ES Version: 7.10.2
Query 1 : If I need to disable xpack I need to make yml changes to make xpack settings to false and restart each nodes ?
Query1 My Understanding is : Yes, there is no API call to disable or enable dynamically.
Query 2: Incase if I need to disable I should perform complete cluster shutdown and make yml changes and start entire cluster. As partial or hybrid mode of rolling restart won't work in Elasticsearch.
Query2 My understanding is: Yes, lets say out of 300 nodes, 100 are xpack disabled and 200 are xpack enabled the new app ingestion data will not go to xpack disabled ones and throws error. Also internode communication also needs ssl so its not going to balance the nodes or shards. Better is to go for complete shutdown of cluster make changes and start them back.
Please correct if my understandings have deviations. Thanks ! ! , we are going to perform this activity tomorrow midnight. TIA.