# Elastic 6 Upgrade issues on Elastic Cloud

**URL:** <https://discuss.elastic.co/t/elastic-6-upgrade-issues-on-elastic-cloud/112466>\
**Category:** Elasticsearch\
**Created:** [December 19, 2017, 3:38pm UTC](https://discuss.elastic.co/t/elastic-6-upgrade-issues-on-elastic-cloud/112466 "2017-12-19T15:38:00Z")\
**Posts on this page:** 15\
**Page:** 1

<div class="post-metadata">

**Author:** ![Adam.Reynolds](https://avatars.discourse-cdn.com/v4/letter/a/b77776/32.png) [@Adam.Reynolds](https://discuss.elastic.co/u/Adam.Reynolds)\
**Post date:** [December 19, 2017, 3:38pm UTC](https://discuss.elastic.co/t/elastic-6-upgrade-issues-on-elastic-cloud/112466/1 "2017-12-19T15:38:00Z")

</div>

When running the Cluster Checkup from ES 5.6.5 I get a message saying "Deprecated script security settings changes" followed by a long list of script security settings.

This Cluster was originally a 2.4.4 cluster, upgraded to 5.2.2 and then up to 5.6.5 in preparation for upgrading to 6.

I can't see any way in Elastic Cloud to reconfigure the script settings (I'm not currently using any scripts so I've tried just disabling them) that will enable me to upgrade the cluster to either 6.0 or 6.1

Has anyone managed it yet?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [December 19, 2017, 6:20pm UTC](https://discuss.elastic.co/t/elastic-6-upgrade-issues-on-elastic-cloud/112466/2 "2017-12-19T18:20:47Z")

</div>

For support on Elastic Cloud clusters, please see [https://www.elastic.co/cloud/as-a-service/support](https://www.elastic.co/cloud/as-a-service/support).

---

<div class="post-metadata">

**Author:** ![Adam.Reynolds](https://avatars.discourse-cdn.com/v4/letter/a/b77776/32.png) [@Adam.Reynolds](https://discuss.elastic.co/u/Adam.Reynolds)\
**Post date:** [December 20, 2017, 10:10am UTC](https://discuss.elastic.co/t/elastic-6-upgrade-issues-on-elastic-cloud/112466/3 "2017-12-20T10:10:57Z")

</div>

The last time I asked a general question there rather than an 'X is broken' type of request I was told that our support contract doesn't cover consultancy. I'm therefore asking here if anyone else has similar issues. If they haven't I'll raise a support ticket...but it might just be me missing something?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [December 20, 2017, 10:20am UTC](https://discuss.elastic.co/t/elastic-6-upgrade-issues-on-elastic-cloud/112466/4 "2017-12-20T10:20:18Z")

</div>

Ok 🙂

Are you sure there aren't any script in use?

---

<div class="post-metadata">

**Author:** ![Adam.Reynolds](https://avatars.discourse-cdn.com/v4/letter/a/b77776/32.png) [@Adam.Reynolds](https://discuss.elastic.co/u/Adam.Reynolds)\
**Post date:** [December 20, 2017, 10:47am UTC](https://discuss.elastic.co/t/elastic-6-upgrade-issues-on-elastic-cloud/112466/5 "2017-12-20T10:47:57Z")

</div>

Not as far as I'm aware. I've even tried disabling the 3 types of scripts in the configuration screen. I'm wondering if the upgrade checker, and process, are complaining that the variables still exist in the config rather than the scripts actually being in use.

The documentation linked to says "All of the existing scripting security settings have been removed. Instead they are replaced with script.allowed\_types and script.allowed\_contexts" whereas the checker says "Details: [node[instance-0000000003] used these script-security settings:[script.inline, script.stored, script.file, script..."

I can't access the config directly in Elastic Cloud afaik??

---

<div class="post-metadata">

**Author:** ![Adam.Reynolds](https://avatars.discourse-cdn.com/v4/letter/a/b77776/32.png) [@Adam.Reynolds](https://discuss.elastic.co/u/Adam.Reynolds)\
**Post date:** [December 20, 2017, 12:05pm UTC](https://discuss.elastic.co/t/elastic-6-upgrade-issues-on-elastic-cloud/112466/6 "2017-12-20T12:05:23Z")

</div>

To eliminate issues caused by the prior upgrades I've just created a small 5.6.5 (with all the scripting disabled) cluster and without doing anything else to it I ran the upgrade check. I still see the same scripting error  
"Deprecated script security settings changes  
This issue must be resolved to upgrade. Read Documentation  
Details: [node[instance-0000000000] used these script-security settings:[script.inline, script.stored, script.file, script.engine.mustache.inline]]"

I'm going to raise this with Elastic Support and see what they say

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [December 20, 2017, 6:48pm UTC](https://discuss.elastic.co/t/elastic-6-upgrade-issues-on-elastic-cloud/112466/7 "2017-12-20T18:48:43Z")

</div>

Yeh, I would link them to this thread as well.

---

<div class="post-metadata">

**Author:** ![danb](https://avatars.discourse-cdn.com/v4/letter/d/f05b48/32.png) [@danb](https://discuss.elastic.co/u/danb)\
**Post date:** [January 10, 2018, 4:55am UTC](https://discuss.elastic.co/t/elastic-6-upgrade-issues-on-elastic-cloud/112466/8 "2018-01-10T04:55:27Z")

</div>

I'm hitting the same issue. did you get a result from support?

---

<div class="post-metadata">

**Author:** ![Adam.Reynolds](https://avatars.discourse-cdn.com/v4/letter/a/b77776/32.png) [@Adam.Reynolds](https://discuss.elastic.co/u/Adam.Reynolds)\
**Post date:** [January 10, 2018, 9:29am UTC](https://discuss.elastic.co/t/elastic-6-upgrade-issues-on-elastic-cloud/112466/10 "2018-01-10T09:29:18Z")

</div>

ah yes...after digging about it seems that to allow the upgrade to take place you need to Disable the Index & File scripts, and Enable All Inline Scripts.

I assume you can change these settings back after the upgrade is complete. Let me know if that works for you or if I just got lucky! 😉

---

<div class="post-metadata">

**Author:** ![danb](https://avatars.discourse-cdn.com/v4/letter/d/f05b48/32.png) [@danb](https://discuss.elastic.co/u/danb)\
**Post date:** [January 10, 2018, 7:40pm UTC](https://discuss.elastic.co/t/elastic-6-upgrade-issues-on-elastic-cloud/112466/11 "2018-01-10T19:40:37Z")

</div>

Nope, no change... but thanks for getting back to me! I contacted support for guidance.

---

<div class="post-metadata">

**Author:** ![Adam.Reynolds](https://avatars.discourse-cdn.com/v4/letter/a/b77776/32.png) [@Adam.Reynolds](https://discuss.elastic.co/u/Adam.Reynolds)\
**Post date:** [January 11, 2018, 9:28am UTC](https://discuss.elastic.co/t/elastic-6-upgrade-issues-on-elastic-cloud/112466/12 "2018-01-11T09:28:39Z")

</div>

What errors are you seeing in the Upgrade Checker in Kibana?

---

<div class="post-metadata">

**Author:** ![mpskovvang](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mpskovvang/32/22795_2.png) [@mpskovvang](https://discuss.elastic.co/u/mpskovvang)\
**Post date:** [January 11, 2018, 10:16am UTC](https://discuss.elastic.co/t/elastic-6-upgrade-issues-on-elastic-cloud/112466/13 "2018-01-11T10:16:33Z")

</div>

I'm having the same issue. Perhaps he's having the similar error:

Deprecated script security settings changes  
This issue must be resolved to upgrade. [Read Documentation](https://www.elastic.co/guide/en/elasticsearch/reference/6.0/breaking_60_settings_changes.html#_script_settings_2)  
Details: [node[instance-0000000018] used these script-security settings:[script.inline, script.stored, script.file, script.engine.mustache.inline]]

I've tried both disabling and enabled all script settings.

My "solution" was to create a new cluster and reindex all old documents by an application script.

---

<div class="post-metadata">

**Author:** ![danb](https://avatars.discourse-cdn.com/v4/letter/d/f05b48/32.png) [@danb](https://discuss.elastic.co/u/danb)\
**Post date:** [January 11, 2018, 6:19pm UTC](https://discuss.elastic.co/t/elastic-6-upgrade-issues-on-elastic-cloud/112466/14 "2018-01-11T18:19:21Z")

</div>

Yeah.. same thing:

```auto
Deprecated script security settings changes
This issue must be resolved to upgrade. Read Documentation
Details: [node[instance-0000000002] used these script-security settings:[script.inline, script.stored, script.file, script.engine.mustache.inline]]

```

Reindexing everything seems painful.. It sounds like this is literally a yml change that we just don't have access to in the UI.. seems like support should be able to assist.

---

<div class="post-metadata">

**Author:** ![Adam.Reynolds](https://avatars.discourse-cdn.com/v4/letter/a/b77776/32.png) [@Adam.Reynolds](https://discuss.elastic.co/u/Adam.Reynolds)\
**Post date:** [January 15, 2018, 10:11am UTC](https://discuss.elastic.co/t/elastic-6-upgrade-issues-on-elastic-cloud/112466/15 "2018-01-15T10:11:18Z")

</div>

I did have to reindex where it said I did...and yeah, that's quite a pain, but as long as I had the Index & File scripts disabled and the Inline scripts ALL enabled I was able to upgrade even though the checker gave the 'deprecated script security' error

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 12, 2018, 10:11am UTC](https://discuss.elastic.co/t/elastic-6-upgrade-issues-on-elastic-cloud/112466/16 "2018-02-12T10:11:23Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
