|
| 1 | += Disable Enterprise Features in Redpanda |
| 2 | +:description: Disable specific enterprise features in Redpanda to ensure your cluster operates within the scope of the Community Edition without enterprise features. |
| 3 | + |
| 4 | +Enterprise features in Redpanda are available only in the Enterprise Edition and require a valid license. If your cluster has enterprise features enabled without a valid license, it is essential to either upload a valid license or disable these features to maintain compliance with Redpanda licensing terms. |
| 5 | + |
| 6 | +== Prerequisites |
| 7 | + |
| 8 | +Before you begin, consider the following: |
| 9 | + |
| 10 | +- Take a backup of your current configuration to allow rollback if needed. |
| 11 | + |
| 12 | +- Disabling enterprise features may affect cluster performance, security, or functionality. Test these changes in a staging environment before applying them to production. |
| 13 | + |
| 14 | +- If you need enterprise features, consider purchasing a valid license to continue using them. To get a trial license key or extend your trial period, https://redpanda.com/try-enterprise[generate a new trial license key^]. To purchase a license, contact https://redpanda.com/upgrade[Redpanda Sales^]. |
| 15 | + |
| 16 | +== Check for enterprise features in violation |
| 17 | + |
| 18 | +To check the status of your license, use the `rpk cluster license info` command. This command provides a detailed overview of your Redpanda license, including whether your cluster has enterprise features enabled without a valid license. |
| 19 | + |
| 20 | +[NOTE] |
| 21 | +==== |
| 22 | +This command reports license violations only if enterprise features in Redpanda are enabled without a valid license. It does not report license violations for enterprise features in xref:get-started:licensing/overview.adoc#connect[Redpanda Connect] or xref:get-started:licensing/overview.adoc#console[Redpanda Console]. |
| 23 | +==== |
| 24 | + |
| 25 | +. Ensure that xref:get-started:rpk-install.adoc[`rpk` is installed] and configured to connect to your cluster's Admin API endpoint. |
| 26 | + |
| 27 | +. Get the details about your cluster's license: |
| 28 | ++ |
| 29 | +[,bash] |
| 30 | +---- |
| 31 | +rpk cluster license info |
| 32 | +---- |
| 33 | ++ |
| 34 | +If the `license violation` status is `true`, you must either obtain a valid license or disable the enterprise features in use to ensure compliance. |
| 35 | + |
| 36 | +== Disable enterprise features |
| 37 | + |
| 38 | +To disable specific enterprise features, refer to the following table: |
| 39 | + |
| 40 | +[NOTE] |
| 41 | +==== |
| 42 | +These instructions apply to bare-metal deployments on Linux. If you are running Redpanda in a different environment, such as Kubernetes or Docker, the way you disable features may vary. |
| 43 | +==== |
| 44 | + |
| 45 | +[cols="1a,1a"] |
| 46 | +|=== |
| 47 | +| Feature | Action to Disable |
| 48 | + |
| 49 | +| xref:manage:audit-logging.adoc[Audit Logging] |
| 50 | +| |
| 51 | +Set the cluster config `audit_enabled` to `false`: |
| 52 | + |
| 53 | +[,bash] |
| 54 | +---- |
| 55 | +rpk cluster config set audit_enabled false |
| 56 | +---- |
| 57 | + |
| 58 | +| xref:manage:cluster-maintenance/continuous-data-balancing.adoc[Continuous Data Balancing] |
| 59 | +| |
| 60 | +Set the cluster config `partition_autobalancing_mode` to `node_add`: |
| 61 | + |
| 62 | +[,bash] |
| 63 | +---- |
| 64 | +rpk cluster config set partition_autobalancing_mode node_add |
| 65 | +---- |
| 66 | + |
| 67 | +| xref:manage:cluster-maintenance/cluster-balancing.adoc#intra-broker-partition-balancing[Continuous Intra-Broker Partition Balancing] |
| 68 | +(`core_balancing_continuous`) |
| 69 | +| |
| 70 | +Set the cluster config `core_balancing_continuous` to `false`: |
| 71 | + |
| 72 | +[,bash] |
| 73 | +---- |
| 74 | +rpk cluster config set core_balancing_continuous false |
| 75 | +---- |
| 76 | + |
| 77 | +| xref:manage:security/fips-compliance.adoc[FIPS Compliance] |
| 78 | +| |
| 79 | +Set the node config `fips_mode` to `disabled`: |
| 80 | + |
| 81 | +[,bash] |
| 82 | +---- |
| 83 | +rpk node config set fips_mode disabled |
| 84 | +---- |
| 85 | + |
| 86 | +| xref:manage:security/authentication.adoc#kerberos[Kerberos authentication] |
| 87 | +| |
| 88 | +Remove `GSSAPI` from the cluster config `sasl_mechanisms`: |
| 89 | + |
| 90 | +[,bash] |
| 91 | +---- |
| 92 | +rpk cluster config set sasl_mechanisms <other-mechanisms> |
| 93 | +---- |
| 94 | + |
| 95 | +| xref:manage:security/authentication.adoc#kerberos[Leader Pinning] |
| 96 | +| |
| 97 | +Set `default_leaders_preference` to `none`: |
| 98 | + |
| 99 | +[,bash] |
| 100 | +---- |
| 101 | +rpk cluster config set default_leaders_preference none |
| 102 | +---- |
| 103 | + |
| 104 | +| xref:manage:security/authentication.adoc#oidc[OAUTHBEARER/OIDC authentication] |
| 105 | +| |
| 106 | +Remove `OIDC` from the cluster config `sasl_mechanisms` and `http_authentication`: |
| 107 | +[,bash] |
| 108 | +---- |
| 109 | +rpk cluster config set sasl_mechanisms <other-mechanisms> |
| 110 | +rpk cluster config set http_authentication <other-mechanisms> |
| 111 | +---- |
| 112 | + |
| 113 | +| xref:manage:remote-read-replicas.adoc[Remote Read Replicas] |
| 114 | +| |
| 115 | +Set the cluster config `cloud_storage_enable_remote_read` to `false`: |
| 116 | + |
| 117 | +[,bash] |
| 118 | +---- |
| 119 | +rpk cluster config set cloud_storage_enable_remote_read false |
| 120 | +---- |
| 121 | + |
| 122 | +| xref:manage:security/authorization/rbac.adoc[Role-Based Access Control (RBAC)] |
| 123 | +| |
| 124 | +Use `rpk security role delete` to delete all configured roles: |
| 125 | + |
| 126 | +[,bash] |
| 127 | +---- |
| 128 | +rpk security role list |
| 129 | +rpk security role delete <role-name> |
| 130 | +---- |
| 131 | + |
| 132 | +| xref:manage:schema-reg/schema-id-validation.adoc[Server-Side Schema ID Validation] |
| 133 | +| |
| 134 | +Set the cluster config `enable_schema_id_validation` to `false`: |
| 135 | + |
| 136 | +[,bash] |
| 137 | +---- |
| 138 | +rpk cluster config set enable_schema_id_validation false |
| 139 | +---- |
| 140 | + |
| 141 | +| xref:manage:tiered-storage.adoc[Tiered Storage] |
| 142 | +| |
| 143 | +Set the cluster config `cloud_storage_enabled` to `false`: |
| 144 | + |
| 145 | +[,bash] |
| 146 | +---- |
| 147 | +rpk cluster config set cloud_storage_enabled false |
| 148 | +---- |
| 149 | + |
| 150 | +|=== |
| 151 | + |
| 152 | +== Verify the license status |
| 153 | + |
| 154 | +When all required changes are made, confirm that the `license violation` status is now `false`. |
| 155 | + |
| 156 | +[,bash] |
| 157 | +---- |
| 158 | +rpk cluster license info |
| 159 | +---- |
| 160 | + |
| 161 | +== Suggested reading |
| 162 | + |
| 163 | +For more information about licensing, see xref:get-started:licensing/overview.adoc[]. |
0 commit comments