Why does auth still work after deleting the sg index?

Search Guard
1

Using 6.3.2, with community edition-2.
Why can users still interact with ES after deleting the searchguard index?

2

How did you delete the SG index? Manually with an admin cert, or with sgadmin?

This is most probably due to caching. Purging the cache with the -rl option should do the trick here. You can also specify the cache TTL:

https://docs.search-guard.com/latest/cache-settings

···

On Wednesday, August 1, 2018 at 11:02:07 AM UTC+2, Fabien Wernli wrote:

Using 6.3.2, with community edition-2.
Why can users still interact with ES after deleting the searchguard index?

3

with sgadmin, following the 5.6.x → 6.y upgrade documentation

4

Ok, that’s strange then. Maybe the caches are not automatically flushed when deleting the index. Do you mind opening a ticket on GitHub for this? Thanks!

···

On Wednesday, August 1, 2018 at 4:12:47 PM UTC+2, Fabien Wernli wrote:

with sgadmin, following the 5.6.x → 6.y upgrade documentation