# ECK - Xpack settings - Forbidden: Configuration setting is reserved for internal use

**URL:** <https://discuss.elastic.co/t/eck-xpack-settings-forbidden-configuration-setting-is-reserved-for-internal-use/236673>\
**Category:** Elastic Cloud on Kubernetes (ECK)\
**Created:** [June 11, 2020, 10:13am UTC](https://discuss.elastic.co/t/eck-xpack-settings-forbidden-configuration-setting-is-reserved-for-internal-use/236673 "2020-06-11T10:13:17Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![aman26ps](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aman26ps/32/82604_2.png) [@aman26ps](https://discuss.elastic.co/u/aman26ps)\
**Post date:** [June 11, 2020, 10:13am UTC](https://discuss.elastic.co/t/eck-xpack-settings-forbidden-configuration-setting-is-reserved-for-internal-use/236673/1 "2020-06-11T10:13:17Z")

</div>

Hi Team,

i would like to disable following xpack fields, but when i am applying the CR i can see it is forbidden by my operator, how can i overwrite the permissions of operator to run the elastic search with following setting disabled?

```auto
        xpack.security.authc.reserved_realm.enabled: false
        xpack.security.enabled: false
        xpack.security.http.ssl.certificate: false
        xpack.security.http.ssl.enabled: false
        xpack.security.http.ssl.key: false
        xpack.security.transport.ssl.certificate: false
        xpack.security.transport.ssl.enabled: false
        xpack.security.transport.ssl.key: false
        xpack.security.transport.ssl.verification_mode: false

```

thanks in advance

---

<div class="post-metadata">

**Author:** ![michael.morello](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/michael.morello/32/47448_2.png) [@michael.morello](https://discuss.elastic.co/u/michael.morello)\
**Post date:** [June 11, 2020, 11:33am UTC](https://discuss.elastic.co/t/eck-xpack-settings-forbidden-configuration-setting-is-reserved-for-internal-use/236673/2 "2020-06-11T11:33:20Z")

</div>

Hi, since 1.0.0 ECK does not prevent you to set these settings: [https://www.elastic.co/guide/en/cloud-on-k8s/current/k8s-reserved-settings.html](https://www.elastic.co/guide/en/cloud-on-k8s/current/k8s-reserved-settings.html)

---

<div class="post-metadata">

**Author:** ![aman26ps](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aman26ps/32/82604_2.png) [@aman26ps](https://discuss.elastic.co/u/aman26ps)\
**Post date:** [June 11, 2020, 11:57am UTC](https://discuss.elastic.co/t/eck-xpack-settings-forbidden-configuration-setting-is-reserved-for-internal-use/236673/3 "2020-06-11T11:57:11Z")

</div>

but i am getting these errors:

```auto
"message":"Elasticsearch manifest has warnings. Proceed at your own risk. [
spec.nodeSets[0].config.xpack.security.authc.reserved_realm.enabled: Forbidden: 
Configuration setting is reserved for internal use. User-configured use is unsupported, 
spec.nodeSets[0].config.xpack.security.enabled: Forbidden: Configuration setting is reserved for 
internal use. User-configured use is unsupported, spec.nodeSets[0].
config.xpack.security.http.ssl.certificate: Forbidden: Configuration setting is reserved for internal use.
 User-configured use is unsupported, spec.nodeSets[0].config.xpack.security.http.ssl.enabled:
 Forbidden: Configuration setting is reserved for internal use. User-configured use is unsupported, 
 spec.nodeSets[0].config.xpack.security.http.ssl.key: Forbidden: Configuration setting is reserved for internal use.
 User-configured use is unsupported, spec.nodeSets[0].config.xpack.security.transport.ssl.certificate:
 Forbidden: Configuration setting is reserved for internal use. User-configured use is unsupported, 
 spec.nodeSets[0].config.xpack.security.transport.ssl.enabled: Forbidden: 
 Configuration setting is reserved for internal use. User-configured use is unsupported, spec.nodeSets[0]

```

this log is coming from elastic operator, any reason

---

<div class="post-metadata">

**Author:** ![michael.morello](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/michael.morello/32/47448_2.png) [@michael.morello](https://discuss.elastic.co/u/michael.morello)\
**Post date:** [June 11, 2020, 12:46pm UTC](https://discuss.elastic.co/t/eck-xpack-settings-forbidden-configuration-setting-is-reserved-for-internal-use/236673/4 "2020-06-11T12:46:14Z")

</div>

These are some warnings, not errors. You are technically allowed to change these settings but by doing that your configuration can't be supported.

---

<div class="post-metadata">

**Author:** ![aman26ps](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aman26ps/32/82604_2.png) [@aman26ps](https://discuss.elastic.co/u/aman26ps)\
**Post date:** [June 11, 2020, 1:50pm UTC](https://discuss.elastic.co/t/eck-xpack-settings-forbidden-configuration-setting-is-reserved-for-internal-use/236673/5 "2020-06-11T13:50:43Z")

</div>

okay thanks michael, i am able to disable these settings but ran into various issues in elasticsearch pod, its like opening a pandora's box, not sure what combination of settings need to add in order to make elasticsearch run, if you have any setting available that will be helpful

---

<div class="post-metadata">

**Author:** ![pebrc](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pebrc/32/101790_2.png) [@pebrc](https://discuss.elastic.co/u/pebrc)\
**Post date:** [June 12, 2020, 11:46am UTC](https://discuss.elastic.co/t/eck-xpack-settings-forbidden-configuration-setting-is-reserved-for-internal-use/236673/6 "2020-06-12T11:46:12Z")

</div>

@aman26ps

> [@aman26ps](#):
>
> i am able to disable these settings but ran into various issues in elasticsearch pod, its like opening a pandora's box, not sure what combination of settings need to add in order to make elasticsearch run

That is exactly why we issue this warning. It is not a supported mode of operation to disable these settings. So unless you know exactly what your are doing and why, I would strongly recommend heeding the warnings and not touching any of the settings ECK manages itself.

---

<div class="post-metadata">

**Author:** ![aman26ps](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aman26ps/32/82604_2.png) [@aman26ps](https://discuss.elastic.co/u/aman26ps)\
**Post date:** [June 12, 2020, 12:03pm UTC](https://discuss.elastic.co/t/eck-xpack-settings-forbidden-configuration-setting-is-reserved-for-internal-use/236673/7 "2020-06-12T12:03:21Z")

</div>

makes sense thanks for your input @pebrc

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 4, 2022, 8:02am UTC](https://discuss.elastic.co/t/eck-xpack-settings-forbidden-configuration-setting-is-reserved-for-internal-use/236673/8 "2022-11-04T08:02:04Z")

</div>