GET /_cat/indices not showing all indices after upgrade to 7.3

Elastic Stack Elasticsearch
1

I upgraded our cluster from 6.8 to 7.3.2 and I can only view all indices if I authenticate to the cluster. This was not the case on 6.8:

I get only system indices without authentication:

➜  curl -s  -XGET https://timeline-shared.r1.eu1.com:9200/_cat/indices | wc
      19     190    2014

When I authenticate:

➜  curl -s  -XGET -u 'xx:xx' https://timeline-shared.r1.eu1.com:9200/_cat/indices | wc
     473    4730   63855

On a 6.8 cluster, I get all indices without authentication:

➜  curl -s  -XGET https://timeline-shared.r1.us1.com:9200/_cat/indices |  wc
     541    3306   70330

What am I doing wrong here?

2

I assume you had security enabled in your 6.8 cluster.

If so, then you must also have anonymous access enabled.

Check your elasticsearch.yml for the xpack.security.authc.anonymous.roles setting, then check the definition of those roles.

I can't explain why their access would change between 6.8 and 7.3, but perhaps some roles were lost or modified during the upgrade?