Graph Lakehouse licensing

Graph Lakehouse uses legacy CSI licensing configured under spec.db.licensing.

Method	Required field	Sensitive
Legacy CSI license	csi.legacyLicense	Yes

spec:
  db:
    licensing:
      licenseType: CSI
      csi:
        legacyLicense: "${CSI_LICENSE}"

In standalone Helm values, the legacy CSI license is similarly supplied under licensing:

licensing:
  licenseType: CSI
  csi:
    legacyLicense: "${CSI_LICENSE}"

Render or substitute sensitive licensing values only at deployment time from your secret manager. Restrict RBAC read access to AnzoGraph custom resources.

Secret visibility

The v2 CRD accepts licensing values directly; it does not accept a Kubernetes Secret reference for these fields. Never commit manifests containing plaintext licensing values to version control. Restrict RBAC access to AnzoGraph custom resources and Helm release Secrets. For CI/CD automation mechanics, see Agentic reference.

Verify licensing through the custom-resource status and product query test. A running Pod alone does not prove that licensing succeeded.