Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add warning for role mappings for 8.15 #8057

Merged
merged 1 commit into from
Sep 27, 2024
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions docs/eck-attributes.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -3,3 +3,5 @@
:eck_release_branch: 2.14
:eck_github: https://github.com/elastic/cloud-on-k8s
:eck_resources_list: Elasticsearch, Kibana, APM Server, Enterprise Search, Beats, Elastic Agent, Elastic Maps Server, and Logstash

:role_mappings_warning: We have identified an issue with Elasticsearch 8.15 that prevents security role mappings configured via Stack configuration policies to work correctly. The only workaround is to specify the security role mappings via the link:https://www.elastic.co/guide/en/elasticsearch/reference/current/security-api-put-role-mapping.html[Elasticsearch REST API]. After an upgrade from a previous Elasticsearch version to 8.15 role mappings will be preserved but will not receive future updates from the Stack configuration policy. We are working on a fix to restore the functionality in a future Elasticsearch release.
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,8 @@ endif::[]
[id="{p}-{page_id}"]
= Managing authentication for multiple stacks using Elastic Stack configuration policy

CAUTION: {role_mappings_warning}

NOTE: This requires a valid Enterprise license or Enterprise trial license. Check <<{p}-licensing,the license documentation>> for more details about managing licenses.


Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,8 @@ endif::[]

= JWT using Elastic Stack configuration policy

CAUTION: {role_mappings_warning}

NOTE: This requires a valid Enterprise license or Enterprise trial license. Check <<{p}-licensing,the license documentation>> for more details about managing licenses.

TIP: Make sure you check the complete link:https://www.elastic.co/guide/en/elasticsearch/reference/current/jwt-auth-realm.html[guide to setting up JWT with Elasticsearch].
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,8 @@ endif::[]
[id="{p}-{page_id}"]
= LDAP using Elastic stack configuration policy

CAUTION: {role_mappings_warning}

NOTE: This requires a valid Enterprise license or Enterprise trial license. Check <<{p}-licensing,the license documentation>> for more details about managing licenses.

TIP: Make sure you check the complete link:https://www.elastic.co/guide/en/elasticsearch/reference/current/ldap-realm.html[guide to setting up LDAP with Elasticsearch].
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,8 @@ endif::[]
[id="{p}-{page_id}"]
= OIDC using Elastic stack configuration policy

CAUTION: {role_mappings_warning}

NOTE: This requires a valid Enterprise license or Enterprise trial license. Check <<{p}-licensing,the license documentation>> for more details about managing licenses.

TIP: Make sure you check the complete link:https://www.elastic.co/guide/en/elasticsearch/reference/current/oidc-guide.html[guide to setting up OpenID Connect with Elasticsearch].
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,8 @@ endif::[]
[id="{p}-{page_id}"]
= Elastic Stack configuration policies

CAUTION: {role_mappings_warning}

NOTE: This requires a valid Enterprise license or Enterprise trial license. Check <<{p}-licensing,the license documentation>> for more details about managing licenses.

Starting from ECK `2.6.1` and Elasticsearch `8.6.1`, Elastic Stack configuration policies allow you to configure the following settings for Elasticsearch:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,8 @@ endif::[]
[id="{p}-{page_id}"]
= Upgrade the Elastic Stack version

CAUTION: {role_mappings_warning}

The operator can safely perform upgrades to newer versions of the various Elastic Stack resources.

Follow the instructions in the link:https://www.elastic.co/guide/en/elastic-stack/current/upgrading-elastic-stack.html[Elasticsearch documentation]. Make sure that your cluster is compatible with the target version, take backups, and follow the specific upgrade instructions for each resource type. When you are ready, modify the `version` field in the resource spec to the desired stack version and the operator will start the upgrade process automatically.
Expand Down