Elastic Cloud Enterprise release notes

Review the changes, fixes, and more in each version of Elastic Cloud Enterprise.

To learn about security updates, go to Security announcements for the Elastic stack.

• Update third-party dependencies to address security vulnerabilities.

  For the full list, refer to ECE 4.2 third-party dependencies.

• Upgrade a deployment in one request.

  Adds POST /deployments/{id}/upgrade so an entire deployment can be upgraded to a target Elastic Stack version in a single request.

• Add PUT /deployments/{deployment_id}/tags to set deployment tags.

  Adds PUT /deployments/{deployment_id}/tags so users can set tags on a deployment directly, without going through the full deployment update flow. Supports up to 64 tags per deployment.

• Add a PATCH endpoint to update Elasticsearch tier size and zone count.

  Adds PATCH /deployments/{deployment_id}/elasticsearch/{ref_id}/tiers to update size and zone count of one or more Elasticsearch tiers.

• Add a GET endpoint for current Elasticsearch tier sizes.

  Adds GET /deployments/{deployment_id}/elasticsearch/{ref_id}/tiers, which returns the current size configuration of all enabled Elasticsearch topology tiers.

• Add a GET endpoint for deployment resource user settings.

  Adds GET /deployments/{deployment_id}/{resource_kind}/{ref_id}/user_settings, which returns the current user-defined settings as JSON for resource kinds that support user settings.

• Add a PUT endpoint to update deployment resource user settings.

  Adds PUT /deployments/{deployment_id}/{resource_kind}/{ref_id}/user_settings so users can update user-defined settings for a single resource.

• Add a created_at timestamp to deployment metadata.

  Adds a created_at timestamp on deployment metadata that records when the deployment was originally created.

• Add Elasticsearch 9.4+ query activity logging.

  Enables capture and forwarding of Elasticsearch 9.4+ query activity logs with Filebeat for audit and analysis.

• Improve installer SELinux setup so re-runs are safe.

  Re-running the ECE installer on a host that already has SELinux configured no longer fails partway through or reports unnecessary SELinux network changes. This applies to configure-selinux-settings and to install or upgrade --podman with --selinux.

• Update the bundled Elastic Stack to 8.19.20 and 9.5.2.

  ECE system clusters are also updated to 8.19.20.

• Add installer flags for Proxy Protocol v2 on ECE proxy hosts.

  Introduces --proxy-protocol-version and --proxy-protocol-lenient installer flags so proxy hosts can accept Proxy Protocol v2 headers from the load balancer, preserving the original client IP address. Refer to Configure Proxy Protocol v2 for more details.

• Fix Elasticsearch starting with a missing elasticsearch.yml after restart.

  Fixes a bug where elasticsearch.yml could be deleted during restart, which could start Elasticsearch with incorrect configuration.

• Fix incorrect non-HA health warnings for disabled topologies.

  Fixes false data-availability warnings on 3-zone deployments that include disabled (size=0) topologies.

• Fix restarted instances sometimes unable to rejoin the cluster.

  Fixes a bug where a restarted instance with the same IP could not rejoin the cluster after firewall rules were reapplied.

• Updated third-party dependencies and base images to address security vulnerabilities.

• The Upgrade API now uses the Kibana upgrade assistant to validate that all issues have been resolved before the upgrade.

• Updated the bundled Elastic Stack to 8.19.16 and 9.3.5.

  The ECE system clusters are also updated to 8.19.16.

• Fixed Kibana audit log collection for instances that run multiple processes.

  Kibana instances larger than 8 GiB start multiple processes internally; the audit logs for all of these processes are now collected correctly. This fix requires both upgrading to ECE 4.1.1 and adding the latest Elastic Stack pack from the Manage Elastic Stack versions page.

• ECE logging-and-metrics cluster ILM now supports custom overrides.

  The default ILM configurations in the logging-and-metrics cluster can now be overridden using custom component templates.

• Added --disable-rollback to the ECE upgrader to prevent automatic rollback on failure or cancel.
• Added the --skip-steps flag to the ECE upgrader to bypass specific upgrade steps by name.
• Improved reliability of ECE upgrades by adding configurable retry settings for Docker operations.
• During upgrades, made the stop docker container operation timeout respect the --timeout-factor parameter.

• Fixed timeout issues when searching for allocators in the admin console cluster.
• Added retry logic for data tier migration to handle eventual consistency when stopping ILM.
• Fixed an invalid redirect.
• Fixed template creation logic in the admin console UI.

• Added fixes for potential security vulnerabilities. Refer to our security advisory for details.

• Added fixes for potential security vulnerabilities. See our security advisory for details.

• Added security updates through various dependencies upgrades.

This release introduces breaking changes.

• Compatibility updates: Refer to the Elastic Cloud Enterprise compatibility matrix to view the supported OS and container engine combinations for this version.
• Upgraded system deployments to Elastic Stack 8.18.0.
• Upgraded metricbeat and filebeat for allocator-metricbeat and beats-runner to version 8.18.0.
• Support for Elastic Stack 9.0.0

• Improved range request download performance for large heap dumps.
• Fixed a warning error incorrectly displaying due to a cache issue when trying to upgrade a deployment to a newer version.