Default ciphers will be changing for ECE 3.0 With Elastic Cloud Enterprise version 3.0, the default ciphers in the proxy will only support the ciphers on this list:

ECDHE-RSA-AES128-GCM-SHA256
ECDHE-ECDSA-AES256-GCM-SHA384
ECDHE-RSA-AES256-GCM-SHA384
ECDHE-ECDSA-CHACHA20-POLY1305
ECDHE-RSA-CHACHA20-POLY1305
ECDHE-ECDSA-AES128-SHA256
ECDHE-RSA-AES128-SHA256
ECDHE-RSA-AES128-GCM-SHA256

The ciphers that will no longer be supported include:

ECDHE-ECDSA-AES128-SHA
ECDHE-RSA-AES128-SHA
ECDHE-ECDSA-AES256-SHA
ECDHE-RSA-AES256-SHA
ECDHE-RSA-DES-CBC3-SHA
AES128-GCM-SHA256
AES256-GCM-SHA384
AES128-SHA256
AES128-SHA
AES256-SHA1
DES-CBC3-SHA

Docsedit

Updating docs and adding task manager monitoring config. Adds support and docs for: * xpack.task_manager.monitored_stats_health_verbose_log.enabled Kibana Task Manager configuration * xpack.task_manager.monitored_stats_health_verbose_log.warn_delayed_task_start_in_seconds Kibana Task Manager configuration

Updating docs and adding task manager ephemeral tasks config. Adds support and docs for: * xpack.task_manager.ephemeral_tasks.enabled Kibana Task Manager configuration * xpack.task_manager.ephemeral_tasks.request_capacity Kibana Task Manager configuration * xpack.alerting.maxEphemeralActionsPerAlert Kibana Alerting configuration

Add stricter validation to create/update deployment templates. When creating or updating a Deployment template, if it specifies node_roles in the Elasticsearch plan, the template must contain all resource types and all Elasticsearch tiers.

Add docs about supporting node_roles and autoscaling. Adds docs on how to update ECE custom templates, to support node_roles and autoscaling.