# Elastic Orchestration

**URL:** https://discuss.elastic.co/c/orchestration/85.md

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

---

## [About the Elastic Orchestration category](https://discuss.elastic.co/t/about-the-elastic-orchestration-category/235258)

<div class="topic-metadata">

**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Replies:** 0\
**Last updated:** [June 2, 2020, 12:13am UTC](https://discuss.elastic.co/t/about-the-elastic-orchestration-category/235258 "2020-06-02T00:13:18Z")

</div>

Deployed anywhere Public cloud? Private cloud? Bare metal? Containers? We're there with ECE, ECK, Terraform and Ansible. Please post your your topic under the relevant product category Elastic Orchestration \> Elastic Cl…

---

## [Why is the operator run as a statefulset?](https://discuss.elastic.co/t/why-is-the-operator-run-as-a-statefulset/390605)

<div class="topic-metadata">

**Author:** [@Frederic\_PEGE](https://discuss.elastic.co/u/Frederic_PEGE)\
**Replies:** 0\
**Last updated:** [September 23, 2026, 11:37am UTC](https://discuss.elastic.co/t/why-is-the-operator-run-as-a-statefulset/390605 "2026-09-23T11:37:14Z")

</div>

Hi, Why is the operator run as a STS ? I'm talking about the ES cluster, but the actual operator ?

---

## [Deploying an External Fleet Server with an ECK-Managed Elastic Stack](https://discuss.elastic.co/t/deploying-an-external-fleet-server-with-an-eck-managed-elastic-stack/388380)

<div class="topic-metadata">

**Author:** [@Zaryab\_Shaikh](https://discuss.elastic.co/u/Zaryab_Shaikh)\
**Replies:** 0\
**Last updated:** [July 16, 2026, 1:42pm UTC](https://discuss.elastic.co/t/deploying-an-external-fleet-server-with-an-eck-managed-elastic-stack/388380 "2026-07-16T13:42:22Z")

</div>

Hi everyone, I hope you're doing well. I have an Elastic Stack deployment running on Kubernetes using the ECK Operator. Elasticsearch, Kibana, and Fleet Server are all deployed successfully and working as expected with…

---

## [Issues with ECK and pvc-autoresizer](https://discuss.elastic.co/t/issues-with-eck-and-pvc-autoresizer/386804)

<div class="topic-metadata">

**Author:** [@sahendrikse](https://discuss.elastic.co/u/sahendrikse)\
**Replies:** 0\
**Last updated:** [June 10, 2026, 4:32pm UTC](https://discuss.elastic.co/t/issues-with-eck-and-pvc-autoresizer/386804 "2026-06-10T16:32:35Z")

</div>

Hi all, We're currently working with both ECK and pvc-autoresizer in our deployment, where our pvc-resizer annotations are defined with the volumeClaimTemplate as: annotations = { "resize.topolvm.io/threshold" = …

---

## [Netty LEAK logs on elasticsearch clusters probably after version update](https://discuss.elastic.co/t/netty-leak-logs-on-elasticsearch-clusters-probably-after-version-update/375797)

<div class="topic-metadata">

**Author:** [@coezdemir](https://discuss.elastic.co/u/coezdemir)\
**Replies:** 1\
**Last updated:** [June 3, 2026, 5:22pm UTC](https://discuss.elastic.co/t/netty-leak-logs-on-elasticsearch-clusters-probably-after-version-update/375797 "2026-06-03T17:22:11Z")

</div>

Hello, We have two kubernetes clusters running on two DCs, on these clusters we have 2 elasticsearch clusters. These two clusters are being used by a service on our webpage to respond queries. Cluster details per DC (o…

---

## [Eck-stack master, hot, warm and cold architecture](https://discuss.elastic.co/t/eck-stack-master-hot-warm-and-cold-architecture/386443)

<div class="topic-metadata">

**Author:** [@khteh](https://discuss.elastic.co/u/khteh)\
**Replies:** 0\
**Last updated:** [May 21, 2026, 12:21pm UTC](https://discuss.elastic.co/t/eck-stack-master-hot-warm-and-cold-architecture/386443 "2026-05-21T12:21:37Z")

</div>

Is there any documentation on the eck-stack example chart cloud-on-k8s/deploy/eck-stack/examples/elasticsearch/hot-warm-cold.yaml at main · elastic/cloud-on-k8s · GitHub ? In particular, what are the master, hot, warm an…

---

## [Hot and warm STS stuck and no pods created & helmfile apply or sync doesn't update STS replicas count](https://discuss.elastic.co/t/hot-and-warm-sts-stuck-and-no-pods-created-helmfile-apply-or-sync-doesnt-update-sts-replicas-count/386441)

<div class="topic-metadata">

**Author:** [@khteh](https://discuss.elastic.co/u/khteh)\
**Replies:** 0\
**Last updated:** [May 21, 2026, 11:55am UTC](https://discuss.elastic.co/t/hot-and-warm-sts-stuck-and-no-pods-created-helmfile-apply-or-sync-doesnt-update-sts-replicas-count/386441 "2026-05-21T11:55:09Z")

</div>

$ k logs -n elastic-system -l control-plane=elastic-operator No resources found in elastic-system namespace. $ k get all -n elastic-system NAME READY STATUS RESTARTS AGE pod/elastic-operato…

---

## [Warm and cold requirements](https://discuss.elastic.co/t/warm-and-cold-requirements/385912)

<div class="topic-metadata">

**Author:** [@Ivan\_Hhero](https://discuss.elastic.co/u/Ivan_Hhero)\
**Replies:** 1\
**Last updated:** [May 2, 2026, 12:50am UTC](https://discuss.elastic.co/t/warm-and-cold-requirements/385912 "2026-05-02T00:50:54Z")

</div>

Hello, I am thinking about using ECE. In the past, the Warm and Cold tiers required a 64x multiplier (1GB RAM to 64GB Storage). However, if I want to use 25TB or 50TB for an instance, I would need 384GB or 768GB of RAM,…

---

## [Logstash monitoring is not enabled despite Helm values](https://discuss.elastic.co/t/logstash-monitoring-is-not-enabled-despite-helm-values/385998)

<div class="topic-metadata">

**Author:** [@CitizenSteak](https://discuss.elastic.co/u/CitizenSteak)\
**Replies:** 2\
**Last updated:** [April 23, 2026, 10:09am UTC](https://discuss.elastic.co/t/logstash-monitoring-is-not-enabled-despite-helm-values/385998 "2026-04-23T10:09:51Z")

</div>

Hello, In my current ECK deployment (using the eck-stack chart), Logstash monitoring is not enabled, while Elasticsearch and Kibana monitoring are working as expected. Current Logstash Configuration (Excerpt) eck-logst…

---

## [How to add xpack.encryptedSavedObjects.encryptionKey for Kibana deployments in ECE without breaking Fleet](https://discuss.elastic.co/t/how-to-add-xpack-encryptedsavedobjects-encryptionkey-for-kibana-deployments-in-ece-without-breaking-fleet/385196)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 3\
**Last updated:** [March 19, 2026, 7:47pm UTC](https://discuss.elastic.co/t/how-to-add-xpack-encryptedsavedobjects-encryptionkey-for-kibana-deployments-in-ece-without-breaking-fleet/385196 "2026-03-19T19:47:53Z")

</div>

Hello, So I tried setting xpack.encryptedSavedObjects.encryptionKey on an ECE Kibana deployment in User and settings and it appeared to have broken the builtin Fleet (message signing key error when opening Fleet) But h…

---

## [Cluster Migration](https://discuss.elastic.co/t/cluster-migration/363745)

<div class="topic-metadata">

**Author:** [@Marcus\_Simonsen](https://discuss.elastic.co/u/Marcus_Simonsen)\
**Replies:** 1\
**Last updated:** [March 9, 2026, 12:48am UTC](https://discuss.elastic.co/t/cluster-migration/363745 "2026-03-09T00:48:51Z")

</div>

Hello Elastic experts, I would like to migrate from a VM based deployment to one on kubernetes - and eck. Because of the size of the indices (many TBs of data) it has been suggested that I can create data nodes and joi…

---

## [Upgrading elasticsearch 8.19.11 to 9+ cluster managed by ECK Operator](https://discuss.elastic.co/t/upgrading-elasticsearch-8-19-11-to-9-cluster-managed-by-eck-operator/385361)

<div class="topic-metadata">

**Author:** [@coezdemir](https://discuss.elastic.co/u/coezdemir)\
**Replies:** 0\
**Last updated:** [March 6, 2026, 10:43am UTC](https://discuss.elastic.co/t/upgrading-elasticsearch-8-19-11-to-9-cluster-managed-by-eck-operator/385361 "2026-03-06T10:43:10Z")

</div>

Hello, I wanted to share some insight that we came accross on an upgrade we recently did. Upgrade ECK operator version from 2.16+ to 3+ since only 3+ supports 9+ elastic Upgrade path was from 8.19.11 → 9.1.9 at first …

---

## [Managing multiple Elasticsearch clusters across different Kubernetes clusters with a single ECK instance](https://discuss.elastic.co/t/managing-multiple-elasticsearch-clusters-across-different-kubernetes-clusters-with-a-single-eck-instance/385226)

<div class="topic-metadata">

**Author:** [@CitizenSteak](https://discuss.elastic.co/u/CitizenSteak)\
**Replies:** 1\
**Last updated:** [March 1, 2026, 9:31pm UTC](https://discuss.elastic.co/t/managing-multiple-elasticsearch-clusters-across-different-kubernetes-clusters-with-a-single-eck-instance/385226 "2026-03-01T21:31:07Z")

</div>

I have a Kubernetes cluster A where I deployed an Elasticsearch cluster A with the Operator. Now, I have a Kubernetes cluster B where I want to deploy an Elasticsearch cluster B but I would like for it to be managed by t…

---

## [Enforcing a 1:1 mapping between pods and cluster nodes for deploying multiple ElasticSearch/Logstash replicas with local storage](https://discuss.elastic.co/t/enforcing-a-1-1-mapping-between-pods-and-cluster-nodes-for-deploying-multiple-elasticsearch-logstash-replicas-with-local-storage/384433)

<div class="topic-metadata">

**Author:** [@CitizenSteak](https://discuss.elastic.co/u/CitizenSteak)\
**Replies:** 1\
**Last updated:** [February 25, 2026, 4:30pm UTC](https://discuss.elastic.co/t/enforcing-a-1-1-mapping-between-pods-and-cluster-nodes-for-deploying-multiple-elasticsearch-logstash-replicas-with-local-storage/384433 "2026-02-25T16:30:02Z")

</div>

Context I'm deploying the ELK stack (using the eck-stack chart) on a K3s cluster with OpenEBS for local storage. When deploying multiple Elasticsearch or Logstash replicas with local storage (e.g., OpenEBS \`ReadWriteOnc…

---

## [Deployment methods other than using ECK for logstash](https://discuss.elastic.co/t/deployment-methods-other-than-using-eck-for-logstash/384991)

<div class="topic-metadata">

**Author:** [@yossib](https://discuss.elastic.co/u/yossib)\
**Replies:** 0\
**Last updated:** [February 10, 2026, 9:52am UTC](https://discuss.elastic.co/t/deployment-methods-other-than-using-eck-for-logstash/384991 "2026-02-10T09:52:45Z")

</div>

I’m looking for alternatives of deploying logstash on openshift other than using ECK operator

---

## [Kibana expose through K8s Gateway API](https://discuss.elastic.co/t/kibana-expose-through-k8s-gateway-api/384073)

<div class="topic-metadata">

**Author:** [@livresco](https://discuss.elastic.co/u/livresco)\
**Replies:** 1\
**Last updated:** [February 7, 2026, 4:38am UTC](https://discuss.elastic.co/t/kibana-expose-through-k8s-gateway-api/384073 "2026-02-07T04:38:18Z")

</div>

I have a python app running and I already managed to expose it through Gateway API and access it through "http:///pythonapp".Next I deployed a Elasticsearch and Kibana instance so I can gain experience in monitoring and …

---

## [ECK Fleet Server setup confusion and failure](https://discuss.elastic.co/t/eck-fleet-server-setup-confusion-and-failure/384857)

<div class="topic-metadata">

**Author:** [@gueguet57](https://discuss.elastic.co/u/gueguet57)\
**Replies:** 1\
**Last updated:** [February 3, 2026, 10:36am UTC](https://discuss.elastic.co/t/eck-fleet-server-setup-confusion-and-failure/384857 "2026-02-03T10:36:57Z")

</div>

Hi, I have an existing ECK stack (ES + Kibana) running fine. I’m now trying to add Fleet Server and configure Kibana accordingly, but I’m a bit confused. I’m following: https://www.elastic.co/docs/deploy-manage/depl…

---

## [Load balancing method](https://discuss.elastic.co/t/load-balancing-method/384829)

<div class="topic-metadata">

**Author:** [@jojsf](https://discuss.elastic.co/u/jojsf)\
**Replies:** 0\
**Last updated:** [January 30, 2026, 10:19am UTC](https://discuss.elastic.co/t/load-balancing-method/384829 "2026-01-30T10:19:31Z")

</div>

Hello, I want to do a poll and se how many of you can say witch load balancing method you use in front of the proxys in ECE. We have an large deployment today with several use cases sutch as search, APM, log ingest etc…

---

## [ECE 4.0.3 installation fails on RHEL 9.7 with Podman 4.x / 5.x - compatibility error](https://discuss.elastic.co/t/ece-4-0-3-installation-fails-on-rhel-9-7-with-podman-4-x-5-x-compatibility-error/384672)

<div class="topic-metadata">

**Author:** [@Abdul\_Haseeb\_Q](https://discuss.elastic.co/u/Abdul_Haseeb_Q)\
**Replies:** 0\
**Last updated:** [January 21, 2026, 1:28pm UTC](https://discuss.elastic.co/t/ece-4-0-3-installation-fails-on-rhel-9-7-with-podman-4-x-5-x-compatibility-error/384672 "2026-01-21T13:28:12Z")

</div>

Hey Elastic folks, I need help deploying Elastic Cloud Enterprise (ECE) 4.0.3 on a local VM, but the installation consistently fails due to a compatibility error. Environment – OS: RHEL 9.7 (VM) – Container Runtime: …

---

## [Reducing PVC size on single-node ECK cluster](https://discuss.elastic.co/t/reducing-pvc-size-on-single-node-eck-cluster/384405)

<div class="topic-metadata">

**Author:** [@gueguet57](https://discuss.elastic.co/u/gueguet57)\
**Replies:** 1\
**Last updated:** [January 7, 2026, 12:22pm UTC](https://discuss.elastic.co/t/reducing-pvc-size-on-single-node-eck-cluster/384405 "2026-01-07T12:22:23Z")

</div>

Hi everyone, I deployed an ECK cluster in a sandbox environment with a single node and a PersistentVolumeClaim of X Gi. I would like to reduce the size of the disk allocated to this node. From my understanding, Kubern…

---

## [Filebeat re-ingesting old logs after pod restart (ECK on GKE) - ignore\_older not working](https://discuss.elastic.co/t/filebeat-re-ingesting-old-logs-after-pod-restart-eck-on-gke-ignore-older-not-working/384328)

<div class="topic-metadata">

**Author:** [@Marwan\_Ghonem](https://discuss.elastic.co/u/Marwan_Ghonem)\
**Replies:** 2\
**Last updated:** [January 2, 2026, 3:27pm UTC](https://discuss.elastic.co/t/filebeat-re-ingesting-old-logs-after-pod-restart-eck-on-gke-ignore-older-not-working/384328 "2026-01-02T15:27:52Z")

</div>

Problem Filebeat is repeatedly re-ingesting old logs (4-15 days old) causing previously deleted indices to be recreated. Environment Filebeat version: 7.10.1 ADeployment: ECK (Elastic Cloud on Kubernetes) DaemonS…

---

## [Pod fails to become ready after restart](https://discuss.elastic.co/t/pod-fails-to-become-ready-after-restart/383162)

<div class="topic-metadata">

**Author:** [@leighr](https://discuss.elastic.co/u/leighr)\
**Replies:** 1\
**Last updated:** [December 31, 2025, 3:40pm UTC](https://discuss.elastic.co/t/pod-fails-to-become-ready-after-restart/383162 "2025-12-31T15:40:11Z")

</div>

elastic operator v2.16.1 is installed in the cluster. k8s is running in Amazon EKS, k8s version 1.32 The following brings up a four node cluster with no errors: apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elasti…

---

## [Kubernetes CRDs for index templates / datastreams with ECK?](https://discuss.elastic.co/t/kubernetes-crds-for-index-templates-datastreams-with-eck/384085)

<div class="topic-metadata">

**Author:** [@gueguet57](https://discuss.elastic.co/u/gueguet57)\
**Replies:** 1\
**Last updated:** [December 31, 2025, 3:19pm UTC](https://discuss.elastic.co/t/kubernetes-crds-for-index-templates-datastreams-with-eck/384085 "2025-12-31T15:19:59Z")

</div>

Hi all, I’m deploying Elastic via ECK and want to manage index templates / datastreams as code in Kubernetes manifests (Helm / GitOps). I checked the ECK API docs but didn’t see any CRDs for this (or I missed it). Que…

---

## [TLS SANs not applied to Logstash custom service certificate in ECK](https://discuss.elastic.co/t/tls-sans-not-applied-to-logstash-custom-service-certificate-in-eck/384148)

<div class="topic-metadata">

**Author:** [@CitizenSteak](https://discuss.elastic.co/u/CitizenSteak)\
**Replies:** 1\
**Last updated:** [December 31, 2025, 3:12pm UTC](https://discuss.elastic.co/t/tls-sans-not-applied-to-logstash-custom-service-certificate-in-eck/384148 "2025-12-31T15:12:49Z")

</div>

Context I have filebeat installed on a VM and I’m trying to send logs to a logstash instance deployed on a K3S cluster. Description of the issue When configuring a custom Logstash service with selfSignedCertificate and s…

---

## [Where to find Elasticsearch internal logs when using ECK](https://discuss.elastic.co/t/where-to-find-elasticsearch-internal-logs-when-using-eck/384311)

<div class="topic-metadata">

**Author:** [@gueguet57](https://discuss.elastic.co/u/gueguet57)\
**Replies:** 1\
**Last updated:** [December 31, 2025, 2:35pm UTC](https://discuss.elastic.co/t/where-to-find-elasticsearch-internal-logs-when-using-eck/384311 "2025-12-31T14:35:36Z")

</div>

Hello all, I’ve deployed an Elastic stack using ECK and I’m trying to understand what logs Elastic produces and sotres about itself and how to access them. For example, I’d like to investigate whether Elasticsearch pre…

---

## [Elastic Cloud Enterprise - cannot upload my own certificates](https://discuss.elastic.co/t/elastic-cloud-enterprise-cannot-upload-my-own-certificates/384221)

<div class="topic-metadata">

**Author:** [@CD9820](https://discuss.elastic.co/u/CD9820)\
**Replies:** 3\
**Last updated:** [December 23, 2025, 3:31pm UTC](https://discuss.elastic.co/t/elastic-cloud-enterprise-cannot-upload-my-own-certificates/384221 "2025-12-23T15:31:51Z")

</div>

Hello I am installing ECE on prem. When uploading my own certificates I get this error. I followed these instructions but I still get the error : Manage security certificates | Elastic Docs Is there another way to …

---

## [ECE Self-Signed Cert Error: malformed sequence in RSA private key](https://discuss.elastic.co/t/ece-self-signed-cert-error-malformed-sequence-in-rsa-private-key/368270)

<div class="topic-metadata">

**Author:** [@rfishback](https://discuss.elastic.co/u/rfishback)\
**Replies:** 1\
**Last updated:** [December 22, 2025, 2:56pm UTC](https://discuss.elastic.co/t/ece-self-signed-cert-error-malformed-sequence-in-rsa-private-key/368270 "2025-12-22T14:56:39Z")

</div>

Hello, This is a new ECE build that is deployed into AWS. The host is sitting behind a network load balancer listening on 12443/9243 with a \*.domain.com certificate attached. I can reach both the CloudUI and Proxy UI/K…

---

## [Elastic Cloud Enterprise (ECE) deployment issue](https://discuss.elastic.co/t/elastic-cloud-enterprise-ece-deployment-issue/383979)

<div class="topic-metadata">

**Author:** [@Amir\_Trigui](https://discuss.elastic.co/u/Amir_Trigui)\
**Replies:** 0\
**Last updated:** [December 11, 2025, 9:26am UTC](https://discuss.elastic.co/t/elastic-cloud-enterprise-ece-deployment-issue/383979 "2025-12-11T09:26:59Z")

</div>

Hello, I am working on Elastic Cloud Enterprise (ECE), but I keep encountering an issue: the installation is interrupted always at this stage. I am using the script https://download.elastic.co/cloud/elastic-cloud-enter…

---

## [ECK how to change filebeat and metricbeat image paths?](https://discuss.elastic.co/t/eck-how-to-change-filebeat-and-metricbeat-image-paths/383817)

<div class="topic-metadata">

**Author:** [@Dave\_Houser](https://discuss.elastic.co/u/Dave_Houser)\
**Replies:** 3\
**Last updated:** [December 3, 2025, 3:33pm UTC](https://discuss.elastic.co/t/eck-how-to-change-filebeat-and-metricbeat-image-paths/383817 "2025-12-03T15:33:52Z")

</div>

How can I specify a custom path in our private registry for filebeat and metricbeat images? Note, these are the images that are used when Elastic pod is deployed, it seems that filebeat and metricbeat containers are nee…

---

## [Can't create support technical cases](https://discuss.elastic.co/t/cant-create-support-technical-cases/383707)

<div class="topic-metadata">

**Author:** [@isuru-sentry](https://discuss.elastic.co/u/isuru-sentry)\
**Replies:** 0\
**Last updated:** [November 27, 2025, 5:38am UTC](https://discuss.elastic.co/t/cant-create-support-technical-cases/383707 "2025-11-27T05:38:55Z")

</div>

I want access to the technical support in Elastic Search. I am Organisational owner but not able to access to the technical support. I have only access to account or billing.

[Next page](https://discuss.elastic.co/c/orchestration/85.md?page=1)
