# Elastic Orchestration

**URL:** https://discuss.elastic.co/c/orchestration/85.md?page=22

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 23

---

## [ECE fails even if the plan shows success](https://discuss.elastic.co/t/ece-fails-even-if-the-plan-shows-success/284389)

<div class="topic-metadata">

**Author:** [@florinsfetea](https://discuss.elastic.co/u/florinsfetea)\
**Replies:** 0\
**Last updated:** [September 16, 2021, 11:54am UTC](https://discuss.elastic.co/t/ece-fails-even-if-the-plan-shows-success/284389 "2021-09-16T11:54:47Z")

</div>

Was just playing with the ECE and saw that every time that I try to use frozen data tiers is not working: Even worse my plan seems to be successful but that is wrong. Plan successful 2021-09-16T11:48:34.715Z 2021-09-…

---

## [Injecting a namespace into helm template](https://discuss.elastic.co/t/injecting-a-namespace-into-helm-template/284230)

<div class="topic-metadata">

**Author:** [@AndreyL](https://discuss.elastic.co/u/AndreyL)\
**Replies:** 1\
**Last updated:** [September 15, 2021, 9:42am UTC](https://discuss.elastic.co/t/injecting-a-namespace-into-helm-template/284230 "2021-09-15T09:42:19Z")

</div>

Our Kubernetes environment is managed by Nirmata, which uses gitops for application deployments. It pulls a yaml file and creates the objects. I use the official Elasticsearch helm chart (https://github.com/elastic/helm…

---

## [Anonymous user config](https://discuss.elastic.co/t/anonymous-user-config/284037)

<div class="topic-metadata">

**Author:** [@imarkvisser](https://discuss.elastic.co/u/imarkvisser)\
**Replies:** 1\
**Last updated:** [September 13, 2021, 11:22am UTC](https://discuss.elastic.co/t/anonymous-user-config/284037 "2021-09-13T11:22:22Z")

</div>

Hi there, We are currently running ECK with an anonymous user for users to log in with, which looks like; kibana: enabled: true name: foo version: 7.11.2 http: image: count: 1 config: xpack.security.a…

---

## [Replacing cluster level objects (e.g. ClusterRole)](https://discuss.elastic.co/t/replacing-cluster-level-objects-e-g-clusterrole/283986)

<div class="topic-metadata">

**Author:** [@AndreyL](https://discuss.elastic.co/u/AndreyL)\
**Replies:** 1\
**Last updated:** [September 13, 2021, 7:01am UTC](https://discuss.elastic.co/t/replacing-cluster-level-objects-e-g-clusterrole/283986 "2021-09-13T07:01:27Z")

</div>

I want to deploy ECK to our internal Kubernetes cluster. The issue I ran into is that ECK uses cluster level objects like ClusterRole, and I am not able to deploy those - we use Nirmata for cluster management, and each a…

---

## [Location of Proxy certificates](https://discuss.elastic.co/t/location-of-proxy-certificates/283916)

<div class="topic-metadata">

**Author:** [@netjammr](https://discuss.elastic.co/u/netjammr)\
**Replies:** 0\
**Last updated:** [September 10, 2021, 8:16pm UTC](https://discuss.elastic.co/t/location-of-proxy-certificates/283916 "2021-09-10T20:16:34Z")

</div>

When uploading a wildcard certificate on the Settings page under TLS certificates, I understand that the proxies use that certificate to secure communication to the deployments. However, where is that wildcard certificat…

---

## [ECE Self-Hosted Network Diagram Questions](https://discuss.elastic.co/t/ece-self-hosted-network-diagram-questions/283804)

<div class="topic-metadata">

**Author:** [@hodops](https://discuss.elastic.co/u/hodops)\
**Replies:** 4\
**Last updated:** [September 9, 2021, 7:05pm UTC](https://discuss.elastic.co/t/ece-self-hosted-network-diagram-questions/283804 "2021-09-09T19:05:16Z")

</div>

A lot of the finer details of the director(and ECE in general) seem to be obfuscated from the administrators/users likely by design for simplicity. However for compliance purposes I need to be able to create traffic flo…

---

## [How can i stop a cluster on ECK](https://discuss.elastic.co/t/how-can-i-stop-a-cluster-on-eck/282974)

<div class="topic-metadata">

**Author:** [@w\_Aaron](https://discuss.elastic.co/u/w_Aaron)\
**Replies:** 4\
**Last updated:** [September 8, 2021, 10:12am UTC](https://discuss.elastic.co/t/how-can-i-stop-a-cluster-on-eck/282974 "2021-09-08T10:12:02Z")

</div>

I changed the cluster yaml file nodeSet.config.count value to 0 In my cluster,When i kubectl describe es xxxx\_es\_id ,the logs info is:"es26f861-fa5d-410a-acb1-b9281f6814ae" is invalid: spec.nodeSets: Required value: Elas…

---

## [ECK clusters and client sniffing](https://discuss.elastic.co/t/eck-clusters-and-client-sniffing/244972)

<div class="topic-metadata">

**Author:** [@Presence](https://discuss.elastic.co/u/Presence)\
**Replies:** 2\
**Last updated:** [September 7, 2021, 8:00pm UTC](https://discuss.elastic.co/t/eck-clusters-and-client-sniffing/244972 "2021-09-07T20:00:31Z")

</div>

It seems difficult to set up an ECK ElasticSearch cluster where client sniffing works. Does anybody have any suggestions on best approaches here? Our clusters are currently on AWS EKS in 3 availability zones behind a sin…

---

## [ECK Install repository-s3 plugin](https://discuss.elastic.co/t/eck-install-repository-s3-plugin/283514)

<div class="topic-metadata">

**Author:** [@Fleming7612](https://discuss.elastic.co/u/Fleming7612)\
**Replies:** 1\
**Last updated:** [September 7, 2021, 10:30am UTC](https://discuss.elastic.co/t/eck-install-repository-s3-plugin/283514 "2021-09-07T10:30:38Z")

</div>

Hi there, I'd downloaded repository-s3-7.12.jar but i don't know how to install it. Any suggestion would be appreciated. Best wishes

---

## [ECK Fleet startup failure on ECK on Cloud](https://discuss.elastic.co/t/eck-fleet-startup-failure-on-eck-on-cloud/281700)

<div class="topic-metadata">

**Author:** [@vaibhavsw](https://discuss.elastic.co/u/vaibhavsw)\
**Replies:** 9\
**Last updated:** [September 2, 2021, 10:27am UTC](https://discuss.elastic.co/t/eck-fleet-startup-failure-on-eck-on-cloud/281700 "2021-09-02T10:27:20Z")

</div>

I followed the latest documentation to start a fleet server on Kubernetes, though both Elastic Agent and Fleet Server are throwing below error. cp: cannot stat '/mnt/elastic-internal/elasticsearch-association/vulcan/ela…

---

## [Snapshot in on premises K8S](https://discuss.elastic.co/t/snapshot-in-on-premises-k8s/282861)

<div class="topic-metadata">

**Author:** [@Fleming7612](https://discuss.elastic.co/u/Fleming7612)\
**Replies:** 3\
**Last updated:** [August 31, 2021, 5:02am UTC](https://discuss.elastic.co/t/snapshot-in-on-premises-k8s/282861 "2021-08-31T05:02:02Z")

</div>

Hi there, We had setup a elasticsearch cluster by ECK in on-premises k8s . Cause we cannot leverage cloud service outside our company for elasticsearch snapshot, any way we can make snapshot for index backup. Any sugge…

---

## [Error response from daemon: Get https://docker.elastic.co/v2/: x509: certificate signed by unknown authority](https://discuss.elastic.co/t/error-response-from-daemon-get-https-docker-elastic-co-v2-x509-certificate-signed-by-unknown-authority/281754)

<div class="topic-metadata">

**Author:** [@Benli](https://discuss.elastic.co/u/Benli)\
**Replies:** 2\
**Last updated:** [August 18, 2021, 11:23pm UTC](https://discuss.elastic.co/t/error-response-from-daemon-get-https-docker-elastic-co-v2-x509-certificate-signed-by-unknown-authority/281754 "2021-08-18T23:23:26Z")

</div>

// ISSUE // From my test VM, pull image from elastic docker registry failed, returning "x509: certificate signed by unknown authority" # docker pull docker.elastic.co/elasticsearch/elasticsearch:7.14.0 Error response f…

---

## [Ingress for ECK Kibana](https://discuss.elastic.co/t/ingress-for-eck-kibana/281734)

<div class="topic-metadata">

**Author:** [@telapo](https://discuss.elastic.co/u/telapo)\
**Replies:** 2\
**Last updated:** [August 18, 2021, 2:47pm UTC](https://discuss.elastic.co/t/ingress-for-eck-kibana/281734 "2021-08-18T14:47:35Z")

</div>

Hi, I have followed the documentation to deploy ECK on Kubernetes (local testing on docker for mac), and everything is working fine, elastic is up and running and Kibana is connected to it. I can port forward it, and I a…

---

## [Single master node cluster dies when master node dies](https://discuss.elastic.co/t/single-master-node-cluster-dies-when-master-node-dies/281559)

<div class="topic-metadata">

**Author:** [@iojas](https://discuss.elastic.co/u/iojas)\
**Replies:** 4\
**Last updated:** [August 17, 2021, 11:05pm UTC](https://discuss.elastic.co/t/single-master-node-cluster-dies-when-master-node-dies/281559 "2021-08-17T23:05:41Z")

</div>

I am using ECK to deploy an ES cluster. my setup has 1 master node and 3 data nodes. If for some reason master nodes dies it comes back up (thanks to statefulsets in kubernetes), but associates itself with a different cl…

---

## [Filebeat not connecting to elasticsearch cluster running with ECK](https://discuss.elastic.co/t/filebeat-not-connecting-to-elasticsearch-cluster-running-with-eck/278183)

<div class="topic-metadata">

**Author:** [@aksh\_18](https://discuss.elastic.co/u/aksh_18)\
**Replies:** 2\
**Last updated:** [August 17, 2021, 8:22am UTC](https://discuss.elastic.co/t/filebeat-not-connecting-to-elasticsearch-cluster-running-with-eck/278183 "2021-08-17T08:22:13Z")

</div>

Hi All, I have deployed ES cluster and kibana with the help of ECK. I am using filebeat-kubernetes.yaml to deploy filebeat. I deployed metricbeat with metricbeat-kubernetes.yaml and its running fine. But even after appl…

---

## [How to set log's remain time in eck?](https://discuss.elastic.co/t/how-to-set-logs-remain-time-in-eck/281623)

<div class="topic-metadata">

**Author:** [@111501](https://discuss.elastic.co/u/111501)\
**Replies:** 5\
**Last updated:** [August 17, 2021, 3:36am UTC](https://discuss.elastic.co/t/how-to-set-logs-remain-time-in-eck/281623 "2021-08-17T03:36:19Z")

</div>

I can't find this parameter in eck official document.

---

## [Elastic Cloud Enterprise: Run deployments on specific drives](https://discuss.elastic.co/t/elastic-cloud-enterprise-run-deployments-on-specific-drives/281579)

<div class="topic-metadata">

**Author:** [@Thomas\_Vaudry-Read](https://discuss.elastic.co/u/Thomas_Vaudry-Read)\
**Replies:** 1\
**Last updated:** [August 16, 2021, 5:33pm UTC](https://discuss.elastic.co/t/elastic-cloud-enterprise-run-deployments-on-specific-drives/281579 "2021-08-16T17:33:56Z")

</div>

I am working on setting up Elastic Cloud Enterprise in various different configurations, and my newest question is about how to specify which drive to store data in depending on the tier of the data. I have a machine wi…

---

## [Heap Size setting in k8s](https://discuss.elastic.co/t/heap-size-setting-in-k8s/281522)

<div class="topic-metadata">

**Author:** [@purushothamkdr143](https://discuss.elastic.co/u/purushothamkdr143)\
**Replies:** 3\
**Last updated:** [August 16, 2021, 12:32pm UTC](https://discuss.elastic.co/t/heap-size-setting-in-k8s/281522 "2021-08-16T12:32:42Z")

</div>

Hi All, I am trying to setup up elasticsearch(version 6.8.14) on k8s using eck operator. As per the documentation HEAP SIZE should be 50% of RAM. so If set ( requests, limits as 16GB) then ES\_JAVA\_OPTS should be 8 i.…

---

## [Elastic workloads deployed in GCP stopped working with connection timeout errors](https://discuss.elastic.co/t/elastic-workloads-deployed-in-gcp-stopped-working-with-connection-timeout-errors/280698)

<div class="topic-metadata">

**Author:** [@Amirtha\_Saminathan](https://discuss.elastic.co/u/Amirtha_Saminathan)\
**Replies:** 1\
**Last updated:** [August 12, 2021, 12:50pm UTC](https://discuss.elastic.co/t/elastic-workloads-deployed-in-gcp-stopped-working-with-connection-timeout-errors/280698 "2021-08-12T12:50:02Z")

</div>

The elastic search master, data and client have stopped communicating with each other and we see NodeDisconnectedException and connection timeout errors on 9300 port

---

## [Custom role via Secret not created](https://discuss.elastic.co/t/custom-role-via-secret-not-created/280581)

<div class="topic-metadata">

**Author:** [@pkaramol](https://discuss.elastic.co/u/pkaramol)\
**Replies:** 1\
**Last updated:** [August 12, 2021, 12:40pm UTC](https://discuss.elastic.co/t/custom-role-via-secret-not-created/280581 "2021-08-12T12:40:15Z")

</div>

I am trying to create custom roles declaratively in ECK (leveraging the file-based role management), therefore I rely on the usage of Secrets as per the instructions found here. I am defining the following Secret resour…

---

## [How to use Azure Storage plugin in ECK for Snapshot](https://discuss.elastic.co/t/how-to-use-azure-storage-plugin-in-eck-for-snapshot/237513)

<div class="topic-metadata">

**Author:** [@robinhood\_lko](https://discuss.elastic.co/u/robinhood_lko)\
**Replies:** 7\
**Last updated:** [August 11, 2021, 5:35pm UTC](https://discuss.elastic.co/t/how-to-use-azure-storage-plugin-in-eck-for-snapshot/237513 "2021-08-11T17:35:19Z")

</div>

Hi All, I have to configure snapshot in ECK Deployment. Elasticsearch documentation has given example for Google cloud. Please can anyone list the steps for that. I tried this - Created a file azure.client.default.cre…

---

## [Integrate docker registry to ECE for upgrade per deployment](https://discuss.elastic.co/t/integrate-docker-registry-to-ece-for-upgrade-per-deployment/281010)

<div class="topic-metadata">

**Author:** [@INS](https://discuss.elastic.co/u/INS)\
**Replies:** 0\
**Last updated:** [August 11, 2021, 8:01am UTC](https://discuss.elastic.co/t/integrate-docker-registry-to-ece-for-upgrade-per-deployment/281010 "2021-08-11T08:01:42Z")

</div>

Hi I wonder how I can integrate my private docker repository which was set up on the first host (with internet access) with ECE. If I wanted to upgrade particular deployment I need to load docker images on a few hosts …

---

## [ECK Fail to update status field of elasticsearch cluster on EKS 1.19](https://discuss.elastic.co/t/eck-fail-to-update-status-field-of-elasticsearch-cluster-on-eks-1-19/279246)

<div class="topic-metadata">

**Author:** [@Francesco\_Ciocchetti](https://discuss.elastic.co/u/Francesco_Ciocchetti)\
**Replies:** 3\
**Last updated:** [August 9, 2021, 3:51pm UTC](https://discuss.elastic.co/t/eck-fail-to-update-status-field-of-elasticsearch-cluster-on-eks-1-19/279246 "2021-08-09T15:51:40Z")

</div>

Hi, i am trying to get a cluster running on EKS 1.19 to sucessfully create an elasticsearchcluster using the ECK operator 1.6 the cluster gets created just fine when i create the elasticsearch resource and i can see the…

---

## [ECE Installation Issue](https://discuss.elastic.co/t/ece-installation-issue/280426)

<div class="topic-metadata">

**Author:** [@ddaloia](https://discuss.elastic.co/u/ddaloia)\
**Replies:** 2\
**Last updated:** [August 4, 2021, 2:26pm UTC](https://discuss.elastic.co/t/ece-installation-issue/280426 "2021-08-04T14:26:07Z")

</div>

Hi folks. Attempting to install ECE on prem using a medium installation guide. Was able to get the first 3 servers up and running no issue. When I attempt to install the 3 allocator servers, I am getting an error with th…

---

## [Elastic Cloud Trial Unable to remove greyed out Agent](https://discuss.elastic.co/t/elastic-cloud-trial-unable-to-remove-greyed-out-agent/279666)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 4\
**Last updated:** [August 3, 2021, 7:04pm UTC](https://discuss.elastic.co/t/elastic-cloud-trial-unable-to-remove-greyed-out-agent/279666 "2021-08-03T19:04:13Z")

</div>

Hello, Playing around with Elastic Cloud trial and noticed I have an Agent in Fleet which I cannot remove: The offline agent seems to remain unselectable and offline. How can I remove it? Grtz Willem

---

## [Remove labels (or ownership) from secret](https://discuss.elastic.co/t/remove-labels-or-ownership-from-secret/280293)

<div class="topic-metadata">

**Author:** [@pkaramol](https://discuss.elastic.co/u/pkaramol)\
**Replies:** 6\
**Last updated:** [August 3, 2021, 2:58pm UTC](https://discuss.elastic.co/t/remove-labels-or-ownership-from-secret/280293 "2021-08-03T14:58:34Z")

</div>

I want to edit / remove those labels from the elastic user secret eck.k8s.elastic.co/credentials: "true" eck.k8s.elastic.co/owner-kind: Elasticsearch eck.k8s.elastic.co/owner-name: myClusterName eck.k8s.…

---

## [ES\_JAVA\_OPTS is ignore or not set](https://discuss.elastic.co/t/es-java-opts-is-ignore-or-not-set/280190)

<div class="topic-metadata">

**Author:** [@purushothamkdr143](https://discuss.elastic.co/u/purushothamkdr143)\
**Replies:** 1\
**Last updated:** [August 3, 2021, 8:54am UTC](https://discuss.elastic.co/t/es-java-opts-is-ignore-or-not-set/280190 "2021-08-03T08:54:09Z")

</div>

Hi Team, I had setup elasticsearch cluster(version 6.8.14) using eck operator. I wanted to use more heapsize so I had set ES\_JAVA\_OPTS as "-Xms6g -Xmx6g". but it is taking the default heapsize which is 1g. Kindly help m…

---

## [SAML Authentication: Forbidden access to deployment](https://discuss.elastic.co/t/saml-authentication-forbidden-access-to-deployment/280096)

<div class="topic-metadata">

**Author:** [@Thomas\_Vaudry-Read](https://discuss.elastic.co/u/Thomas_Vaudry-Read)\
**Replies:** 7\
**Last updated:** [August 2, 2021, 8:39pm UTC](https://discuss.elastic.co/t/saml-authentication-forbidden-access-to-deployment/280096 "2021-08-02T20:39:46Z")

</div>

Hi, I have installed Elastic Cloud Enterprise on an AWS virtual machine, and have a ELK stack deployment configured. I have configured an authentication provider (SAML) to login to ECE. It is working correctly and prope…

---

## [ECE Setup - Failed to detect that a master was elected](https://discuss.elastic.co/t/ece-setup-failed-to-detect-that-a-master-was-elected/280041)

<div class="topic-metadata">

**Author:** [@Kishore](https://discuss.elastic.co/u/Kishore)\
**Replies:** 1\
**Last updated:** [July 30, 2021, 2:10pm UTC](https://discuss.elastic.co/t/ece-setup-failed-to-detect-that-a-master-was-elected/280041 "2021-07-30T14:10:47Z")

</div>

Hi Elastic Team, We have setup ECE, trying to move default clusters to Allocators. We are getting following error while moving the cluster from primary node. Plan change failed: \[ClusterFailure:MasterNotDetectedInTime…

---

## [Is it possible change the log level of ECK - Operator?](https://discuss.elastic.co/t/is-it-possible-change-the-log-level-of-eck-operator/279909)

<div class="topic-metadata">

**Author:** [@weydersantos](https://discuss.elastic.co/u/weydersantos)\
**Replies:** 1\
**Last updated:** [July 29, 2021, 10:13am UTC](https://discuss.elastic.co/t/is-it-possible-change-the-log-level-of-eck-operator/279909 "2021-07-29T10:13:08Z")

</div>

Hey guys! Simple and fast, is it possible change? Because when you follow the quickstart deployment (of course adjusting to your scenario) the pod of elastic-operador output a lot of logs of the type info...

[Previous page](https://discuss.elastic.co/c/orchestration/85.md?page=21)

[Next page](https://discuss.elastic.co/c/orchestration/85.md?page=23)
