IMPORTANT: No additional bug fixes or documentation updates will be released for this version. For the latest information, see the current release documentation.
« Configure operator privileges Operator privileges for snapshot and restore »
Elastic Docs ›Elasticsearch Guide [7.12] ›Secure the Elastic Stack ›Operator privileges

Operator-only functionality

edit

Operator-only functionality

edit

This feature is designed for indirect use by Elasticsearch Service, Elastic Cloud Enterprise, and Elastic Cloud on Kubernetes. Direct use is not supported.

Operator privileges provide protection for APIs and dynamic cluster settings. Any API or cluster setting that is protected by operator privileges is known as operator-only functionality. When the operator privileges feature is enabled, operator-only APIs can be executed only by operator users. Likewise, operator-only settings can be updated only by operator users. The list of operator-only APIs and dynamic cluster settings are pre-determined in the codebase. The list may evolve in future releases but it is otherwise fixed in a given Elasticsearch version.

Operator-only APIs

edit

Operator-only dynamic cluster settings

edit
  • All IP filtering settings

  • The following the dynamic machine learning settings:

    • xpack.ml.node_concurrent_job_allocations
    • xpack.ml.max_machine_memory_percent
    • xpack.ml.use_auto_machine_memory_percent
    • xpack.ml.max_lazy_ml_nodes
    • xpack.ml.process_connect_timeout
    • xpack.ml.nightly_maintenance_requests_per_second
    • xpack.ml.max_ml_node_size
    • xpack.ml.enable_config_migration
    • xpack.ml.persist_results_max_retries
« Configure operator privileges Operator privileges for snapshot and restore »