news-search-api picking up kibana indexes?

[philbudne]

Saw this:

INFO:utils:Exposed indices: ['mc_search-000001', 'mc_search-000002', 'mc_search-000003', 'mc_search-000004', 'mc_search', '.kibana_security_solution', '.kibana_security_solution_8.12.0', '.alerts-ml.anomaly-detection.alerts-default', '.alerts-observability.slo.alerts-default', '.alerts-observability.apm.alerts-default', '.kibana_analytics', '.kibana_analytics_8.12.0', '.alerts-observability.metrics.alerts-default', '.alerts-security.alerts-default', '.siem-signals-default', '.alerts-stack.alerts-default', '.alerts-observability.logs.alerts-default', '.kibana_ingest', '.kibana_ingest_8.12.0', '.alerts-observability.uptime.alerts-default', '.kibana', '.kibana_8.12.0', '.kibana_alerting_cases', '.kibana_alerting_cases_8.12.0', '.kibana-observability-ai-assistant-conversations', '.alerts-observability.threshold.alerts-default', '.kibana-observability-ai-assistant-kb', '.kibana_task_manager', '.kibana_task_manager_8.12.0', 'mc_search-*']

Not sure if we'll keep using the production cluster for kibana (it doesn't seem to make major demands), but this may become a non-issue, because I also saw this:

/app/client.py:221: ElasticsearchWarning: this request accesses system indices: [.kibana_security_solution_8.12.0_001, .kibana_analytics_8.12.0_001, .apm-custom-link, .kibana_ingest_8.12.0_001, .kibana_8.12.0_001, .apm-agent-configuration, .kibana_alerting_cases_8.12.0_001, .kibana_task_manager_8.12.0_001, .async-search], but in a future major version, direct access to system indices will be prevented by default

Tho some of the magic dot repos seen in the first clip are not listed in the second, but maybe that's an oversight?

The code LOOKS like it filters index names by prefix, but maybe it's not working?