Skip to content

Commit 557eabf

Browse files
authored
[DOCS] TLS file resources are reloadable (#33258)
Make clearer that file resources that are used as key trust material are polled and will be reloaded upon modification.
1 parent b6f762d commit 557eabf

File tree

2 files changed

+22
-2
lines changed

2 files changed

+22
-2
lines changed

x-pack/docs/en/security/securing-communications/tls-http.asciidoc

Lines changed: 11 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -77,7 +77,17 @@ bin/elasticsearch-keystore add xpack.security.http.ssl.secure_key_passphrase
7777

7878
. Restart {es}.
7979

80-
NOTE: All TLS-related node settings are considered to be highly sensitive and
80+
[NOTE]
81+
===============================
82+
* All TLS-related node settings are considered to be highly sensitive and
8183
therefore are not exposed via the
8284
{ref}/cluster-nodes-info.html#cluster-nodes-info[nodes info API] For more
8385
information about any of these settings, see <<security-settings>>.
86+
87+
* {es} monitors all files such as certificates, keys, keystores, or truststores
88+
that are configured as values of TLS-related node settings. If you update any of
89+
these files (for example, when your hostnames change or your certificates are
90+
due to expire), {es} reloads them. The files are polled for changes at
91+
a frequency determined by the global {es} `resource.reload.interval.high`
92+
setting, which defaults to 5 seconds.
93+
===============================

x-pack/docs/en/security/securing-communications/tls-transport.asciidoc

Lines changed: 11 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -95,7 +95,17 @@ vice-versa). After enabling TLS you must restart all nodes in order to maintain
9595
communication across the cluster.
9696
--
9797

98-
NOTE: All TLS-related node settings are considered to be highly sensitive and
98+
[NOTE]
99+
===============================
100+
* All TLS-related node settings are considered to be highly sensitive and
99101
therefore are not exposed via the
100102
{ref}/cluster-nodes-info.html#cluster-nodes-info[nodes info API] For more
101103
information about any of these settings, see <<security-settings>>.
104+
105+
* {es} monitors all files such as certificates, keys, keystores, or truststores
106+
that are configured as values of TLS-related node settings. If you update any of
107+
these files (for example, when your hostnames change or your certificates are
108+
due to expire), {es} reloads them. The files are polled for changes at
109+
a frequency determined by the global {es} `resource.reload.interval.high`
110+
setting, which defaults to 5 seconds.
111+
===============================

0 commit comments

Comments
 (0)