Update license API

Elastic Stack Elasticsearch
1

Hi,
We are trying to update the license on our cluster from "basic" to a higher one. We are planning on using the "update license" API to apply the new license.

https://www.elastic.co/guide/en/elasticsearch/reference/7.17/update-license.html

The doc mentions the below criterion to update the license.

If Elasticsearch security features are enabled and you are installing a gold or higher license, you must enable TLS on the transport networking layer before you install the license.

We believe that "TLS on the transport networking layer" is enabled on the cluster. The steps mentioned in the doc have been done and we can see the same in the "elasticsearch.yml" file as well.

Is there a way to verify that this is enabled through some API?
If this is not enabled and we try to update the license through the API, would it just fail? Or would it render the cluster inaccessible?
Our licensing team is cautioning that if this is not confirmed, then applying the license could render the cluster inaccessible. Is this true?

Thanks,
AR.

2

Hi @artechkey

Run

GET _cluster/settings?include_defaults&flat_settings=true

and look for

"xpack.security.transport.ssl.enabled": "true",
3

The update will be rejected and the cluster will stay on a basic license.

4

@stephenb - Thank you for the API details. I have checked using the same and verified that the below is set on the cluster.

"xpack.security.transport.ssl.enabled": "true",

@TimV - Our expectation was the same (update would just fail). But our licensing team was insisting that it would render the data in the cluster inaccessible. Thank you for the confirmation.

I think we can proceed with the license update safely now.

Thanks,
AR.