From 554438e235b89588d83da50aba87c7e21b76717a Mon Sep 17 00:00:00 2001
From: James Rodewig <40268737+jrodewig@users.noreply.github.com>
Date: Thu, 16 Sep 2021 17:01:49 -0400
Subject: [PATCH] [DOCS] Add deprecation docs for obselete security settings
 (#77798)

We deprecated `accept_default_password` in 6.0 with PR #1665. However, we didn't
add a related item to the 6.0 breaking changes docs.

Similarly, we deprecated `xpack.security.authz.store.roles.index.cache.max_size`
and `xpack.security.authz.store.roles.index.cache.ttl` in 5.2 with PR #4449
However, we didn't add a related item to the 5.2 breaking changes docs.

This adds the missing items to the 7.15 deprecation docs.

Relates to #40496.
---
 .../reference/migration/migrate_7_15.asciidoc | 32 +++++++++++++++++++
 1 file changed, 32 insertions(+)

diff --git a/docs/reference/migration/migrate_7_15.asciidoc b/docs/reference/migration/migrate_7_15.asciidoc
index e8f973ed4c8b6..3fac04675843e 100644
--- a/docs/reference/migration/migrate_7_15.asciidoc
+++ b/docs/reference/migration/migrate_7_15.asciidoc
@@ -10,6 +10,7 @@ your application to {es} 7.15.
 See also <<release-highlights>> and <<es-release-notes>>.
 
 * <<breaking_715_indices_deprecations>>
+* <<breaking_715_security_deprecations>>
 * <<breaking_715_settings_deprecations>>
 
 ////
@@ -70,6 +71,37 @@ new indices or index templates. Reindex any index using `simplefs` into one with
 another store type.
 ====
 
+[discrete]
+[[breaking_715_security_deprecations]]
+==== Security deprecations
+
+[[deprecate-accept_default_password]]
+.The `accept_default_password` setting is deprecated.
+[%collapsible]
+====
+*Details* +
+In 6.0, we deprecated the `accept_default_password` cluster setting. We removed
+support for default passwords in 6.0 but did not remove the setting for
+backwards compatibility. In 8.0, we will remove the setting.
+*Impact* +
+To avoid deprecation warnings, discontinue use of the setting.
+====
+
+[[deprecate-native-role-cache-settings]]
+.Native role cache settings are deprecated.
+[%collapsible]
+====
+*Details* +
+In 5.2, we deprecated the following cluster settings:
+* `xpack.security.authz.store.roles.index.cache.max_size`
+* `xpack.security.authz.store.roles.index.cache.ttl`
+These native role cache settings have been unused since 5.2, but we did not
+remove the settings for backwards compatibility. In 8.0, we will remove the
+settings.
+*Impact* +
+To avoid deprecation warnings, discontinue use of the settings.
+====
+
 [discrete]
 [[breaking_715_settings_deprecations]]
 ==== Settings deprecations