Upgrade notes
editUpgrade notes
editBefore you upgrade, review the breaking changes and deprecations introduced since the version you are migrating from, then mitigate the impact.
If you are migrating from a version prior to version 9.0, you must first upgrade to the last 8.x version available.
For Elastic Security solution release information, refer to Elastic Security Solution Release Notes.
Breaking changes
editRemoved all security v1 endpoints (9.0.0)
Details
All v1 Kibana security HTTP endpoints have been removed.
GET /api/security/v1/logout has been replaced by GET /api/security/logout
GET /api/security/v1/oidc/implicit has been replaced by GET /api/security/oidc/implicit
GET /api/security/v1/oidc has been replaced by GET /api/security/oidc/callback
POST /api/security/v1/oidc has been replaced by POST /api/security/oidc/initiate_login
POST /api/security/v1/saml has been replaced by POST /api/security/saml/callback
GET /api/security/v1/me has been removed with no replacement.
For more information, refer to #199656.
Impact
Any HTTP API calls to the v1 Kibana security endpoints will fail with a 404 status code starting from version 9.0.0.
Third party OIDC and SAML identity providers configured with v1 endpoints will no longer work.
Action
Update any OIDC and SAML identity providers to reference the corresponding replacement endpoint listed above.
Remove references to the /api/security/v1/me endpoint from any automations, applications, tooling, and scripts.
Access to all internal APIs is blocked (9.0.0)
Details
Access to internal Kibana HTTP APIs is restricted from version 9.0.0. This is to ensure
that HTTP API integrations with Kibana avoid unexpected breaking changes.
Refer to #193792.
Impact
Any HTTP API calls to internal Kibana endpoints will fail with a 400 status code starting
from version 9.0.0.
Action
Do not integrate with internal HTTP APIs. They may change or be removed without notice,
and lead to unexpected behaviors. If you would like some capability to be exposed over an
HTTP API, create an issue.
We would love to discuss your use case.
Deprecation notices
editThe following functionality is deprecated and will be removed at a future date. Deprecated functionality does not have an immediate impact on your application, but we strongly recommend you make the necessary updates to avoid use of deprecated features.
Use the Kibana Upgrade Assistant to prepare for your upgrade to the next version of the Elastic Stack. The assistant identifies deprecated settings in your configuration and guides you through the process of resolving issues if any deprecated features are enabled. To access the assistant, go to Stack Management > Upgrade Assistant.