浏览代码

[DOCS] Note that User Cluster Metadata is not private (#34156)

As user-defined cluster metadata is accessible to anyone with access to
get the cluster settings, stored in the logs, and likely to be tracked
by monitoring solutions, it is useful to clarify in the documentation
that it should not be used to store secret information.
Gordon Brown 7 年之前
父节点
当前提交
dd3fe92673
共有 1 个文件被更改,包括 6 次插入0 次删除
  1. 6 0
      docs/reference/modules/cluster/misc.asciidoc

+ 6 - 0
docs/reference/modules/cluster/misc.asciidoc

@@ -43,6 +43,12 @@ PUT /_cluster/settings
 -------------------------------
 // CONSOLE
 
+IMPORTANT: User-defined cluster metadata is not intended to store sensitive or
+confidential information. Any information stored in user-defined cluster
+metadata will be viewable by anyone with access to the
+<<cluster-get-settings,Cluster Get Settings>> API, and is recorded in the
+{es} logs.
+
 [[cluster-max-tombstones]]
 ==== Index Tombstones