File tree Expand file tree Collapse file tree 1 file changed +22
-0
lines changed
docs/reference/release-notes Expand file tree Collapse file tree 1 file changed +22
-0
lines changed Original file line number Diff line number Diff line change @@ -58,6 +58,28 @@ Need a new enrollment token? Use the
58
58
{ref}/create-enrollment-token.html[`elasticsearch-create-enrollment-token`]
59
59
tool to create enrollment tokens for {es} nodes and {kib} instances.
60
60
61
+ [discrete]
62
+ === Better protection for system indices
63
+
64
+ System indices store configurations and internal data for Elastic features.
65
+ Generally, system indices are reserved only for internal use by these features.
66
+ While possible, directly accessing or changing a system index can cause
67
+ instability and other issues.
68
+
69
+ In 8.0, we've made several changes to protect system indices from direct access.
70
+ To access a system index, you must now have the
71
+ {ref}/defining-roles.html#roles-indices-priv[`allow_restricted_indices`]
72
+ permission set to `true`.
73
+
74
+ The `superuser` role also no longer gives write access to system indices. As a
75
+ result, the built-in `elastic` superuser can't change system indices by
76
+ default.
77
+
78
+ If available, use {kib} or the associated {es} APIs to manage data for a feature
79
+ rather than accessing a system index. If you attempt to directly access a system index,
80
+ {es} will return a warning in the header of API responses and in the deprecation
81
+ logs.
82
+
61
83
[discrete]
62
84
=== Storage savings for `keyword`, `match_only_text`, and `text` fields
63
85
You can’t perform that action at this time.
0 commit comments