# Elastic Orchestration

**URL:** https://discuss.elastic.co/c/orchestration/85.md?page=35

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 36

---

## [Customize ECK Elastic Search for Active Directory Realms?](https://discuss.elastic.co/t/customize-eck-elastic-search-for-active-directory-realms/232110)

<div class="topic-metadata">

**Author:** [@Adam\_Fink](https://discuss.elastic.co/u/Adam_Fink)\
**Replies:** 4\
**Last updated:** [May 14, 2020, 2:21pm UTC](https://discuss.elastic.co/t/customize-eck-elastic-search-for-active-directory-realms/232110 "2020-05-14T14:21:37Z")

</div>

Hi Team, I have a new Elastic Search ECK installation (Running ECK 1.1 and Elastic 7.6.2 ) and need to implement AD Realm security. Is this possible? I see where ECK supports Native and File Security Realms https://ww…

---

## [Is ECK ready / compatible with ElasticSearch & Kibana 7.7](https://discuss.elastic.co/t/is-eck-ready-compatible-with-elasticsearch-kibana-7-7/232566)

<div class="topic-metadata">

**Author:** [@raulgs](https://discuss.elastic.co/u/raulgs)\
**Replies:** 2\
**Last updated:** [May 14, 2020, 12:48pm UTC](https://discuss.elastic.co/t/is-eck-ready-compatible-with-elasticsearch-kibana-7-7/232566 "2020-05-14T12:48:01Z")

</div>

Hi guys, I would like to ask if ECK is ready / compatible with the newly released version 7.7 of ElasticSearch and Kibana? I was hoping to find this information here: https://www.elastic.co/guide/en/cloud-on-k8s/curren…

---

## [TransportError(503, 'cluster\_block\_exception', 'blocked by: \[SERVICE\_UNAVAILABLE/2/no master\];')](https://discuss.elastic.co/t/transporterror-503-cluster-block-exception-blocked-by-service-unavailable-2-no-master/232247)

<div class="topic-metadata">

**Author:** [@Cloud\_newbie](https://discuss.elastic.co/u/Cloud_newbie)\
**Replies:** 5\
**Last updated:** [May 13, 2020, 10:12am UTC](https://discuss.elastic.co/t/transporterror-503-cluster-block-exception-blocked-by-service-unavailable-2-no-master/232247 "2020-05-13T10:12:03Z")

</div>

Hello, I have deployed an ECK on GKE following the quickstart documentation and 3 nodes. The ES YAML file looks like this: cat \<\<EOF | kubectl apply -f - apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elasticsear…

---

## [Plugin installation with Istio enabled?](https://discuss.elastic.co/t/plugin-installation-with-istio-enabled/232368)

<div class="topic-metadata">

**Author:** [@Atreus-Technologies](https://discuss.elastic.co/u/Atreus-Technologies)\
**Replies:** 1\
**Last updated:** [May 13, 2020, 9:03am UTC](https://discuss.elastic.co/t/plugin-installation-with-istio-enabled/232368 "2020-05-13T09:03:36Z")

</div>

I am trying to get some plugins installed on my ECK cluster (v 1.1.0) using initContainers, e.g. - initContainers: - name: install-plugins command: - sh - -c - bin…

---

## [Timeout and failure in creating ECK in kubernetes version 1.14.4](https://discuss.elastic.co/t/timeout-and-failure-in-creating-eck-in-kubernetes-version-1-14-4/231122)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 7\
**Last updated:** [May 12, 2020, 5:05am UTC](https://discuss.elastic.co/t/timeout-and-failure-in-creating-eck-in-kubernetes-version-1-14-4/231122 "2020-05-12T05:05:02Z")

</div>

The same yaml can be created successfully under version 1.16.3 kubectl create -f test.yaml Error from server (Timeout): error when creating "test.yaml": Timeout: request did not complete within requested timeout 30s k…

---

## [Install ECE on premise and then use hydrid infrastructure](https://discuss.elastic.co/t/install-ece-on-premise-and-then-use-hydrid-infrastructure/231716)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 10\
**Last updated:** [May 11, 2020, 4:32pm UTC](https://discuss.elastic.co/t/install-ece-on-premise-and-then-use-hydrid-infrastructure/231716 "2020-05-11T16:32:57Z")

</div>

hi guys, I'm trying to explore this new functionality to understand if it could help me to decrease infrastructure costs (against bare-metal or virtual machines). I saw that I can install ECE on premise, so I can insta…

---

## [Clientset for Client-go](https://discuss.elastic.co/t/clientset-for-client-go/231795)

<div class="topic-metadata">

**Author:** [@ReeSilva](https://discuss.elastic.co/u/ReeSilva)\
**Replies:** 1\
**Last updated:** [May 11, 2020, 9:37am UTC](https://discuss.elastic.co/t/clientset-for-client-go/231795 "2020-05-11T09:37:35Z")

</div>

Hey guys, I'm trying to write a Terraform Provider to handle ECK resources (@ begin, ES and Kibana). Does the operator implements clientset to create a client using Kubernetes client-go? Or I have to create it myself usi…

---

## [How to avoid pod use all memory limits](https://discuss.elastic.co/t/how-to-avoid-pod-use-all-memory-limits/230642)

<div class="topic-metadata">

**Author:** [@levitative](https://discuss.elastic.co/u/levitative)\
**Replies:** 3\
**Last updated:** [May 7, 2020, 8:35pm UTC](https://discuss.elastic.co/t/how-to-avoid-pod-use-all-memory-limits/230642 "2020-05-07T20:35:18Z")

</div>

Elastic search always use all memory that I specify as limit to it, no mater how much I increase the limit and downgrade the mix/max heap size. The actual heap is using less than half of the max heap (2GB). The pod keep…

---

## [ECK and AD authentication for KIbana](https://discuss.elastic.co/t/eck-and-ad-authentication-for-kibana/225447)

<div class="topic-metadata">

**Author:** [@bigdamhero](https://discuss.elastic.co/u/bigdamhero)\
**Replies:** 4\
**Last updated:** [May 7, 2020, 10:39am UTC](https://discuss.elastic.co/t/eck-and-ad-authentication-for-kibana/225447 "2020-05-07T10:39:35Z")

</div>

Anyone got this working? I am not familiar enough to guess what the config that needs to be added to the containers should look like and where to put it. Any samples would be very welcome thank you.

---

## [Multiple elasticsearch-data Volumes](https://discuss.elastic.co/t/multiple-elasticsearch-data-volumes/230972)

<div class="topic-metadata">

**Author:** [@taseer94](https://discuss.elastic.co/u/taseer94)\
**Replies:** 2\
**Last updated:** [May 7, 2020, 9:57am UTC](https://discuss.elastic.co/t/multiple-elasticsearch-data-volumes/230972 "2020-05-07T09:57:47Z")

</div>

Hi everyone, I have 3 azure disks which I would like to have the cluster store data to. I want to have a 3 node cluster, each attached to a separate disk. My current config is as follows. However, all the 3 volumes get …

---

## [Install a kibana plugin on hosted Kibana (cloud.elastic.co)](https://discuss.elastic.co/t/install-a-kibana-plugin-on-hosted-kibana-cloud-elastic-co/231134)

<div class="topic-metadata">

**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\
**Replies:** 2\
**Last updated:** [May 6, 2020, 1:29pm UTC](https://discuss.elastic.co/t/install-a-kibana-plugin-on-hosted-kibana-cloud-elastic-co/231134 "2020-05-06T13:29:35Z")

</div>

hello, I've found few Kibana plugins, which I want to use, but couldn't find a way to install on my hosted Kibana. (cloud.elastic.co) for example: thanks!

---

## [How to safely do k8s node maintenance](https://discuss.elastic.co/t/how-to-safely-do-k8s-node-maintenance/230292)

<div class="topic-metadata">

**Author:** [@FingerLiu](https://discuss.elastic.co/u/FingerLiu)\
**Replies:** 2\
**Last updated:** [May 6, 2020, 9:22am UTC](https://discuss.elastic.co/t/how-to-safely-do-k8s-node-maintenance/230292 "2020-05-06T09:22:51Z")

</div>

In case we want to delete one k8s node, what should we do to safely delete/replace ES nodes on that k8s node. We are on bare metal cluster, and using local disk as storage class. From what I try, the following manual s…

---

## [Access Kibana through controller server](https://discuss.elastic.co/t/access-kibana-through-controller-server/230901)

<div class="topic-metadata">

**Author:** [@Cloud\_newbie](https://discuss.elastic.co/u/Cloud_newbie)\
**Replies:** 3\
**Last updated:** [May 6, 2020, 6:46am UTC](https://discuss.elastic.co/t/access-kibana-through-controller-server/230901 "2020-05-06T06:46:56Z")

</div>

I have deployed an ECK on GKE following the Quickstart ECK documentation. In order for the KIbana instance to be available, I have created a controller Ubuntu server and through that access the ECK cluster. I have alrea…

---

## [Filebeat configuration in ECE on-premises cluster does not grok the message field](https://discuss.elastic.co/t/filebeat-configuration-in-ece-on-premises-cluster-does-not-grok-the-message-field/231163)

<div class="topic-metadata">

**Author:** [@GeorgeGkinis](https://discuss.elastic.co/u/GeorgeGkinis)\
**Replies:** 4\
**Last updated:** [May 5, 2020, 4:08pm UTC](https://discuss.elastic.co/t/filebeat-configuration-in-ece-on-premises-cluster-does-not-grok-the-message-field/231163 "2020-05-05T16:08:14Z")

</div>

Hello, The ECE installation comes with a default logging-and-metrics cluster which is filled with data by filebeat, metricbeat and allocator-metricbeat. I see in kibana that the message field is not being grokked for v…

---

## [Backup logs](https://discuss.elastic.co/t/backup-logs/197069)

<div class="topic-metadata">

**Author:** [@mindsinthecloud](https://discuss.elastic.co/u/mindsinthecloud)\
**Replies:** 6\
**Last updated:** [May 4, 2020, 8:50am UTC](https://discuss.elastic.co/t/backup-logs/197069 "2020-05-04T08:50:54Z")

</div>

Hi there, I have set up the ECK operator on my k8s cluster on my local machines with 3 nodes and integrated with Fluent Bit for log shipping. May I ask how can I backup the logs? I understand that duplicating the data d…

---

## [Can't login with users created by FileRealm and secrets](https://discuss.elastic.co/t/cant-login-with-users-created-by-filerealm-and-secrets/229320)

<div class="topic-metadata">

**Author:** [@doctor](https://discuss.elastic.co/u/doctor)\
**Replies:** 7\
**Last updated:** [April 30, 2020, 2:31pm UTC](https://discuss.elastic.co/t/cant-login-with-users-created-by-filerealm-and-secrets/229320 "2020-04-30T14:31:41Z")

</div>

Hey, I'm trying to create a new user on ECK using secrets and FileRealm. I created the user like explained in the documentation: # create a folder with the 2 files mkdir filerealm touch filerealm/users filerealm/user…

---

## [Not able to bootstrap users in ECK after custom config](https://discuss.elastic.co/t/not-able-to-bootstrap-users-in-eck-after-custom-config/230138)

<div class="topic-metadata">

**Author:** [@taseer94](https://discuss.elastic.co/u/taseer94)\
**Replies:** 1\
**Last updated:** [April 28, 2020, 12:24pm UTC](https://discuss.elastic.co/t/not-able-to-bootstrap-users-in-eck-after-custom-config/230138 "2020-04-28T12:24:56Z")

</div>

Hi all, so I just got up and running with ECK in Kubernetes. For installation, I used all-in-one-1.0.1 and elasticsearch:7.6.2. However, I am getting the following error when I try to bootstrap the passwords. \[root@qui…

---

## [Eck pvc pending](https://discuss.elastic.co/t/eck-pvc-pending/229919)

<div class="topic-metadata">

**Author:** [@willes](https://discuss.elastic.co/u/willes)\
**Replies:** 6\
**Last updated:** [April 27, 2020, 9:29am UTC](https://discuss.elastic.co/t/eck-pvc-pending/229919 "2020-04-27T09:29:45Z")

</div>

instlal operator kubectl apply -f https://download.elastic.co/downloads/eck/1.0.1/all-in-one.yaml run elasticsearch cluster cat \<\<EOF | kubectl apply -f - apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elasticsearc…

---

## [Private RSA Key for Security Certificate Management?](https://discuss.elastic.co/t/private-rsa-key-for-security-certificate-management/228556)

<div class="topic-metadata">

**Author:** [@gfidler](https://discuss.elastic.co/u/gfidler)\
**Replies:** 1\
**Last updated:** [April 24, 2020, 3:24am UTC](https://discuss.elastic.co/t/private-rsa-key-for-security-certificate-management/228556 "2020-04-24T03:24:41Z")

</div>

I am trying to update the self-signed certificate with a real certificate from AWS. I retrieved the certificate chain from AWS with: aws acm get-certificate --certificate-arn \<ARN-HERE\> The response is JSON containing…

---

## [Enable RUM on APM](https://discuss.elastic.co/t/enable-rum-on-apm/229364)

<div class="topic-metadata">

**Author:** [@tsbayne](https://discuss.elastic.co/u/tsbayne)\
**Replies:** 2\
**Last updated:** [April 23, 2020, 10:25am UTC](https://discuss.elastic.co/t/enable-rum-on-apm/229364 "2020-04-23T10:25:40Z")

</div>

Probably an easy one here. I need to enable RUM in our APM deployment but it doesn't seem to be working. If I exec into the pod it actually doesn't look like any of my settings are set so I'm not even sure if I'm looki…

---

## [Elastic-operator-0 goes into CrashLoopbackOff possibly after underlying node restarted](https://discuss.elastic.co/t/elastic-operator-0-goes-into-crashloopbackoff-possibly-after-underlying-node-restarted/228181)

<div class="topic-metadata">

**Author:** [@dineshabbi](https://discuss.elastic.co/u/dineshabbi)\
**Replies:** 6\
**Last updated:** [April 22, 2020, 5:50am UTC](https://discuss.elastic.co/t/elastic-operator-0-goes-into-crashloopbackoff-possibly-after-underlying-node-restarted/228181 "2020-04-22T05:50:15Z")

</div>

I am running elastic-operator 1.0.0-beta1 and hitting following issue. image: docker.elastic.co/eck/eck-operator:1.0.0-beta1 ❯ kubectl get pods -n elasticsearch …

---

## [Communicating with ECK using your own certs results in a certificate error](https://discuss.elastic.co/t/communicating-with-eck-using-your-own-certs-results-in-a-certificate-error/224710)

<div class="topic-metadata">

**Author:** [@doctor](https://discuss.elastic.co/u/doctor)\
**Replies:** 6\
**Last updated:** [April 20, 2020, 10:38am UTC](https://discuss.elastic.co/t/communicating-with-eck-using-your-own-certs-results-in-a-certificate-error/224710 "2020-04-20T10:38:10Z")

</div>

Hey, I'm following the tutorial teaching how to set your own certificates. I installed the cert manager who created the quickstart-es-cert secret for me. $ k describe secret quickstart-es-cert Name: quickstart…

---

## [Disk resize with eck vs helm](https://discuss.elastic.co/t/disk-resize-with-eck-vs-helm/228689)

<div class="topic-metadata">

**Author:** [@deepak\_deore](https://discuss.elastic.co/u/deepak_deore)\
**Replies:** 1\
**Last updated:** [April 19, 2020, 7:14am UTC](https://discuss.elastic.co/t/disk-resize-with-eck-vs-helm/228689 "2020-04-19T07:14:33Z")

</div>

ECK is very easy to use so I chose it but it has one downside compared helm, I could do disk resize with some hack in helm installed ES. But with operator installed ES this isn't possible, because as soon as I delete th…

---

## [Reclaim persistent volume](https://discuss.elastic.co/t/reclaim-persistent-volume/228197)

<div class="topic-metadata">

**Author:** [@Nikolas\_Mousouros](https://discuss.elastic.co/u/Nikolas_Mousouros)\
**Replies:** 2\
**Last updated:** [April 17, 2020, 3:04pm UTC](https://discuss.elastic.co/t/reclaim-persistent-volume/228197 "2020-04-17T15:04:00Z")

</div>

I deleted my stateful set on openshift believing that I could reuse my persistent volume claim but it got deleted. On the bright side I think I still have this EBS volume on AWS so I added it again on openshift but when…

---

## [API call failure from IBM ACE server to Elasticsearch](https://discuss.elastic.co/t/api-call-failure-from-ibm-ace-server-to-elasticsearch/228150)

<div class="topic-metadata">

**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\
**Replies:** 5\
**Last updated:** [April 15, 2020, 6:20pm UTC](https://discuss.elastic.co/t/api-call-failure-from-ibm-ace-server-to-elasticsearch/228150 "2020-04-15T18:20:52Z")

</div>

ECE version 2.4 on-premise: I have a user that is trying to send IBM ACE logs to Elasticsearch with an API call. This call was working as of Feb 10, 2020 and then just stopped. The API call works from their local comp…

---

## [How do ECE Cloud UI Hot-Warm and Index Management Hot-Warm join up](https://discuss.elastic.co/t/how-do-ece-cloud-ui-hot-warm-and-index-management-hot-warm-join-up/227956)

<div class="topic-metadata">

**Author:** [@david.preston](https://discuss.elastic.co/u/david.preston)\
**Replies:** 8\
**Last updated:** [April 15, 2020, 5:13pm UTC](https://discuss.elastic.co/t/how-do-ece-cloud-ui-hot-warm-and-index-management-hot-warm-join-up/227956 "2020-04-15T17:13:39Z")

</div>

I've been working through the Elastic documentation, starting here: https://www.elastic.co/guide/en/cloud-enterprise/current/ece-configuring-ece-tag-allocators.html The guide walks through the setting up of Hot-Warm all…

---

## [Using the TransportClient with ECK](https://discuss.elastic.co/t/using-the-transportclient-with-eck/197767)

<div class="topic-metadata">

**Author:** [@akappler](https://discuss.elastic.co/u/akappler)\
**Replies:** 6\
**Last updated:** [April 14, 2020, 3:16pm UTC](https://discuss.elastic.co/t/using-the-transportclient-with-eck/197767 "2020-04-14T15:16:05Z")

</div>

We have a legacy application which uses the Java TransportClient to access the ES API on port 9300, which we would like to operate with the ES operator. It seems that the ES instance created by ECK only exposes the REST …

---

## [ECK not working with ISTIO](https://discuss.elastic.co/t/eck-not-working-with-istio/227522)

<div class="topic-metadata">

**Author:** [@ssurapan](https://discuss.elastic.co/u/ssurapan)\
**Replies:** 1\
**Last updated:** [April 14, 2020, 8:57am UTC](https://discuss.elastic.co/t/eck-not-working-with-istio/227522 "2020-04-14T08:57:31Z")

</div>

I am testing the ECK with istio service mesh. Used the documentation provided. It worked fine when istio is installed without istio CNI We are using istio 1.4.3 When istio CNI is installed, elastic components are not…

---

## [How to add certificates to java keystore](https://discuss.elastic.co/t/how-to-add-certificates-to-java-keystore/223546)

<div class="topic-metadata">

**Author:** [@bikkina\_mahesh](https://discuss.elastic.co/u/bikkina_mahesh)\
**Replies:** 4\
**Last updated:** [April 14, 2020, 8:30am UTC](https://discuss.elastic.co/t/how-to-add-certificates-to-java-keystore/223546 "2020-04-14T08:30:54Z")

</div>

I need to connect to S3 repo from elasticsearch to store snapshots. Our S3 endpoint has mutual ssl authentication. I have ca.crt, client.key, client.crt. How to add these certs to java keystore, so that I can connect …

---

## [Upgrade license In ECK to try some platinum features](https://discuss.elastic.co/t/upgrade-license-in-eck-to-try-some-platinum-features/227556)

<div class="topic-metadata">

**Author:** [@pingz](https://discuss.elastic.co/u/pingz)\
**Replies:** 1\
**Last updated:** [April 14, 2020, 8:25am UTC](https://discuss.elastic.co/t/upgrade-license-in-eck-to-try-some-platinum-features/227556 "2020-04-14T08:25:17Z")

</div>

I have a three node ECK running on AWS EKS. The ECK is exposed to external client outside of k8s through an AWS application load balancer using AWS certificate issued by AWS certificate manager. In my set up, I disabl…

[Previous page](https://discuss.elastic.co/c/orchestration/85.md?page=34)

[Next page](https://discuss.elastic.co/c/orchestration/85.md?page=36)
