Skip to content

Commit e6b9669

Browse files
committed
[DOCS] Note that User Cluster Metadata is not private (#34156)
As user-defined cluster metadata is accessible to anyone with access to get the cluster settings, stored in the logs, and likely to be tracked by monitoring solutions, it is useful to clarify in the documentation that it should not be used to store secret information.
1 parent e6c66a3 commit e6b9669

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

docs/reference/modules/cluster/misc.asciidoc

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -43,6 +43,12 @@ PUT /_cluster/settings
4343
-------------------------------
4444
// CONSOLE
4545

46+
IMPORTANT: User-defined cluster metadata is not intended to store sensitive or
47+
confidential information. Any information stored in user-defined cluster
48+
metadata will be viewable by anyone with access to the
49+
<<cluster-get-settings,Cluster Get Settings>> API, and is recorded in the
50+
{es} logs.
51+
4652
[[cluster-max-tombstones]]
4753
==== Index Tombstones
4854

0 commit comments

Comments
 (0)