Skip to content

Commit 0b1f86f

Browse files
jrodewigAdam Locke
and
Adam Locke
authored
[DOCS] Add 8.0 release highlight for system indices (#83683)
Relates to #80095 and #80028 Co-authored-by: Adam Locke <[email protected]>
1 parent 8baf241 commit 0b1f86f

File tree

1 file changed

+22
-0
lines changed

1 file changed

+22
-0
lines changed

docs/reference/release-notes/highlights.asciidoc

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -58,6 +58,28 @@ Need a new enrollment token? Use the
5858
{ref}/create-enrollment-token.html[`elasticsearch-create-enrollment-token`]
5959
tool to create enrollment tokens for {es} nodes and {kib} instances.
6060

61+
[discrete]
62+
=== Better protection for system indices
63+
64+
System indices store configurations and internal data for Elastic features.
65+
Generally, system indices are reserved only for internal use by these features.
66+
While possible, directly accessing or changing a system index can cause
67+
instability and other issues.
68+
69+
In 8.0, we've made several changes to protect system indices from direct access.
70+
To access a system index, you must now have the
71+
{ref}/defining-roles.html#roles-indices-priv[`allow_restricted_indices`]
72+
permission set to `true`.
73+
74+
The `superuser` role also no longer gives write access to system indices. As a
75+
result, the built-in `elastic` superuser can't change system indices by
76+
default.
77+
78+
If available, use {kib} or the associated {es} APIs to manage data for a feature
79+
rather than accessing a system index. If you attempt to directly access a system index,
80+
{es} will return a warning in the header of API responses and in the deprecation
81+
logs.
82+
6183
[discrete]
6284
=== Storage savings for `keyword`, `match_only_text`, and `text` fields
6385

0 commit comments

Comments
 (0)