Elasticsearch: Disabling Shield After License Expiration (Safely)

1.3k views Asked by At

I started using the Shield plugin for security, but then moved to a NGINX reverse proxy. I now have both Shield and NGINX running, but my Shield license expired.

How do I turn off Shield without interrupting the cluster (2 nodes)?

I tried uninstalling the Shield plugin, and that did not do anything. It just removed the admin tools, but the underlying authentication continued to function.

I have the following Shield config files, but I'm afraid that just deleting them may hurt the cluster:

$ ls /etc/elasticsearch/shield/
logging.yml           roles.yml      users.new
logging.yml.new       roles.yml.new  users_roles
role_mapping.yml      system_key     users_roles.new
role_mapping.yml.new  users
0

There are 0 answers