Skip to content

Commit

Permalink
Add warning for role mappings for 8.15 (#8057)
Browse files Browse the repository at this point in the history
  • Loading branch information
pebrc authored Sep 27, 2024
1 parent 49e40ca commit 8aae117
Show file tree
Hide file tree
Showing 7 changed files with 14 additions and 0 deletions.
2 changes: 2 additions & 0 deletions docs/eck-attributes.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -3,3 +3,5 @@
:eck_release_branch: 2.14
:eck_github: https://github.com/elastic/cloud-on-k8s
:eck_resources_list: Elasticsearch, Kibana, APM Server, Enterprise Search, Beats, Elastic Agent, Elastic Maps Server, and Logstash

:role_mappings_warning: We have identified an issue with Elasticsearch 8.15 that prevents security role mappings configured via Stack configuration policies to work correctly. The only workaround is to specify the security role mappings via the link:https://www.elastic.co/guide/en/elasticsearch/reference/current/security-api-put-role-mapping.html[Elasticsearch REST API]. After an upgrade from a previous Elasticsearch version to 8.15 role mappings will be preserved but will not receive future updates from the Stack configuration policy. We are working on a fix to restore the functionality in a future Elasticsearch release.
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,8 @@ endif::[]
[id="{p}-{page_id}"]
= Managing authentication for multiple stacks using Elastic Stack configuration policy

CAUTION: {role_mappings_warning}

NOTE: This requires a valid Enterprise license or Enterprise trial license. Check <<{p}-licensing,the license documentation>> for more details about managing licenses.


Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,8 @@ endif::[]

= JWT using Elastic Stack configuration policy

CAUTION: {role_mappings_warning}

NOTE: This requires a valid Enterprise license or Enterprise trial license. Check <<{p}-licensing,the license documentation>> for more details about managing licenses.

TIP: Make sure you check the complete link:https://www.elastic.co/guide/en/elasticsearch/reference/current/jwt-auth-realm.html[guide to setting up JWT with Elasticsearch].
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,8 @@ endif::[]
[id="{p}-{page_id}"]
= LDAP using Elastic stack configuration policy

CAUTION: {role_mappings_warning}

NOTE: This requires a valid Enterprise license or Enterprise trial license. Check <<{p}-licensing,the license documentation>> for more details about managing licenses.

TIP: Make sure you check the complete link:https://www.elastic.co/guide/en/elasticsearch/reference/current/ldap-realm.html[guide to setting up LDAP with Elasticsearch].
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,8 @@ endif::[]
[id="{p}-{page_id}"]
= OIDC using Elastic stack configuration policy

CAUTION: {role_mappings_warning}

NOTE: This requires a valid Enterprise license or Enterprise trial license. Check <<{p}-licensing,the license documentation>> for more details about managing licenses.

TIP: Make sure you check the complete link:https://www.elastic.co/guide/en/elasticsearch/reference/current/oidc-guide.html[guide to setting up OpenID Connect with Elasticsearch].
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,8 @@ endif::[]
[id="{p}-{page_id}"]
= Elastic Stack configuration policies

CAUTION: {role_mappings_warning}

NOTE: This requires a valid Enterprise license or Enterprise trial license. Check <<{p}-licensing,the license documentation>> for more details about managing licenses.

Starting from ECK `2.6.1` and Elasticsearch `8.6.1`, Elastic Stack configuration policies allow you to configure the following settings for Elasticsearch:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,8 @@ endif::[]
[id="{p}-{page_id}"]
= Upgrade the Elastic Stack version

CAUTION: {role_mappings_warning}

The operator can safely perform upgrades to newer versions of the various Elastic Stack resources.

Follow the instructions in the link:https://www.elastic.co/guide/en/elastic-stack/current/upgrading-elastic-stack.html[Elasticsearch documentation]. Make sure that your cluster is compatible with the target version, take backups, and follow the specific upgrade instructions for each resource type. When you are ready, modify the `version` field in the resource spec to the desired stack version and the operator will start the upgrade process automatically.
Expand Down

0 comments on commit 8aae117

Please sign in to comment.