Hi all,
I am very proud to announce the arrival of Search Guard 7 GA, compatible with Elasticsearch 7.0.1.
Installing Search Guard on Elasticsearch:
bin/elasticsearch-plugin install https://repo1.maven.org/maven2/com/floragunn/search-guard-7/7.0.1-35.0.0/search-guard-7-7.0.1-35.0.0.zip
Installing Search Guard on Kibana:
bin/kibana-plugin install https://repo1.maven.org/maven2/com/floragunn/search-guard-kibana-plugin/7.0.1-35.0.0/search-guard-kibana-plugin-7.0.1-35.0.0.zip
We have updated our documentation and assembled a changelog and an upgrade guide.
The two most interesting changes in this release are:
New configuration syntax
The configuration syntax for Search Guard 6 suffered from some flaws and glitches which made it sometimes difficult to implement improvements and new feature requests. We have streamlined the configuration to remove these barriers. For example, the new format does now allow dots (.) in index names and regular expressions. We also introduced strict config syntax validation which rejects invalid syntax as well as configuration parameters which do not exist. The REST API and sgadmin will automatically apply these checks.
Built-in resources
In Search Guard 6, all roles and action groups are dynamically configured and stored in the Search Guard configuration index. This also includes common roles for Kibana, logstash and Beats and common action groups like sg_readall. In case the permissions for these roles changed when upgrading Elasticsearch, the roles needed to be updated manually as well. In Search Guard 7 all common roles will be static, so permission changes are automatically applied when upgrading Search Guard alongside Elasticsearch. The same applies to action groups.
Hendrik and the Search Guard team!
Search Guard (®) is an Elasticsearch plugin that offers encryption, authentication, and authorization.
Coded with love in Berlin, Denmark, Sweden, Italy and the US.
Search Guard is a trademark of floragunn GmbH, registered in the U.S. and in other countries.
Elasticsearch, Kibana, Logstash, and Beats are trademarks of Elasticsearch BV, registered in the U.S. and in other countries.