honeymoose
/
OpenSearch
mirror of https://github.com/honeymoose/OpenSearch.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

[DOCS] Collapse 7.8 breaking changes for security (#56622)

This commit is contained in:
James Rodewig 2020-05-12 15:30:28 -04:00 committed by GitHub
parent 0a879b95d1
commit 54088a21d7
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 17 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
docs/reference/migration/migrate_7_8.asciidoc
View File

@ -121,18 +121,20 @@ indices, the newly introduced `xpack.watcher.use_ilm_index_management` setting
may be set to false. may be set to false.
==== ====
[float] [discrete]
[[builtin-users-changes]] [[builtin-users-changes]]
==== Changes to built-in users ==== Changes to built-in users
[float] .The `kibana` user has been deprecated in favor of the `kibana_system` user.
===== The `kibana` user has been deprecated in favor of the `kibana_system` user [%collapsible]
====
*Details* +
The `kibana` user was historically used to authenticate {kib} to {es}. The `kibana` user was historically used to authenticate {kib} to {es}.
The name of this user was confusing, and was often mistakenly used to login to {kib}. The name of this user was confusing, and was often mistakenly used to login to {kib}.
This has been renamed to `kibana_system` in order to reduce confusion, and to better This has been renamed to `kibana_system` in order to reduce confusion, and to better
align with other built-in system accounts. align with other built-in system accounts.
*Impact* +
If your `kibana.yml` used to contain: If your `kibana.yml` used to contain:
[source,yaml] [source,yaml]
-------------------------------------------------- --------------------------------------------------
@ -144,17 +146,24 @@ then you should update to use the new `kibana_system` user instead:
-------------------------------------------------- --------------------------------------------------
elasticsearch.username: kibana_system elasticsearch.username: kibana_system
-------------------------------------------------- --------------------------------------------------
====
[float] [discrete]
[[builtin-roles-changes]] [[builtin-roles-changes]]
==== Changes to built-in roles ==== Changes to built-in roles
[float] .The `kibana_user` role has been deprecated in favor of the `kibana_admin` role.
===== The `kibana_user` role has been deprecated in favor of the `kibana_admin` role [%collapsible]
====
*Details* +
Users who were previously assigned the `kibana_user` role should instead be assigned Users who were previously assigned the `kibana_user` role should instead be assigned
the `kibana_admin` role. This role grants the same set of privileges as `kibana_user`, but has been the `kibana_admin` role. This role grants the same set of privileges as `kibana_user`, but has been
renamed to better reflect its intended use. renamed to better reflect its intended use.
*Impact* +
Assign users with the `kibana_user` role to the `kibana_admin` role.
Discontinue use of the `kibana_user` role.
====
//end::notable-breaking-changes[] //end::notable-breaking-changes[]