# Elastic Orchestration

**URL:** https://discuss.elastic.co/c/orchestration/85.md?page=15

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 16

---

## [Does FIPS 140-2 Mode Work on Kubernetes?](https://discuss.elastic.co/t/does-fips-140-2-mode-work-on-kubernetes/254417)

<div class="topic-metadata">

**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\
**Replies:** 5\
**Last updated:** [September 7, 2022, 2:25pm UTC](https://discuss.elastic.co/t/does-fips-140-2-mode-work-on-kubernetes/254417 "2022-09-07T14:25:06Z")

</div>

Hi All, I was looking into FIPS 140-2 mode support on Kubernetes with Elastic's k8s operator, however, I didn't see any mention of FIPS 140-2 at all within the docs. Is this something that is supported? If it is does it…

---

## [ECK Fleet Server Behind Ingress - elastic agents becoming unhealthy](https://discuss.elastic.co/t/eck-fleet-server-behind-ingress-elastic-agents-becoming-unhealthy/313234)

<div class="topic-metadata">

**Author:** [@sanju\_techie](https://discuss.elastic.co/u/sanju_techie)\
**Replies:** 4\
**Last updated:** [September 3, 2022, 5:27am UTC](https://discuss.elastic.co/t/eck-fleet-server-behind-ingress-elastic-agents-becoming-unhealthy/313234 "2022-09-03T05:27:40Z")

</div>

Hi All, Brief Fact: We have deployed ECK in Azure AKS. The whole thing is behind an Ingress as seen in the below Diagram. The requirement is to connect elastic agents which are residing outside of the ECK cluster to fl…

---

## [Upgrading from ECK 0.9.0](https://discuss.elastic.co/t/upgrading-from-eck-0-9-0/313580)

<div class="topic-metadata">

**Author:** [@charles3](https://discuss.elastic.co/u/charles3)\
**Replies:** 0\
**Last updated:** [September 2, 2022, 6:14pm UTC](https://discuss.elastic.co/t/upgrading-from-eck-0-9-0/313580 "2022-09-02T18:14:46Z")

</div>

Is there a guide for upgrading from ECK 0.9.0 to 1.0.0-beta1? I've followed the Upgrade Guide and it always results in the deletion of the persistent volumes and, ultimately, the loss of data. In the last test that I r…

---

## [How to configure kibana url for fleet managed ECK stack](https://discuss.elastic.co/t/how-to-configure-kibana-url-for-fleet-managed-eck-stack/313474)

<div class="topic-metadata">

**Author:** [@geoaxis](https://discuss.elastic.co/u/geoaxis)\
**Replies:** 0\
**Last updated:** [September 1, 2022, 6:49pm UTC](https://discuss.elastic.co/t/how-to-configure-kibana-url-for-fleet-managed-eck-stack/313474 "2022-09-01T18:49:06Z")

</div>

Hello, I am following guide from Quickstart | Elastic Cloud on Kubernetes \[2.4\] | Elastic and would like to access the kibana instance from /kibana . For this I have changed the baseUrl and basePath. Both kibana and E…

---

## [Recommended configuration for dedicated master nodes in ECK](https://discuss.elastic.co/t/recommended-configuration-for-dedicated-master-nodes-in-eck/313197)

<div class="topic-metadata">

**Author:** [@ejsmith](https://discuss.elastic.co/u/ejsmith)\
**Replies:** 2\
**Last updated:** [August 31, 2022, 3:12am UTC](https://discuss.elastic.co/t/recommended-configuration-for-dedicated-master-nodes-in-eck/313197 "2022-08-31T03:12:38Z")

</div>

When setting up an Elasticsearch cluster with dedicated master nodes, is it recommended that those dedicated master nodes be on separate Kubernetes nodes than the data nodes?

---

## [Error with ECK Operator 2.3.0 - Failed to get API Group-Resources](https://discuss.elastic.co/t/error-with-eck-operator-2-3-0-failed-to-get-api-group-resources/312674)

<div class="topic-metadata">

**Author:** [@x00m](https://discuss.elastic.co/u/x00m)\
**Replies:** 2\
**Last updated:** [August 26, 2022, 9:59am UTC](https://discuss.elastic.co/t/error-with-eck-operator-2-3-0-failed-to-get-api-group-resources/312674 "2022-08-26T09:59:55Z")

</div>

Using a fresh installation of ECK Operator 2.3.0, and installing Elasticsearch version 7.16.2, Running on Azure Kubernetes Service, and with ISTIO service mesh. The operator eventually runs fine but restarts once in a w…

---

## [ECK - Verify that all ElasticSearch clusters are running Enterprise License](https://discuss.elastic.co/t/eck-verify-that-all-elasticsearch-clusters-are-running-enterprise-license/313004)

<div class="topic-metadata">

**Author:** [@x00m](https://discuss.elastic.co/u/x00m)\
**Replies:** 0\
**Last updated:** [August 26, 2022, 9:47am UTC](https://discuss.elastic.co/t/eck-verify-that-all-elasticsearch-clusters-are-running-enterprise-license/313004 "2022-08-26T09:47:30Z")

</div>

According to this documentation - Manage licenses in ECK | Elastic Cloud on Kubernetes \[2.4\] | Elastic The \_license API reports that individual Elasticsearch clusters are running under an Enterprise license, and the e…

---

## [Cluster uuid different after cluster migration](https://discuss.elastic.co/t/cluster-uuid-different-after-cluster-migration/312640)

<div class="topic-metadata">

**Author:** [@Thomas\_Boutelier](https://discuss.elastic.co/u/Thomas_Boutelier)\
**Replies:** 3\
**Last updated:** [August 24, 2022, 12:56pm UTC](https://discuss.elastic.co/t/cluster-uuid-different-after-cluster-migration/312640 "2022-08-24T12:56:44Z")

</div>

Hello everybody, I performed a cluster migration; I've recreated a kubernetes cluster and reattached the existing elasticsearch ebs volumes (with all datas). When I recreated the Elastic manifest, it generated a cluste…

---

## [ECK Operator Error - Cannot parse Elasticsearch error response body](https://discuss.elastic.co/t/eck-operator-error-cannot-parse-elasticsearch-error-response-body/312675)

<div class="topic-metadata">

**Author:** [@x00m](https://discuss.elastic.co/u/x00m)\
**Replies:** 1\
**Last updated:** [August 24, 2022, 12:36pm UTC](https://discuss.elastic.co/t/eck-operator-error-cannot-parse-elasticsearch-error-response-body/312675 "2022-08-24T12:36:24Z")

</div>

I get this error with ECK 2.3.0 with elasticsearch 7.16.2 08-16-2022 12:05:48 Cannot parse Elasticsearch error response body elasticsearch-client {"message":"Cannot parse Elasticsearch error response body","namespace":n…

---

## [ECK Operator - Leader Election Lost causes Restart](https://discuss.elastic.co/t/eck-operator-leader-election-lost-causes-restart/312677)

<div class="topic-metadata">

**Author:** [@x00m](https://discuss.elastic.co/u/x00m)\
**Replies:** 1\
**Last updated:** [August 24, 2022, 12:33pm UTC](https://discuss.elastic.co/t/eck-operator-leader-election-lost-causes-restart/312677 "2022-08-24T12:33:20Z")

</div>

Using Fresh ECK setup v2.3.0 in Azure Kubernetes Service. Elasticsearch version 7.16.2 Getting these errors consistently across multiple ECK setups, which causes pod restart. (Replica for eck-operator = 1 only) E0820 …

---

## [Eck-operator error logs](https://discuss.elastic.co/t/eck-operator-error-logs/312459)

<div class="topic-metadata">

**Author:** [@x00m](https://discuss.elastic.co/u/x00m)\
**Replies:** 4\
**Last updated:** [August 23, 2022, 6:00am UTC](https://discuss.elastic.co/t/eck-operator-error-logs/312459 "2022-08-23T06:00:34Z")

</div>

I see a lot of errors coming out of eck operator : This is one instance: E0819 10:51:42.525350 1 leaderelection.go:330\] error retrieving resource lock elastic-system/elastic-operator-leader: leases.coordination.k…

---

## [ECK Stack Monitoring disable certificate validation on beats](https://discuss.elastic.co/t/eck-stack-monitoring-disable-certificate-validation-on-beats/310875)

<div class="topic-metadata">

**Author:** [@clewo](https://discuss.elastic.co/u/clewo)\
**Replies:** 1\
**Last updated:** [August 22, 2022, 6:24am UTC](https://discuss.elastic.co/t/eck-stack-monitoring-disable-certificate-validation-on-beats/310875 "2022-08-22T06:24:28Z")

</div>

Hi, I wanted to setup Stack Monitoring as described here: Stack Monitoring | Elastic Cloud on Kubernetes \[2.3\] | Elastic I've provided my own certificate to the elasticsearch cluster which didn't contain a SAN entry fo…

---

## [ECK Kibana tls certificate not updated](https://discuss.elastic.co/t/eck-kibana-tls-certificate-not-updated/309664)

<div class="topic-metadata">

**Author:** [@ragmel](https://discuss.elastic.co/u/ragmel)\
**Replies:** 7\
**Last updated:** [August 16, 2022, 10:59am UTC](https://discuss.elastic.co/t/eck-kibana-tls-certificate-not-updated/309664 "2022-08-16T10:59:10Z")

</div>

Our kibana TLS certificate for HTTP layer it's about to expire. This was setup through the guide below We already have the new certificate and the idea was just to create a new k8s secret, and redeploy kibana (we use …

---

## [Ece proxy 9200 Connection reset by peer](https://discuss.elastic.co/t/ece-proxy-9200-connection-reset-by-peer/311889)

<div class="topic-metadata">

**Author:** [@bxl](https://discuss.elastic.co/u/bxl)\
**Replies:** 1\
**Last updated:** [August 13, 2022, 3:47am UTC](https://discuss.elastic.co/t/ece-proxy-9200-connection-reset-by-peer/311889 "2022-08-13T03:47:34Z")

</div>

ece version: 2.3.1 os: CentOS Linux release 7.9.2009 (Core) #curl 127.0.0.1:9200 curl: (56) Recv failure: Connection reset by peer proxy error log \[2022-08-11 01:19:54,648\]\[ERROR\]\[akka.io.SelectionHandler$$anon$1\] a…

---

## [How do I stop automatic rollover upgrades](https://discuss.elastic.co/t/how-do-i-stop-automatic-rollover-upgrades/311190)

<div class="topic-metadata">

**Author:** [@zjh](https://discuss.elastic.co/u/zjh)\
**Replies:** 2\
**Last updated:** [August 12, 2022, 8:08am UTC](https://discuss.elastic.co/t/how-do-i-stop-automatic-rollover-upgrades/311190 "2022-08-12T08:08:42Z")

</div>

Continuing the discussion from How do I stop automatic rollover upgrades:

---

## [How do I stop automatic rollover upgrades](https://discuss.elastic.co/t/how-do-i-stop-automatic-rollover-upgrades/310240)

<div class="topic-metadata">

**Author:** [@zjh](https://discuss.elastic.co/u/zjh)\
**Replies:** 1\
**Last updated:** [August 12, 2022, 8:07am UTC](https://discuss.elastic.co/t/how-do-i-stop-automatic-rollover-upgrades/310240 "2022-08-12T08:07:44Z")

</div>

i change es version from 7.7.0 to 7.17.5 and i apply -f the es.yaml elastic-operator help me to automatic rollover upgrades,but if i want to stop it,what should i do?

---

## [Oauth2 proxy and kibana authentication](https://discuss.elastic.co/t/oauth2-proxy-and-kibana-authentication/311840)

<div class="topic-metadata">

**Author:** [@crimson\_riot](https://discuss.elastic.co/u/crimson_riot)\
**Replies:** 1\
**Last updated:** [August 10, 2022, 2:51pm UTC](https://discuss.elastic.co/t/oauth2-proxy-and-kibana-authentication/311840 "2022-08-10T14:51:15Z")

</div>

We are using Oauth2 reverse proxy to authenticate the users via google. We want to use a static username and password from kibana+elasticsearch once the user gets authenticate via google so that we dont have to add or de…

---

## [ElasticSearch on Kubernetes (ECK): Enable OR Disable cluster-autoscaler.kubernetes.io/safe-to-evict](https://discuss.elastic.co/t/elasticsearch-on-kubernetes-eck-enable-or-disable-cluster-autoscaler-kubernetes-io-safe-to-evict/311431)

<div class="topic-metadata">

**Author:** [@aqueous](https://discuss.elastic.co/u/aqueous)\
**Replies:** 0\
**Last updated:** [August 4, 2022, 1:44pm UTC](https://discuss.elastic.co/t/elasticsearch-on-kubernetes-eck-enable-or-disable-cluster-autoscaler-kubernetes-io-safe-to-evict/311431 "2022-08-04T13:44:03Z")

</div>

I am using the Elastic on Kubernetes (operator version 2.1). How can I enable or disable the following annotation on the ElasticSearch nodes managed by ECK? "cluster-autoscaler.kubernetes.io/safe-to-evict": \<Set it to …

---

## [CPU:Memory ratio for a general-purpose cluster](https://discuss.elastic.co/t/cpu-memory-ratio-for-a-general-purpose-cluster/311060)

<div class="topic-metadata">

**Author:** [@x00m](https://discuss.elastic.co/u/x00m)\
**Replies:** 1\
**Last updated:** [July 31, 2022, 7:51pm UTC](https://discuss.elastic.co/t/cpu-memory-ratio-for-a-general-purpose-cluster/311060 "2022-07-31T19:51:34Z")

</div>

How can we determine a good ratio of CPU/memory configuration for elasticsearch nodes for general purpose usage? I see 1:4 ratio in most places, I am not sure though, how that ratio is derived.

---

## [ECK Kibana access from outside kubernetes cluster](https://discuss.elastic.co/t/eck-kibana-access-from-outside-kubernetes-cluster/310257)

<div class="topic-metadata">

**Author:** [@Biplab](https://discuss.elastic.co/u/Biplab)\
**Replies:** 1\
**Last updated:** [July 28, 2022, 10:22am UTC](https://discuss.elastic.co/t/eck-kibana-access-from-outside-kubernetes-cluster/310257 "2022-07-28T10:22:29Z")

</div>

Hi, We will deploy Kibana on ECK and access Kibana from outside kubernetes cluster, I found Ingress example, Can anyone please help how to mention the selector as Kibana in the service file, Example to mention selector …

---

## [Fleet Server Deployment on kubernetes](https://discuss.elastic.co/t/fleet-server-deployment-on-kubernetes/310408)

<div class="topic-metadata">

**Author:** [@Mehran\_Hafizi](https://discuss.elastic.co/u/Mehran_Hafizi)\
**Replies:** 1\
**Last updated:** [July 28, 2022, 10:10am UTC](https://discuss.elastic.co/t/fleet-server-deployment-on-kubernetes/310408 "2022-07-28T10:10:25Z")

</div>

Hello , I wanted to install Fleet server on the AKS cluster , but I got the following errror , would you please help me to solve this issue? Error: message: Application: fleet-server--7.17.0\[\]: State changed to FAILED…

---

## [ECK setup crashes on Raspberry Pi ARM64 with Ubuntu 20.04 and microk8s](https://discuss.elastic.co/t/eck-setup-crashes-on-raspberry-pi-arm64-with-ubuntu-20-04-and-microk8s/309826)

<div class="topic-metadata">

**Author:** [@casabre](https://discuss.elastic.co/u/casabre)\
**Replies:** 1\
**Last updated:** [July 27, 2022, 7:42am UTC](https://discuss.elastic.co/t/eck-setup-crashes-on-raspberry-pi-arm64-with-ubuntu-20-04-and-microk8s/309826 "2022-07-27T07:42:01Z")

</div>

Hey elastic community, I am trying to deploy an ECK setup on my Raspberry Pi (Ubuntu 20.04) microk8s cluster (3 nodes). I followed the Quickstart tutorial and deploying the operator went fine. But creating now a cluste…

---

## [Init:ImagePullBackOff error when trying to deploy elasticsearch object to k8s](https://discuss.elastic.co/t/init-imagepullbackoff-error-when-trying-to-deploy-elasticsearch-object-to-k8s/310571)

<div class="topic-metadata">

**Author:** [@vuqar](https://discuss.elastic.co/u/vuqar)\
**Replies:** 5\
**Last updated:** [July 26, 2022, 3:27pm UTC](https://discuss.elastic.co/t/init-imagepullbackoff-error-when-trying-to-deploy-elasticsearch-object-to-k8s/310571 "2022-07-26T15:27:10Z")

</div>

I am following this ECK quickstart tutorial. For whatever reason I can't deploy elasticsearch object. When I check pod status it says Init:0/2 and after couple minutes it changes to Init:ImagePullBackOff and finally to I…

---

## [JSON ingestion for logs picked up elastic fleet agent ECK operator](https://discuss.elastic.co/t/json-ingestion-for-logs-picked-up-elastic-fleet-agent-eck-operator/310160)

<div class="topic-metadata">

**Author:** [@Sagar\_Gulabani](https://discuss.elastic.co/u/Sagar_Gulabani)\
**Replies:** 0\
**Last updated:** [July 20, 2022, 1:54pm UTC](https://discuss.elastic.co/t/json-ingestion-for-logs-picked-up-elastic-fleet-agent-eck-operator/310160 "2022-07-20T13:54:22Z")

</div>

Hi, We are using the elastic operator for Kubernetes. We are using the fleet managed elastic agent We are giving the fleet agent configuration using the kibana CRD as show below. Our logs from our applications are JSO…

---

## [ECK - quickstart - heartbeat example disrupts filebeat example](https://discuss.elastic.co/t/eck-quickstart-heartbeat-example-disrupts-filebeat-example/310026)

<div class="topic-metadata">

**Author:** [@joachimnielandt](https://discuss.elastic.co/u/joachimnielandt)\
**Replies:** 0\
**Last updated:** [July 19, 2022, 1:14pm UTC](https://discuss.elastic.co/t/eck-quickstart-heartbeat-example-disrupts-filebeat-example/310026 "2022-07-19T13:14:37Z")

</div>

Hello all, I have a question that is more about me trying to understand ECK than it is an issue. In trying to run elastic+kibana+filebeat+heartbeat, I find that I cannot run both beats together. I'm testing out a self-…

---

## [ECK service](https://discuss.elastic.co/t/eck-service/310110)

<div class="topic-metadata">

**Author:** [@Biplab](https://discuss.elastic.co/u/Biplab)\
**Replies:** 0\
**Last updated:** [July 20, 2022, 8:22am UTC](https://discuss.elastic.co/t/eck-service/310110 "2022-07-20T08:22:22Z")

</div>

Hi, We are planning to deploy elastic cluster first on ECK and then will run the service and Ingress configuration file separately to access Elasticsearch from outside kubernetes cluster, Can anyone please help whether …

---

## [ECK Fleet TLS Disabled NOT Working](https://discuss.elastic.co/t/eck-fleet-tls-disabled-not-working/309706)

<div class="topic-metadata">

**Author:** [@aung.mm](https://discuss.elastic.co/u/aung.mm)\
**Replies:** 0\
**Last updated:** [July 15, 2022, 6:10am UTC](https://discuss.elastic.co/t/eck-fleet-tls-disabled-not-working/309706 "2022-07-15T06:10:41Z")

</div>

I would like to disable TLS in the fleet server that I deployed with eck. According to documentation, I should be able to disable with "http" configuration. But it is not working at all. Please see the following configu…

---

## [Deploy Elasticsearch in kubernetes using ECK](https://discuss.elastic.co/t/deploy-elasticsearch-in-kubernetes-using-eck/308900)

<div class="topic-metadata">

**Author:** [@Biplab](https://discuss.elastic.co/u/Biplab)\
**Replies:** 2\
**Last updated:** [July 14, 2022, 8:09am UTC](https://discuss.elastic.co/t/deploy-elasticsearch-in-kubernetes-using-eck/308900 "2022-07-14T08:09:47Z")

</div>

Hi, I want to deploy an Elasticsearch cluster using ECK with the following architecture : Kubernetes cluster details: 4 Nodes and each node have one POD. Elasticsearch cluster details: 4 Nodes. One Master, One data,…

---

## [Azure kubernetes services, azure stack HCI](https://discuss.elastic.co/t/azure-kubernetes-services-azure-stack-hci/308913)

<div class="topic-metadata">

**Author:** [@splitmessage88](https://discuss.elastic.co/u/splitmessage88)\
**Replies:** 2\
**Last updated:** [July 12, 2022, 8:47am UTC](https://discuss.elastic.co/t/azure-kubernetes-services-azure-stack-hci/308913 "2022-07-12T08:47:45Z")

</div>

Hi, I try to create a persistent volume with kubernetes but I get the following error message: 0/2 nodes are available: 2 node(s) didn't find available persistent volumes to bind. AKS (azure kubernetes services) on az…

---

## [How to increase/decrease the number count via API on K8s instead of kubectl apply -f?](https://discuss.elastic.co/t/how-to-increase-decrease-the-number-count-via-api-on-k8s-instead-of-kubectl-apply-f/238228)

<div class="topic-metadata">

**Author:** [@longlnk](https://discuss.elastic.co/u/longlnk)\
**Replies:** 3\
**Last updated:** [July 12, 2022, 3:09pm UTC](https://discuss.elastic.co/t/how-to-increase-decrease-the-number-count-via-api-on-k8s-instead-of-kubectl-apply-f/238228 "2022-07-12T15:09:18Z")

</div>

Now, I only increase/decrease in the number count by kubectl apply -f Example: I create with count is 1 cat \<\<EOF | kubectl apply -f - apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elasticsearch metadata: name: …

[Previous page](https://discuss.elastic.co/c/orchestration/85.md?page=14)

[Next page](https://discuss.elastic.co/c/orchestration/85.md?page=16)
