# Elastic Orchestration

**URL:** https://discuss.elastic.co/c/orchestration/85.md?page=18

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 19

---

## [Controlling the services created for ElasticSearch in Kubernetes](https://discuss.elastic.co/t/controlling-the-services-created-for-elasticsearch-in-kubernetes/301743)

<div class="topic-metadata">

**Author:** [@codex](https://discuss.elastic.co/u/codex)\
**Replies:** 3\
**Last updated:** [April 20, 2022, 1:43pm UTC](https://discuss.elastic.co/t/controlling-the-services-created-for-elasticsearch-in-kubernetes/301743 "2022-04-20T13:43:04Z")

</div>

I'm currently trying to use Elasticsearch with Consul, and there's an issue relating to the services that are created using the operator pattern. elastic-search-es-default ClusterIP None \<none\> …

---

## [How to speed up move es node migration to another machine](https://discuss.elastic.co/t/how-to-speed-up-move-es-node-migration-to-another-machine/300913)

<div class="topic-metadata">

**Author:** [@dalei2019](https://discuss.elastic.co/u/dalei2019)\
**Replies:** 3\
**Last updated:** [April 20, 2022, 1:31pm UTC](https://discuss.elastic.co/t/how-to-speed-up-move-es-node-migration-to-another-machine/300913 "2022-04-20T13:31:07Z")

</div>

Hi team, I have a 10 node es cluster created by ECK on k8s v1.22 . And Persistent storage uses local pv . For some reasons, I want to move one of the es instances to a new node. Because the index has opened the copy…

---

## [Ok to add safe-to-evict annotation to Elasticsearch/Kibana pods for k8s cluster autoscaling?](https://discuss.elastic.co/t/ok-to-add-safe-to-evict-annotation-to-elasticsearch-kibana-pods-for-k8s-cluster-autoscaling/302264)

<div class="topic-metadata">

**Author:** [@jketcham](https://discuss.elastic.co/u/jketcham)\
**Replies:** 2\
**Last updated:** [April 19, 2022, 7:51pm UTC](https://discuss.elastic.co/t/ok-to-add-safe-to-evict-annotation-to-elasticsearch-kibana-pods-for-k8s-cluster-autoscaling/302264 "2022-04-19T19:51:12Z")

</div>

I'm running ECK in Google Kubernetes Engine, and I've run into instances where the Cluster Autoscaler will choose not to remove an ES/KB Pod because it has local storage. One option is to add the "cluster-autoscaler.kub…

---

## [Kibana not recognizing fleet server in apm example](https://discuss.elastic.co/t/kibana-not-recognizing-fleet-server-in-apm-example/301806)

<div class="topic-metadata">

**Author:** [@Arnatious](https://discuss.elastic.co/u/Arnatious)\
**Replies:** 2\
**Last updated:** [April 19, 2022, 5:40pm UTC](https://discuss.elastic.co/t/kibana-not-recognizing-fleet-server-in-apm-example/301806 "2022-04-19T17:40:12Z")

</div>

I'm attempting to spin up a ECK deployment using the fleet-apm config example at cloud-on-k8s/fleet-apm-integration.yaml at main · elastic/cloud-on-k8s · GitHub . The only change I've made is changing the count of Elasti…

---

## [Error: fail to enroll: fail to execute request to fleet-server: status code: 400, fleet-server returned an error: BadRequest](https://discuss.elastic.co/t/error-fail-to-enroll-fail-to-execute-request-to-fleet-server-status-code-400-fleet-server-returned-an-error-badrequest/302402)

<div class="topic-metadata">

**Author:** [@tirelibirefe](https://discuss.elastic.co/u/tirelibirefe)\
**Replies:** 1\
**Last updated:** [April 19, 2022, 1:04pm UTC](https://discuss.elastic.co/t/error-fail-to-enroll-fail-to-execute-request-to-fleet-server-status-code-400-fleet-server-returned-an-error-badrequest/302402 "2022-04-19T13:04:11Z")

</div>

Hello, I am not able to run Fleet on Kubernetes. Here is my config: apiVersion: agent.k8s.elastic.co/v1alpha1 kind: Agent metadata: name: $FLEETSERVERNAME namespace: $NAMESPACE spec: version: 8.1.2 mode: fleet…

---

## [ECK operator podMonitor grafana dashboard](https://discuss.elastic.co/t/eck-operator-podmonitor-grafana-dashboard/301708)

<div class="topic-metadata">

**Author:** [@huntkalio](https://discuss.elastic.co/u/huntkalio)\
**Replies:** 1\
**Last updated:** [April 19, 2022, 12:18pm UTC](https://discuss.elastic.co/t/eck-operator-podmonitor-grafana-dashboard/301708 "2022-04-19T12:18:36Z")

</div>

Does ECK operator podmonitor have a default grafana dashboard config file to monitor elastic-operator in grafana? And would you add it to GitHub - elastic/cloud-on-k8s: Elastic Cloud on Kubernetes ?

---

## [ECE cant connect to my instances](https://discuss.elastic.co/t/ece-cant-connect-to-my-instances/302579)

<div class="topic-metadata">

**Author:** [@joman\_alles\_goed](https://discuss.elastic.co/u/joman_alles_goed)\
**Replies:** 0\
**Last updated:** [April 17, 2022, 6:38pm UTC](https://discuss.elastic.co/t/ece-cant-connect-to-my-instances/302579 "2022-04-17T18:38:20Z")

</div>

Hello everyone, Recently i have done a ECE installation on my ubuntu machine. The installation is succesfully done i can reach the cloud UI and log in as a admin. After that i started a deployment which also is a succes…

---

## [Kibana keeps restarting with no error](https://discuss.elastic.co/t/kibana-keeps-restarting-with-no-error/301868)

<div class="topic-metadata">

**Author:** [@radw](https://discuss.elastic.co/u/radw)\
**Replies:** 10\
**Last updated:** [April 14, 2022, 1:35pm UTC](https://discuss.elastic.co/t/kibana-keeps-restarting-with-no-error/301868 "2022-04-14T13:35:01Z")

</div>

Hi all. I've deployed an EK stack on GKE, with operator 1.9.1, but my kibana pod keeps restarting. The only pertinent log which I've been able to extract from kibana's pods is this: rpc error: code = NotFound desc = a…

---

## [Monitoring a dedicated Monitoring Instance on ECK](https://discuss.elastic.co/t/monitoring-a-dedicated-monitoring-instance-on-eck/302318)

<div class="topic-metadata">

**Author:** [@mag-mkorn](https://discuss.elastic.co/u/mag-mkorn)\
**Replies:** 2\
**Last updated:** [April 14, 2022, 7:24am UTC](https://discuss.elastic.co/t/monitoring-a-dedicated-monitoring-instance-on-eck/302318 "2022-04-14T07:24:17Z")

</div>

Hi Folks, with spec.monitoring ECK provides a very nice way to enable monitoring and ship data to a dedicated monitoring instance. However, you can not configure an instance to send the data to itself (stated here). So…

---

## [Assign clusters to another ece deployment](https://discuss.elastic.co/t/assign-clusters-to-another-ece-deployment/302150)

<div class="topic-metadata">

**Author:** [@Soren\_vdc](https://discuss.elastic.co/u/Soren_vdc)\
**Replies:** 0\
**Last updated:** [April 11, 2022, 7:02pm UTC](https://discuss.elastic.co/t/assign-clusters-to-another-ece-deployment/302150 "2022-04-11T19:02:47Z")

</div>

Hi We had different ECE deployments for production and non prod. We want to migrate new to 1 ECE zone with all the prod and non prod clusters. How can i migrate all the clusters from the non prod to prod? Br Soren

---

## [Not able to create elasticsearch on Azure aks](https://discuss.elastic.co/t/not-able-to-create-elasticsearch-on-azure-aks/302057)

<div class="topic-metadata">

**Author:** [@Srinivas\_RK](https://discuss.elastic.co/u/Srinivas_RK)\
**Replies:** 2\
**Last updated:** [April 11, 2022, 10:30am UTC](https://discuss.elastic.co/t/not-able-to-create-elasticsearch-on-azure-aks/302057 "2022-04-11T10:30:26Z")

</div>

Im trying to create Elasticsearch on azure Kubernetes service (v 1.20.13) using eck version (1.8.0) here is my kubernetes deployment script apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elasticsearch metadata: …

---

## [Disable apm-token, or add custom annotations to it?](https://discuss.elastic.co/t/disable-apm-token-or-add-custom-annotations-to-it/301981)

<div class="topic-metadata">

**Author:** [@fzyzcjy](https://discuss.elastic.co/u/fzyzcjy)\
**Replies:** 1\
**Last updated:** [April 11, 2022, 7:17am UTC](https://discuss.elastic.co/t/disable-apm-token-or-add-custom-annotations-to-it/301981 "2022-04-11T07:17:45Z")

</div>

Hi thanks for ECK! I have a elastic instance in namespace A, but have a spring app that uses elastic apm in namespace B. The problem is, k8s Secret cannot be shared across namespaces, but we need the apm-token Secret to …

---

## [Increase Virtual Memory for Elasticsearch on GKE with cloud build](https://discuss.elastic.co/t/increase-virtual-memory-for-elasticsearch-on-gke-with-cloud-build/301775)

<div class="topic-metadata">

**Author:** [@danskiyq](https://discuss.elastic.co/u/danskiyq)\
**Replies:** 3\
**Last updated:** [April 6, 2022, 4:17pm UTC](https://discuss.elastic.co/t/increase-virtual-memory-for-elasticsearch-on-gke-with-cloud-build/301775 "2022-04-06T16:17:38Z")

</div>

I have created multi-node cluster on GKE and I was using this shell script for fixing the virtual memory on nodes Set vm.max\_map\_count=262144 on the nodes of a GKE cluster #k8s · GitHub. I want it to be executed in my cl…

---

## [Fix for CVE-2021-27568 in 8.1.2](https://discuss.elastic.co/t/fix-for-cve-2021-27568-in-8-1-2/301417)

<div class="topic-metadata">

**Author:** [@Fleming7612](https://discuss.elastic.co/u/Fleming7612)\
**Replies:** 1\
**Last updated:** [April 5, 2022, 12:06pm UTC](https://discuss.elastic.co/t/fix-for-cve-2021-27568-in-8-1-2/301417 "2022-04-05T12:06:01Z")

</div>

Hi there, There is a critical vulnerability CVE-2021-27568 found in Elasticsearch 8.1.2 image from docker hub. Any suggestion we can fix this issue? Thank you very much

---

## [Delete temporary storage and cookies upon session termination](https://discuss.elastic.co/t/delete-temporary-storage-and-cookies-upon-session-termination/300974)

<div class="topic-metadata">

**Author:** [@dkaflowitz](https://discuss.elastic.co/u/dkaflowitz)\
**Replies:** 4\
**Last updated:** [March 29, 2022, 3:30pm UTC](https://discuss.elastic.co/t/delete-temporary-storage-and-cookies-upon-session-termination/300974 "2022-03-29T15:30:00Z")

</div>

Can Elasticsearch be configured to delete temporary storage and cookies upon session termination? If so, is it documented in anywhere?

---

## [How to create an automated solution for Instance Migration in the case of Allocator Faliures?](https://discuss.elastic.co/t/how-to-create-an-automated-solution-for-instance-migration-in-the-case-of-allocator-faliures/300369)

<div class="topic-metadata">

**Author:** [@Apprentice](https://discuss.elastic.co/u/Apprentice)\
**Replies:** 18\
**Last updated:** [March 29, 2022, 1:34pm UTC](https://discuss.elastic.co/t/how-to-create-an-automated-solution-for-instance-migration-in-the-case-of-allocator-faliures/300369 "2022-03-29T13:34:27Z")

</div>

I've found this for the manual method: Move nodes or instances from allocators | Elastic Cloud Enterprise Reference \[3.1\] | Elastic I looked at the APIs here but couldn't find anything relevant to my situation. I'm new…

---

## [Load Balancers & deployment endpoints](https://discuss.elastic.co/t/load-balancers-deployment-endpoints/300893)

<div class="topic-metadata">

**Author:** [@Chuck\_Reynolds](https://discuss.elastic.co/u/Chuck_Reynolds)\
**Replies:** 0\
**Last updated:** [March 28, 2022, 8:13pm UTC](https://discuss.elastic.co/t/load-balancers-deployment-endpoints/300893 "2022-03-28T20:13:51Z")

</div>

I'm currently doing a POC of ECE for a group in my company but I can't seem to get past how one configures a load balancer to talk to the Elasticsearch deplyment endpoint. I've create one load balancer that points the t…

---

## [How do you figure out what endpoint to query for a given API reference definition?](https://discuss.elastic.co/t/how-do-you-figure-out-what-endpoint-to-query-for-a-given-api-reference-definition/300627)

<div class="topic-metadata">

**Author:** [@Apprentice](https://discuss.elastic.co/u/Apprentice)\
**Replies:** 2\
**Last updated:** [March 28, 2022, 4:46pm UTC](https://discuss.elastic.co/t/how-do-you-figure-out-what-endpoint-to-query-for-a-given-api-reference-definition/300627 "2022-03-28T16:46:45Z")

</div>

I want to monitor allocators and move instances using those features of the API. how do I go about figuring our what endpoints to query? Could someone point me to how I would go about querying/setting those particular v…

---

## [\[8.1\] Fleet server not registered using ECK configuration from docs](https://discuss.elastic.co/t/8-1-fleet-server-not-registered-using-eck-configuration-from-docs/300493)

<div class="topic-metadata">

**Author:** [@Piotr\_Nowacki](https://discuss.elastic.co/u/Piotr_Nowacki)\
**Replies:** 6\
**Last updated:** [March 28, 2022, 9:45am UTC](https://discuss.elastic.co/t/8-1-fleet-server-not-registered-using-eck-configuration-from-docs/300493 "2022-03-28T09:45:44Z")

</div>

Starting a new fleet-managed instance as described in the documentation: configuration: cat \<\<EOF | kubectl apply -f - apiVersion: agent.k8s.elastic.co/v1alpha1 kind: Agent metadata: name: fleet-server-quickstart …

---

## [My performance won't scale with the cluster](https://discuss.elastic.co/t/my-performance-wont-scale-with-the-cluster/299954)

<div class="topic-metadata">

**Author:** [@martward](https://discuss.elastic.co/u/martward)\
**Replies:** 3\
**Last updated:** [March 18, 2022, 11:07am UTC](https://discuss.elastic.co/t/my-performance-wont-scale-with-the-cluster/299954 "2022-03-18T11:07:47Z")

</div>

Hi all, I'm trying to get my cluster to scale so I can handle more requests. I used to have 2 ES nodes on 1 K8s nodes and 2 indexes with 2 shards and 1 replicas. I tried increasing the number of ES nodes to 4 and incre…

---

## [Unable to configure OIDC using the trail licence with azure AD](https://discuss.elastic.co/t/unable-to-configure-oidc-using-the-trail-licence-with-azure-ad/297746)

<div class="topic-metadata">

**Author:** [@susmithabadam1609](https://discuss.elastic.co/u/susmithabadam1609)\
**Replies:** 7\
**Last updated:** [March 17, 2022, 10:38am UTC](https://discuss.elastic.co/t/unable-to-configure-oidc-using-the-trail-licence-with-azure-ad/297746 "2022-03-17T10:38:06Z")

</div>

Hi Team I have installed ECK operator with trail licence to test OIDC with azure AD in EKS cluster. I have configured OIDC by following the below document: but I'm facing the below issue Status of trail licence: …

---

## [Nofile -\> limit for open file under docker container for elasticsearch user](https://discuss.elastic.co/t/nofile-limit-for-open-file-under-docker-container-for-elasticsearch-user/299764)

<div class="topic-metadata">

**Author:** [@INS](https://discuss.elastic.co/u/INS)\
**Replies:** 2\
**Last updated:** [March 15, 2022, 6:51pm UTC](https://discuss.elastic.co/t/nofile-limit-for-open-file-under-docker-container-for-elasticsearch-user/299764 "2022-03-15T18:51:46Z")

</div>

Hi I read this post https://discuss.elastic.co/t/docs-nofile-or-nproc/142049/2 regarding construct for nofile vs nproc. Let me describe my case I've provisioned by docker compose service for elasticsearch: ulimits: …

---

## [Add user role in ECE or revoke access on "client"](https://discuss.elastic.co/t/add-user-role-in-ece-or-revoke-access-on-client/299705)

<div class="topic-metadata">

**Author:** [@stobbe99](https://discuss.elastic.co/u/stobbe99)\
**Replies:** 2\
**Last updated:** [March 15, 2022, 11:50am UTC](https://discuss.elastic.co/t/add-user-role-in-ece-or-revoke-access-on-client/299705 "2022-03-15T11:50:57Z")

</div>

Hello, Is is possible to add additional roles in ECE and is it possible to revoke the ECE accounts on created environments. As a use case, from ECE we create environments for different customers. There are customers wh…

---

## [Secret Management](https://discuss.elastic.co/t/secret-management/296171)

<div class="topic-metadata">

**Author:** [@Vishnu\_Kadavarath\_Vi](https://discuss.elastic.co/u/Vishnu_Kadavarath_Vi)\
**Replies:** 4\
**Last updated:** [March 15, 2022, 8:06am UTC](https://discuss.elastic.co/t/secret-management/296171 "2022-03-15T08:06:13Z")

</div>

HI guys, I wanted to know if there is any way of adding custom annotations to APM/Elasticsearch secrets in ECK. I.E adding reflector annotations to APM/Elasticsearch certs and APM/Elasticsearch user-token. So that it c…

---

## [Elastic Agent not retrieving kube-state-metrics](https://discuss.elastic.co/t/elastic-agent-not-retrieving-kube-state-metrics/299563)

<div class="topic-metadata">

**Author:** [@mkstephenson](https://discuss.elastic.co/u/mkstephenson)\
**Replies:** 1\
**Last updated:** [March 14, 2022, 10:13pm UTC](https://discuss.elastic.co/t/elastic-agent-not-retrieving-kube-state-metrics/299563 "2022-03-14T22:13:08Z")

</div>

I am attempting to set up an Elastic stack with ECK on k3s and getting it to monitor the k3s cluster itself using kube-state-metrics. I installed the ECK operator using the official helm chart, same for the kube-state-me…

---

## [Question about the operator clientConfig caBundle of webhooks](https://discuss.elastic.co/t/question-about-the-operator-clientconfig-cabundle-of-webhooks/299114)

<div class="topic-metadata">

**Author:** [@Fares\_Oueslati](https://discuss.elastic.co/u/Fares_Oueslati)\
**Replies:** 2\
**Last updated:** [March 12, 2022, 10:41am UTC](https://discuss.elastic.co/t/question-about-the-operator-clientconfig-cabundle-of-webhooks/299114 "2022-03-12T10:41:25Z")

</div>

Hello! I'm trying to update a manifest of a ValidatingWebhookConfiguration deployed with our elastic operator. More precisely I want to update the caBundle field in the clientConfig webhooks. I can see that a dummy va…

---

## [Not able to create ES cluster with ECK1.9.1](https://discuss.elastic.co/t/not-able-to-create-es-cluster-with-eck1-9-1/299206)

<div class="topic-metadata">

**Author:** [@NK2812](https://discuss.elastic.co/u/NK2812)\
**Replies:** 2\
**Last updated:** [March 11, 2022, 4:22am UTC](https://discuss.elastic.co/t/not-able-to-create-es-cluster-with-eck1-9-1/299206 "2022-03-11T04:22:15Z")

</div>

Hi Team, We trying to create ES-7.16.3 version cluster with ECK 1.9 but ECK is not creating the ES cluster. unfortunately I do not see any errors also in the eck logs. I tried to create the es cluster using below confi…

---

## [ECK helm chart](https://discuss.elastic.co/t/eck-helm-chart/296675)

<div class="topic-metadata">

**Author:** [@rathu\_buwa](https://discuss.elastic.co/u/rathu_buwa)\
**Replies:** 3\
**Last updated:** [March 9, 2022, 8:04pm UTC](https://discuss.elastic.co/t/eck-helm-chart/296675 "2022-03-09T20:04:52Z")

</div>

How do we find ECK helm chart and how do we modify that cart?

---

## [Pods failing because of an environment variable](https://discuss.elastic.co/t/pods-failing-because-of-an-environment-variable/298640)

<div class="topic-metadata">

**Author:** [@pkaramol](https://discuss.elastic.co/u/pkaramol)\
**Replies:** 3\
**Last updated:** [March 3, 2022, 2:25pm UTC](https://discuss.elastic.co/t/pods-failing-because-of-an-environment-variable/298640 "2022-03-03T14:25:51Z")

</div>

I am spinning up an ECK-based cluster. I haven't set any secureSettings but I had forgotten and set an environment variable named gcs.client.default.credentials\_file The pod fails to start with this error "Caused by: j…

---

## [ELK as a service without beats in Kubernetes](https://discuss.elastic.co/t/elk-as-a-service-without-beats-in-kubernetes/298732)

<div class="topic-metadata">

**Author:** [@wcpoon](https://discuss.elastic.co/u/wcpoon)\
**Replies:** 0\
**Last updated:** [March 3, 2022, 11:34am UTC](https://discuss.elastic.co/t/elk-as-a-service-without-beats-in-kubernetes/298732 "2022-03-03T11:34:42Z")

</div>

I want to build ELK as a service in kubernetes. How to configure logstash to handle external syslog data into the ELK stack in kubernetes? Can I do it without using beats? Anyone can help?

[Previous page](https://discuss.elastic.co/c/orchestration/85.md?page=17)

[Next page](https://discuss.elastic.co/c/orchestration/85.md?page=19)
