# Elastic Orchestration

**URL:** https://discuss.elastic.co/c/orchestration/85.md?page=39

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 40

---

## [Custom URL for Elastic Search Service](https://discuss.elastic.co/t/custom-url-for-elastic-search-service/217686)

<div class="topic-metadata">

**Author:** [@AndresL](https://discuss.elastic.co/u/AndresL)\
**Replies:** 2\
**Last updated:** [February 3, 2020, 8:40pm UTC](https://discuss.elastic.co/t/custom-url-for-elastic-search-service/217686 "2020-02-03T20:40:10Z")

</div>

On elastic search service running on cloud, when will be possible to have another name for kibana? My current deployment is: https://DEPLOYMENT\_ID.westeurope.azure.elastic-cloud.com/ will be possible to have a subdom…

---

## [ECE - Certificate chain was invalid](https://discuss.elastic.co/t/ece-certificate-chain-was-invalid/217125)

<div class="topic-metadata">

**Author:** [@ntran](https://discuss.elastic.co/u/ntran)\
**Replies:** 4\
**Last updated:** [February 3, 2020, 7:50pm UTC](https://discuss.elastic.co/t/ece-certificate-chain-was-invalid/217125 "2020-02-03T19:50:15Z")

</div>

Hi all, I am getting this error message when uploading my proxy certificate into ECE: Certificate chain was invalid \[Invalid Entry: expected X.509 Certificate As I don't have certificates, I am unable to log into Kiba…

---

## [Small Baseline Installation - New Deployment](https://discuss.elastic.co/t/small-baseline-installation-new-deployment/217499)

<div class="topic-metadata">

**Author:** [@ntran](https://discuss.elastic.co/u/ntran)\
**Replies:** 1\
**Last updated:** [February 3, 2020, 7:30pm UTC](https://discuss.elastic.co/t/small-baseline-installation-new-deployment/217499 "2020-02-03T19:30:08Z")

</div>

Hi all, I have recently deployed a small baseline installation with 3.5TB of storage, 128 GB of ram and 16 CPU. Is there any best practice documentation on how I should create a deployment that shares equal resources a…

---

## [Possible problem with Elasticsearch readinessProbe?](https://discuss.elastic.co/t/possible-problem-with-elasticsearch-readinessprobe/217094)

<div class="topic-metadata">

**Author:** [@tadgh](https://discuss.elastic.co/u/tadgh)\
**Replies:** 3\
**Last updated:** [January 31, 2020, 4:33pm UTC](https://discuss.elastic.co/t/possible-problem-with-elasticsearch-readinessprobe/217094 "2020-01-31T16:33:52Z")

</div>

Hey all, I am trying to setup a google cloud Ingress object to route traffic to the Elasticsearch service in ECK, but it appears as though the Ingress object attempts the health check using the HTTP protocol, instead of …

---

## [Tuning refresh interval for eck cluster](https://discuss.elastic.co/t/tuning-refresh-interval-for-eck-cluster/217291)

<div class="topic-metadata">

**Author:** [@dineshabbi](https://discuss.elastic.co/u/dineshabbi)\
**Replies:** 1\
**Last updated:** [January 31, 2020, 7:34am UTC](https://discuss.elastic.co/t/tuning-refresh-interval-for-eck-cluster/217291 "2020-01-31T07:34:55Z")

</div>

How can I configure certain cluster/index settings from elasticsearch.yaml ? Say if I want to tune index.refresh\_interval ? Whats the default value used by the eck ?

---

## [Horizontal and vertical upgrade of eck cluster](https://discuss.elastic.co/t/horizontal-and-vertical-upgrade-of-eck-cluster/210309)

<div class="topic-metadata">

**Author:** [@dineshabbi](https://discuss.elastic.co/u/dineshabbi)\
**Replies:** 2\
**Last updated:** [January 31, 2020, 3:46am UTC](https://discuss.elastic.co/t/horizontal-and-vertical-upgrade-of-eck-cluster/210309 "2020-01-31T03:46:09Z")

</div>

As per the documentation, I tried doing upgrades of the cluster using some of the examples given in https://www.elastic.co/guide/en/cloud-on-k8s/current/k8s-orchestration.html a) Horizontal upgrade: I see a new service …

---

## [Unable to log in elastic using the non-default user's username and password](https://discuss.elastic.co/t/unable-to-log-in-elastic-using-the-non-default-users-username-and-password/216937)

<div class="topic-metadata">

**Author:** [@pingz](https://discuss.elastic.co/u/pingz)\
**Replies:** 3\
**Last updated:** [January 30, 2020, 10:27pm UTC](https://discuss.elastic.co/t/unable-to-log-in-elastic-using-the-non-default-users-username-and-password/216937 "2020-01-30T22:27:06Z")

</div>

I was able to successfully create a user 'test1' and assign it the superuser role. Execute rest api POST /\_security/user/test1?pretty { "password" : "test@1", "roles" : \[ "superuser"\], "full\_name" : "Test User", "…

---

## [ECE on RHEL 8.x](https://discuss.elastic.co/t/ece-on-rhel-8-x/217174)

<div class="topic-metadata">

**Author:** [@caiossouza](https://discuss.elastic.co/u/caiossouza)\
**Replies:** 1\
**Last updated:** [January 30, 2020, 6:55pm UTC](https://discuss.elastic.co/t/ece-on-rhel-8-x/217174 "2020-01-30T18:55:03Z")

</div>

Hi, I would like to confirm if we can run ECE on RHEL 8.x servers. Reading the Support Matrix (https://www.elastic.co/pt/support/matrix#matrix\_os) we can see RHEL 8.X is compatible with some recent components, like be…

---

## [Run elastic-operator with fewer permissions? Disable webhook?](https://discuss.elastic.co/t/run-elastic-operator-with-fewer-permissions-disable-webhook/217135)

<div class="topic-metadata">

**Author:** [@CoaxVex](https://discuss.elastic.co/u/CoaxVex)\
**Replies:** 1\
**Last updated:** [January 30, 2020, 9:31am UTC](https://discuss.elastic.co/t/run-elastic-operator-with-fewer-permissions-disable-webhook/217135 "2020-01-30T09:31:03Z")

</div>

The elastic-operator ClusterRole, which is deployed and granted when installing with the "all-in-one.yaml" method gives a lot of permissions on the cluster. So much even, you may as well be running the operator as cluste…

---

## [Kibana status is Red - security\_exception](https://discuss.elastic.co/t/kibana-status-is-red-security-exception/217021)

<div class="topic-metadata">

**Author:** [@Henrique\_Mauri](https://discuss.elastic.co/u/Henrique_Mauri)\
**Replies:** 8\
**Last updated:** [January 29, 2020, 7:18pm UTC](https://discuss.elastic.co/t/kibana-status-is-red-security-exception/217021 "2020-01-29T19:18:46Z")

</div>

Hello I'm having trouble opening my Kibana, the error is displayed: plugin: security@7.1.1 - \[security\_exception\] action \[cluster: admin / xpack / security / privilege / delete\] is unauthorized for user \[found-internal…

---

## [ECE IP Change](https://discuss.elastic.co/t/ece-ip-change/216561)

<div class="topic-metadata">

**Author:** [@ntran](https://discuss.elastic.co/u/ntran)\
**Replies:** 1\
**Last updated:** [January 27, 2020, 5:07pm UTC](https://discuss.elastic.co/t/ece-ip-change/216561 "2020-01-27T17:07:24Z")

</div>

Hi all, I have installed ECE on 3 machines, however, I had to move them to a new network and thus the IPs have changed. ECE is still trying to connect to the old IP addresses. Where do I go to change this? 2020.01.26 …

---

## [Elasticsearch state "Invalid" after trying to install plugin](https://discuss.elastic.co/t/elasticsearch-state-invalid-after-trying-to-install-plugin/216296)

<div class="topic-metadata">

**Author:** [@radw](https://discuss.elastic.co/u/radw)\
**Replies:** 2\
**Last updated:** [January 27, 2020, 12:30pm UTC](https://discuss.elastic.co/t/elasticsearch-state-invalid-after-trying-to-install-plugin/216296 "2020-01-27T12:30:42Z")

</div>

Hi folks! I did an ECK installation on GKE with v1beta1. After 1 month I've resized the PVs to accomodate the new storage needs. Everything went smooth and the PVs resized correctly and are shown in the monitoring secti…

---

## [Is there a prefered way to configure default number\_of\_replicas on ECK?](https://discuss.elastic.co/t/is-there-a-prefered-way-to-configure-default-number-of-replicas-on-eck/216553)

<div class="topic-metadata">

**Author:** [@vroad](https://discuss.elastic.co/u/vroad)\
**Replies:** 0\
**Last updated:** [January 26, 2020, 1:57am UTC](https://discuss.elastic.co/t/is-there-a-prefered-way-to-configure-default-number-of-replicas-on-eck/216553 "2020-01-26T01:57:30Z")

</div>

Just setting node count to 3 does not change number\_of\_replicas value for newly created indices. I'm wondering if there is a way to configure index template using CRD, so that I can change this value easily when creatin…

---

## [Picking up a configuration file change](https://discuss.elastic.co/t/picking-up-a-configuration-file-change/214219)

<div class="topic-metadata">

**Author:** [@JanKowalik](https://discuss.elastic.co/u/JanKowalik)\
**Replies:** 24\
**Last updated:** [January 24, 2020, 4:37pm UTC](https://discuss.elastic.co/t/picking-up-a-configuration-file-change/214219 "2020-01-24T16:37:01Z")

</div>

Hi, It seems that ECK does not pickup configuration changes. How do I make it pick it up? Do I restart the nodes? How can I do it via ECK? Thanks

---

## [Elastic ECE Dead master - Security Cluster Not available](https://discuss.elastic.co/t/elastic-ece-dead-master-security-cluster-not-available/216447)

<div class="topic-metadata">

**Author:** [@chadhanson](https://discuss.elastic.co/u/chadhanson)\
**Replies:** 1\
**Last updated:** [January 24, 2020, 4:19pm UTC](https://discuss.elastic.co/t/elastic-ece-dead-master-security-cluster-not-available/216447 "2020-01-24T16:19:25Z")

</div>

Our master tiebreaker node went offline and was not recoverable and the host has been destroyed. I have added a new master/tie breaker node and migrated the logging-metrics and admin-console-elasticserach clusters to the…

---

## [Active remote cluster in ECK](https://discuss.elastic.co/t/active-remote-cluster-in-eck/216287)

<div class="topic-metadata">

**Author:** [@Jdompablo](https://discuss.elastic.co/u/Jdompablo)\
**Replies:** 2\
**Last updated:** [January 24, 2020, 10:30am UTC](https://discuss.elastic.co/t/active-remote-cluster-in-eck/216287 "2020-01-24T10:30:08Z")

</div>

I am trying to add a remote cluster within a kibana deployed in kubernetes, but it asks me to enter the seed of the remote node. From what I see port 9300 is not exposed. How can this communication be done?

---

## [Curator on ECE 2.4.3](https://discuss.elastic.co/t/curator-on-ece-2-4-3/216117)

<div class="topic-metadata">

**Author:** [@balogan](https://discuss.elastic.co/u/balogan)\
**Replies:** 2\
**Last updated:** [January 23, 2020, 12:18pm UTC](https://discuss.elastic.co/t/curator-on-ece-2-4-3/216117 "2020-01-23T12:18:27Z")

</div>

In our Elastic Stack environment we've been using Curator successfully, and we're planning on migrating to ECE which I've been building. I've been given direction to get Curator to work in ECE, but what I've been readin…

---

## [Azure- hosted elasticsearch in my vNet](https://discuss.elastic.co/t/azure-hosted-elasticsearch-in-my-vnet/216100)

<div class="topic-metadata">

**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\
**Replies:** 2\
**Last updated:** [January 23, 2020, 6:56am UTC](https://discuss.elastic.co/t/azure-hosted-elasticsearch-in-my-vnet/216100 "2020-01-23T06:56:01Z")

</div>

hello , is it possible to use hosted elastic (cloud.elastic.co), but to configure it to run in the same azure vNet? that will reduce data transfer, and will give logstash access to sql server thanks!

---

## [What Ver of Elastic is able to be run in ECK?](https://discuss.elastic.co/t/what-ver-of-elastic-is-able-to-be-run-in-eck/215917)

<div class="topic-metadata">

**Author:** [@bigdamhero](https://discuss.elastic.co/u/bigdamhero)\
**Replies:** 6\
**Last updated:** [January 21, 2020, 8:38pm UTC](https://discuss.elastic.co/t/what-ver-of-elastic-is-able-to-be-run-in-eck/215917 "2020-01-21T20:38:55Z")

</div>

We are trying to upgrade our docker container based clusters into the newly released ECK. I am not seeing what newest version of ECK and support running. We want to try to migrate as much as we can and I am just wonder…

---

## [ECE Elasticsearch Keystore](https://discuss.elastic.co/t/ece-elasticsearch-keystore/215901)

<div class="topic-metadata">

**Author:** [@chadhanson](https://discuss.elastic.co/u/chadhanson)\
**Replies:** 6\
**Last updated:** [January 21, 2020, 5:09pm UTC](https://discuss.elastic.co/t/ece-elasticsearch-keystore/215901 "2020-01-21T17:09:18Z")

</div>

I am trying to use the elasticsearch keystore feature in ECE however I am having a few issues. First issue, when simply adding a simple keystore key value pair it will cause instance boot looping on all future stack cha…

---

## [Checking runner ip connectivity... FAILED](https://discuss.elastic.co/t/checking-runner-ip-connectivity-failed/215634)

<div class="topic-metadata">

**Author:** [@sasikumar](https://discuss.elastic.co/u/sasikumar)\
**Replies:** 4\
**Last updated:** [January 21, 2020, 4:47pm UTC](https://discuss.elastic.co/t/checking-runner-ip-connectivity-failed/215634 "2020-01-21T16:47:54Z")

</div>

We have already ECE setup on environment and we are trying to add another to existing ECE setup. While installing ECE on the new host we are getting the below errors. Can't connect $RUNNER\_HOST\_IP \[xx.xx.xx.xx:22000\]: …

---

## [Best option for persistent volume of an on-premise ECK](https://discuss.elastic.co/t/best-option-for-persistent-volume-of-an-on-premise-eck/215611)

<div class="topic-metadata">

**Author:** [@Ali\_Reza\_Haghighat](https://discuss.elastic.co/u/Ali_Reza_Haghighat)\
**Replies:** 1\
**Last updated:** [January 21, 2020, 10:37am UTC](https://discuss.elastic.co/t/best-option-for-persistent-volume-of-an-on-premise-eck/215611 "2020-01-21T10:37:35Z")

</div>

We have a cluster with multiple elastic instances deployed on a few servers. We decided to use ECK to manage our cluster. We are looking for the best option for persistent volume for an ECK cluster. We have tried NFS an…

---

## [GKE Upgrade and PDB](https://discuss.elastic.co/t/gke-upgrade-and-pdb/215661)

<div class="topic-metadata">

**Author:** [@Vincent\_Ngai](https://discuss.elastic.co/u/Vincent_Ngai)\
**Replies:** 7\
**Last updated:** [January 20, 2020, 11:00am UTC](https://discuss.elastic.co/t/gke-upgrade-and-pdb/215661 "2020-01-20T11:00:53Z")

</div>

Hey Guys, I am install my ECK on GKE as you may know GKE provide a method for cluster auto upgrade or no matter as a normal upgrade for node pool (it does 1 by 1 in each zone) if we setup PDB , it will follow the rule…

---

## [Filebeat to ECK on GKE](https://discuss.elastic.co/t/filebeat-to-eck-on-gke/215575)

<div class="topic-metadata">

**Author:** [@Zero\_Day](https://discuss.elastic.co/u/Zero_Day)\
**Replies:** 3\
**Last updated:** [January 20, 2020, 10:03am UTC](https://discuss.elastic.co/t/filebeat-to-eck-on-gke/215575 "2020-01-20T10:03:58Z")

</div>

I built a cluster on GKE with ECK operator and am trying to send logs from an on premises Filebeat installation to the cloud. Elasticsearch has LoadBlancer IP. I specified certificate, password and necessary things, but…

---

## [User/role management best practices](https://discuss.elastic.co/t/user-role-management-best-practices/187197)

<div class="topic-metadata">

**Author:** [@t0ffel](https://discuss.elastic.co/u/t0ffel)\
**Replies:** 4\
**Last updated:** [January 20, 2020, 9:28am UTC](https://discuss.elastic.co/t/user-role-management-best-practices/187197 "2020-01-20T09:28:53Z")

</div>

What is the best practice for the user and role management with the operator? Is it preferable to create users k8s resources or is it better to create users via Kibana? is there a way to do custom roles via k8s resourc…

---

## [Bootstrap monitoring process did not exit as expected - Again](https://discuss.elastic.co/t/bootstrap-monitoring-process-did-not-exit-as-expected-again/215228)

<div class="topic-metadata">

**Author:** [@lcarr](https://discuss.elastic.co/u/lcarr)\
**Replies:** 9\
**Last updated:** [January 17, 2020, 6:25pm UTC](https://discuss.elastic.co/t/bootstrap-monitoring-process-did-not-exit-as-expected-again/215228 "2020-01-17T18:25:47Z")

</div>

I am asking to reopen this ticket. I need some kind of resolution on how to fix it. I have 7 deployments to do in the next 6 months. I had no issues with doing the install on Centos 7 but when I tried in RHEL 7.5 Maip…

---

## [Eck and Prometheus](https://discuss.elastic.co/t/eck-and-prometheus/215495)

<div class="topic-metadata">

**Author:** [@jdambly](https://discuss.elastic.co/u/jdambly)\
**Replies:** 0\
**Last updated:** [January 17, 2020, 4:45pm UTC](https://discuss.elastic.co/t/eck-and-prometheus/215495 "2020-01-17T16:45:02Z")

</div>

What using eck what is the best way to send metrics to Prometheus for monitoring? I see there are a couple of projects for this And Are there any other that are better?

---

## [Elastic Stack Helm Charts](https://discuss.elastic.co/t/elastic-stack-helm-charts/187598)

<div class="topic-metadata">

**Author:** [@LaurentGoderre](https://discuss.elastic.co/u/LaurentGoderre)\
**Replies:** 5\
**Last updated:** [January 17, 2020, 3:29pm UTC](https://discuss.elastic.co/t/elastic-stack-helm-charts/187598 "2020-01-17T15:29:16Z")

</div>

I had started an epic to fix the elastic-stack helm chart in helm/stable: https://github.com/helm/charts/issues/14564 I think this work is still desirable because it should be easy to install the stack using helm withou…

---

## [Disable built-in users](https://discuss.elastic.co/t/disable-built-in-users/215002)

<div class="topic-metadata">

**Author:** [@Riieccoala](https://discuss.elastic.co/u/Riieccoala)\
**Replies:** 14\
**Last updated:** [January 17, 2020, 2:44pm UTC](https://discuss.elastic.co/t/disable-built-in-users/215002 "2020-01-17T14:44:42Z")

</div>

Hey all, I have set up SSO with OKTA to be able to enforce MFA. Using OKTA as my IDP did however not disable the built-in users such as 'elastic' I want to disable the elastic user to enforce principle of least privil…

---

## [Change defauit volume size for elastic](https://discuss.elastic.co/t/change-defauit-volume-size-for-elastic/215421)

<div class="topic-metadata">

**Author:** [@KapitanPlaneta](https://discuss.elastic.co/u/KapitanPlaneta)\
**Replies:** 2\
**Last updated:** [January 17, 2020, 9:34am UTC](https://discuss.elastic.co/t/change-defauit-volume-size-for-elastic/215421 "2020-01-17T09:34:40Z")

</div>

Elasticsearch comes with a 1GB storage by default \> NAME STATUS VOLUME CAPACITY ACCESS MODES STORAGECLASS AGE \> elasticsearch-data-…

[Previous page](https://discuss.elastic.co/c/orchestration/85.md?page=38)

[Next page](https://discuss.elastic.co/c/orchestration/85.md?page=40)
