We have a cluster with ES 7.1 where we use gold licence. We have
- native authentication realm (order 0) and pki realm (order 1) as auth mechanisms.
- xpack.security.enabled: true in elasticsearch.yaml
Now we have decided to downgrade our cluster to basic licence. I read here https://www.elastic.co/guide/en/elasticsearch/reference/current/update-license.html that all we need to do is fire an update licence command on kibana to do this with 0 downtime.
In this downgrade process my doubt is that
- By default xpack is disable in basic licence. So after firing update licence command would i need to restart the elastic search service in order for ES to read the property again as set in elastic search yaml ?
- I understand that pki is not available in basic but do i need to remove pki related properties from my elasticsearch.yaml? Or can they stay and basic licence would just make them useless rather than throwing errors around how it does not understand what pki means in elastic search. yaml