Hi all,
I am super proud to announce the arrival of Search Guard 7 Beta 1, compatible with Elasticsearch 7.0.0.
It is is a beta release and does not yet contain all changes and breaking features we have planned and implemented. It is a drop-in replacement for Search Guard 6, so all your existing configuration settings should work out of the box.
Installing Search Guard on Elasticsearch:
bin/elasticsearch-plugin install https://oss.sonatype.org/service/local/repositories/releases/content/com/floragunn/search-guard-7/7.0.0-35.0.0-beta1/search-guard-7-7.0.0-35.0.0-beta1.zip
Installing Search Guard on Kibana:
bin/kibana-plugin install https://oss.sonatype.org/service/local/repositories/releases/content/com/floragunn/search-guard-kibana-plugin/7.0.0-35.0.0-beta1/search-guard-kibana-plugin-7.0.0-35.0.0-beta1.zip
Please give the beta a try and report any bugs and issues on GitHub:
Search Guard:
Kibana Plugin:
For the final release, scheduled for next week, you can expect the following breaking changes:
New configuration syntax
The configuration syntax for Search Guard 6 suffered from some flaws and glitches which made it sometimes difficult to implement improvements and new feature requests. We have streamlined the configuration to remove these barriers. Search Guard 7 will come with an auto-migration feature which will migrate the older SG6-style configuration index to the new SG7 syntax. If you are using the REST API, you will likely need to change the payload of your calls slightly.
Unified versioning schema
At the moment the versioning schema for the Search Guard Elasticsearch plugin and the Kibana plugin differs. The idea behind that was to be able to release improvements for Search Guard and the Kibana plugin independently. However, this caused more confusion than it did well. For Search Guard 7 all products we release will follow the same versioning schema. The initial version for both Search Guard and the Kibana plugin will be 7.0.0-35.0.0.
Built-in roles
In Search Guard 6, all roles are dynamically configured and stored in the Search Guard configuration index. This also includes common roles for Kibana, logstash and Beats. In case the permissions for these roles changed when upgrading Elasticsearch, the roles needed to be updated manually as well. In Search Guard 7 all common roles will be static, so permission changes are automatically applied when upgrading Search Guard alongside Elasticsearch.
New LDAP/Active Directory module
We have implemented a new version of the LDAP/Active Directory module which supports querying multiple user- and rolebases and also supports a more sophisticated connection pooling. It will replace the current module and is fully backward-compatible
We will publish a full upgrade guide and a new version of the documentation very soon, so stay tuned!
Jochen and the Search Guard team!
Search Guard (®) is an Elasticsearch plugin that offers encryption, authentication, and authorization.
Coded with love in Berlin, Denmark, Sweden, and the US.
Search Guard is a trademark of floragunn GmbH, registered in the U.S. and in other countries.
Elasticsearch, Kibana, Logstash, and Beats are trademarks of Elasticsearch BV, registered in the U.S. and in other countries.
thanks!