*: whether to delete data files securely so that they cannot be restored + (:ref:`security.secure_erasing ` configuration option). +- *Audit log*: configure audit logging in the cluster + (:ref:`audit_log.* ` configuration options). + To learn how to manage audit logging in the cluster, see :ref:`enterprise_audit_module`. + + + diff --git a/doc/tooling/tcm/tcm_releases/tcm_1.2.rst b/doc/tooling/tcm/tcm_releases/tcm_1.2.rst index 4492db76c..6a161dee4 100644 --- a/doc/tooling/tcm/tcm_releases/tcm_1.2.rst +++ b/doc/tooling/tcm/tcm_releases/tcm_1.2.rst @@ -36,4 +36,14 @@ on connected clusters. The new page **Migrations** in the **Cluster** page group provides a text editor where you can write migration scripts in Lua and apply them to the cluster. -Learn more about migrations in Tarantool :ref:`migrations`. \ No newline at end of file +Learn more about migrations in Tarantool :ref:`migrations`. + +.. _tcm_releases_1_2_cluster_security: + +Cluster security settings +------------------------- + +Since version 1.2.2, |tcm| provides a web interface for managing cluster security settings +on the **Security** page in the **Cluster** group. + +Learn more about managing cluster security from |tcm| in :ref:`tcm_cluster_security`. \ No newline at end of file diff --git a/doc/tooling/tcm/tcm_ui_overview.rst b/doc/tooling/tcm/tcm_ui_overview.rst index c0dc7c3e6..bf7c87cf1 100644 --- a/doc/tooling/tcm/tcm_ui_overview.rst +++ b/doc/tooling/tcm/tcm_ui_overview.rst @@ -172,6 +172,20 @@ sent to this centralized storage. Learn more in :ref:`tcm_configuring_clusters`. +.. _tcm_ui_cluster_security: + +Security +~~~~~~~~ + +The **Security** page provides controls for managing the cluster security settings. + +.. image:: _images/tcm_ui_cluster_security.png + :align: left + :width: 700 + :alt: TCM cluster security page + +Learn more in :ref:`tcm_cluster_security`. + .. _tcm_ui_cluster_migrations: Migrations @@ -185,7 +199,6 @@ The **Migrations** page provides centralized migration management tools for the :alt: TCM cluster migrations page Learn more in :ref:`tcm_cluster_migrations`. - .. _tcm_ui_cluster_tuples: Tuples