# Elastic Cloud on Kubernetes (ECK) **URL:** https://discuss.elastic.co/c/orchestration/eck/79.md [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) --- ## [About the Elastic Cloud on Kubernetes (ECK) category](https://discuss.elastic.co/t/about-the-elastic-cloud-on-kubernetes-eck-category/183899)
**Author:** [@uricohen](https://discuss.elastic.co/u/uricohen)\ **Replies:** 1\ **Last updated:** [October 9, 2020, 9:33am UTC](https://discuss.elastic.co/t/about-the-elastic-cloud-on-kubernetes-eck-category/183899 "2020-10-09T09:33:24Z")
All things related to your ECK and running the Elastic stack on Kubernetes. --- ## [Why is the operator run as a statefulset?](https://discuss.elastic.co/t/why-is-the-operator-run-as-a-statefulset/390605)
**Author:** [@Frederic\_PEGE](https://discuss.elastic.co/u/Frederic_PEGE)\ **Replies:** 0\ **Last updated:** [September 23, 2026, 11:37am UTC](https://discuss.elastic.co/t/why-is-the-operator-run-as-a-statefulset/390605 "2026-09-23T11:37:14Z")
Hi, Why is the operator run as a STS ? I'm talking about the ES cluster, but the actual operator ? --- ## [Deploying an External Fleet Server with an ECK-Managed Elastic Stack](https://discuss.elastic.co/t/deploying-an-external-fleet-server-with-an-eck-managed-elastic-stack/388380)
**Author:** [@Zaryab\_Shaikh](https://discuss.elastic.co/u/Zaryab_Shaikh)\ **Replies:** 0\ **Last updated:** [July 16, 2026, 1:42pm UTC](https://discuss.elastic.co/t/deploying-an-external-fleet-server-with-an-eck-managed-elastic-stack/388380 "2026-07-16T13:42:22Z")
Hi everyone, I hope you're doing well. I have an Elastic Stack deployment running on Kubernetes using the ECK Operator. Elasticsearch, Kibana, and Fleet Server are all deployed successfully and working as expected with… --- ## [Issues with ECK and pvc-autoresizer](https://discuss.elastic.co/t/issues-with-eck-and-pvc-autoresizer/386804)
**Author:** [@sahendrikse](https://discuss.elastic.co/u/sahendrikse)\ **Replies:** 0\ **Last updated:** [June 10, 2026, 4:32pm UTC](https://discuss.elastic.co/t/issues-with-eck-and-pvc-autoresizer/386804 "2026-06-10T16:32:35Z")
Hi all, We're currently working with both ECK and pvc-autoresizer in our deployment, where our pvc-resizer annotations are defined with the volumeClaimTemplate as: annotations = { "resize.topolvm.io/threshold" = … --- ## [Netty LEAK logs on elasticsearch clusters probably after version update](https://discuss.elastic.co/t/netty-leak-logs-on-elasticsearch-clusters-probably-after-version-update/375797)
**Author:** [@coezdemir](https://discuss.elastic.co/u/coezdemir)\ **Replies:** 1\ **Last updated:** [June 3, 2026, 5:22pm UTC](https://discuss.elastic.co/t/netty-leak-logs-on-elasticsearch-clusters-probably-after-version-update/375797 "2026-06-03T17:22:11Z")
Hello, We have two kubernetes clusters running on two DCs, on these clusters we have 2 elasticsearch clusters. These two clusters are being used by a service on our webpage to respond queries. Cluster details per DC (o… --- ## [Eck-stack master, hot, warm and cold architecture](https://discuss.elastic.co/t/eck-stack-master-hot-warm-and-cold-architecture/386443)
**Author:** [@khteh](https://discuss.elastic.co/u/khteh)\ **Replies:** 0\ **Last updated:** [May 21, 2026, 12:21pm UTC](https://discuss.elastic.co/t/eck-stack-master-hot-warm-and-cold-architecture/386443 "2026-05-21T12:21:37Z")
Is there any documentation on the eck-stack example chart cloud-on-k8s/deploy/eck-stack/examples/elasticsearch/hot-warm-cold.yaml at main · elastic/cloud-on-k8s · GitHub ? In particular, what are the master, hot, warm an… --- ## [Hot and warm STS stuck and no pods created & helmfile apply or sync doesn't update STS replicas count](https://discuss.elastic.co/t/hot-and-warm-sts-stuck-and-no-pods-created-helmfile-apply-or-sync-doesnt-update-sts-replicas-count/386441)
**Author:** [@khteh](https://discuss.elastic.co/u/khteh)\ **Replies:** 0\ **Last updated:** [May 21, 2026, 11:55am UTC](https://discuss.elastic.co/t/hot-and-warm-sts-stuck-and-no-pods-created-helmfile-apply-or-sync-doesnt-update-sts-replicas-count/386441 "2026-05-21T11:55:09Z")
$ k logs -n elastic-system -l control-plane=elastic-operator No resources found in elastic-system namespace. $ k get all -n elastic-system NAME READY STATUS RESTARTS AGE pod/elastic-operato… --- ## [Logstash monitoring is not enabled despite Helm values](https://discuss.elastic.co/t/logstash-monitoring-is-not-enabled-despite-helm-values/385998)
**Author:** [@CitizenSteak](https://discuss.elastic.co/u/CitizenSteak)\ **Replies:** 2\ **Last updated:** [April 23, 2026, 10:09am UTC](https://discuss.elastic.co/t/logstash-monitoring-is-not-enabled-despite-helm-values/385998 "2026-04-23T10:09:51Z")
Hello, In my current ECK deployment (using the eck-stack chart), Logstash monitoring is not enabled, while Elasticsearch and Kibana monitoring are working as expected. Current Logstash Configuration (Excerpt) eck-logst… --- ## [Cluster Migration](https://discuss.elastic.co/t/cluster-migration/363745)
**Author:** [@Marcus\_Simonsen](https://discuss.elastic.co/u/Marcus_Simonsen)\ **Replies:** 1\ **Last updated:** [March 9, 2026, 12:48am UTC](https://discuss.elastic.co/t/cluster-migration/363745 "2026-03-09T00:48:51Z")
Hello Elastic experts, I would like to migrate from a VM based deployment to one on kubernetes - and eck. Because of the size of the indices (many TBs of data) it has been suggested that I can create data nodes and joi… --- ## [Upgrading elasticsearch 8.19.11 to 9+ cluster managed by ECK Operator](https://discuss.elastic.co/t/upgrading-elasticsearch-8-19-11-to-9-cluster-managed-by-eck-operator/385361)
**Author:** [@coezdemir](https://discuss.elastic.co/u/coezdemir)\ **Replies:** 0\ **Last updated:** [March 6, 2026, 10:43am UTC](https://discuss.elastic.co/t/upgrading-elasticsearch-8-19-11-to-9-cluster-managed-by-eck-operator/385361 "2026-03-06T10:43:10Z")
Hello, I wanted to share some insight that we came accross on an upgrade we recently did. Upgrade ECK operator version from 2.16+ to 3+ since only 3+ supports 9+ elastic Upgrade path was from 8.19.11 → 9.1.9 at first … --- ## [Managing multiple Elasticsearch clusters across different Kubernetes clusters with a single ECK instance](https://discuss.elastic.co/t/managing-multiple-elasticsearch-clusters-across-different-kubernetes-clusters-with-a-single-eck-instance/385226)
**Author:** [@CitizenSteak](https://discuss.elastic.co/u/CitizenSteak)\ **Replies:** 1\ **Last updated:** [March 1, 2026, 9:31pm UTC](https://discuss.elastic.co/t/managing-multiple-elasticsearch-clusters-across-different-kubernetes-clusters-with-a-single-eck-instance/385226 "2026-03-01T21:31:07Z")
I have a Kubernetes cluster A where I deployed an Elasticsearch cluster A with the Operator. Now, I have a Kubernetes cluster B where I want to deploy an Elasticsearch cluster B but I would like for it to be managed by t… --- ## [Enforcing a 1:1 mapping between pods and cluster nodes for deploying multiple ElasticSearch/Logstash replicas with local storage](https://discuss.elastic.co/t/enforcing-a-1-1-mapping-between-pods-and-cluster-nodes-for-deploying-multiple-elasticsearch-logstash-replicas-with-local-storage/384433)
**Author:** [@CitizenSteak](https://discuss.elastic.co/u/CitizenSteak)\ **Replies:** 1\ **Last updated:** [February 25, 2026, 4:30pm UTC](https://discuss.elastic.co/t/enforcing-a-1-1-mapping-between-pods-and-cluster-nodes-for-deploying-multiple-elasticsearch-logstash-replicas-with-local-storage/384433 "2026-02-25T16:30:02Z")
Context I'm deploying the ELK stack (using the eck-stack chart) on a K3s cluster with OpenEBS for local storage. When deploying multiple Elasticsearch or Logstash replicas with local storage (e.g., OpenEBS \`ReadWriteOnc… --- ## [Deployment methods other than using ECK for logstash](https://discuss.elastic.co/t/deployment-methods-other-than-using-eck-for-logstash/384991)
**Author:** [@yossib](https://discuss.elastic.co/u/yossib)\ **Replies:** 0\ **Last updated:** [February 10, 2026, 9:52am UTC](https://discuss.elastic.co/t/deployment-methods-other-than-using-eck-for-logstash/384991 "2026-02-10T09:52:45Z")
I’m looking for alternatives of deploying logstash on openshift other than using ECK operator --- ## [Kibana expose through K8s Gateway API](https://discuss.elastic.co/t/kibana-expose-through-k8s-gateway-api/384073)
**Author:** [@livresco](https://discuss.elastic.co/u/livresco)\ **Replies:** 1\ **Last updated:** [February 7, 2026, 4:38am UTC](https://discuss.elastic.co/t/kibana-expose-through-k8s-gateway-api/384073 "2026-02-07T04:38:18Z")
I have a python app running and I already managed to expose it through Gateway API and access it through "http:///pythonapp".Next I deployed a Elasticsearch and Kibana instance so I can gain experience in monitoring and … --- ## [ECK Fleet Server setup confusion and failure](https://discuss.elastic.co/t/eck-fleet-server-setup-confusion-and-failure/384857)
**Author:** [@gueguet57](https://discuss.elastic.co/u/gueguet57)\ **Replies:** 1\ **Last updated:** [February 3, 2026, 10:36am UTC](https://discuss.elastic.co/t/eck-fleet-server-setup-confusion-and-failure/384857 "2026-02-03T10:36:57Z")
Hi, I have an existing ECK stack (ES + Kibana) running fine. I’m now trying to add Fleet Server and configure Kibana accordingly, but I’m a bit confused. I’m following: https://www.elastic.co/docs/deploy-manage/depl… --- ## [Reducing PVC size on single-node ECK cluster](https://discuss.elastic.co/t/reducing-pvc-size-on-single-node-eck-cluster/384405)
**Author:** [@gueguet57](https://discuss.elastic.co/u/gueguet57)\ **Replies:** 1\ **Last updated:** [January 7, 2026, 12:22pm UTC](https://discuss.elastic.co/t/reducing-pvc-size-on-single-node-eck-cluster/384405 "2026-01-07T12:22:23Z")
Hi everyone, I deployed an ECK cluster in a sandbox environment with a single node and a PersistentVolumeClaim of X Gi. I would like to reduce the size of the disk allocated to this node. From my understanding, Kubern… --- ## [Filebeat re-ingesting old logs after pod restart (ECK on GKE) - ignore\_older not working](https://discuss.elastic.co/t/filebeat-re-ingesting-old-logs-after-pod-restart-eck-on-gke-ignore-older-not-working/384328)
**Author:** [@Marwan\_Ghonem](https://discuss.elastic.co/u/Marwan_Ghonem)\ **Replies:** 2\ **Last updated:** [January 2, 2026, 3:27pm UTC](https://discuss.elastic.co/t/filebeat-re-ingesting-old-logs-after-pod-restart-eck-on-gke-ignore-older-not-working/384328 "2026-01-02T15:27:52Z")
Problem Filebeat is repeatedly re-ingesting old logs (4-15 days old) causing previously deleted indices to be recreated. Environment Filebeat version: 7.10.1 ADeployment: ECK (Elastic Cloud on Kubernetes) DaemonS… --- ## [Pod fails to become ready after restart](https://discuss.elastic.co/t/pod-fails-to-become-ready-after-restart/383162)
**Author:** [@leighr](https://discuss.elastic.co/u/leighr)\ **Replies:** 1\ **Last updated:** [December 31, 2025, 3:40pm UTC](https://discuss.elastic.co/t/pod-fails-to-become-ready-after-restart/383162 "2025-12-31T15:40:11Z")
elastic operator v2.16.1 is installed in the cluster. k8s is running in Amazon EKS, k8s version 1.32 The following brings up a four node cluster with no errors: apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elasti… --- ## [Kubernetes CRDs for index templates / datastreams with ECK?](https://discuss.elastic.co/t/kubernetes-crds-for-index-templates-datastreams-with-eck/384085)
**Author:** [@gueguet57](https://discuss.elastic.co/u/gueguet57)\ **Replies:** 1\ **Last updated:** [December 31, 2025, 3:19pm UTC](https://discuss.elastic.co/t/kubernetes-crds-for-index-templates-datastreams-with-eck/384085 "2025-12-31T15:19:59Z")
Hi all, I’m deploying Elastic via ECK and want to manage index templates / datastreams as code in Kubernetes manifests (Helm / GitOps). I checked the ECK API docs but didn’t see any CRDs for this (or I missed it). Que… --- ## [TLS SANs not applied to Logstash custom service certificate in ECK](https://discuss.elastic.co/t/tls-sans-not-applied-to-logstash-custom-service-certificate-in-eck/384148)
**Author:** [@CitizenSteak](https://discuss.elastic.co/u/CitizenSteak)\ **Replies:** 1\ **Last updated:** [December 31, 2025, 3:12pm UTC](https://discuss.elastic.co/t/tls-sans-not-applied-to-logstash-custom-service-certificate-in-eck/384148 "2025-12-31T15:12:49Z")
Context I have filebeat installed on a VM and I’m trying to send logs to a logstash instance deployed on a K3S cluster. Description of the issue When configuring a custom Logstash service with selfSignedCertificate and s… --- ## [Where to find Elasticsearch internal logs when using ECK](https://discuss.elastic.co/t/where-to-find-elasticsearch-internal-logs-when-using-eck/384311)
**Author:** [@gueguet57](https://discuss.elastic.co/u/gueguet57)\ **Replies:** 1\ **Last updated:** [December 31, 2025, 2:35pm UTC](https://discuss.elastic.co/t/where-to-find-elasticsearch-internal-logs-when-using-eck/384311 "2025-12-31T14:35:36Z")
Hello all, I’ve deployed an Elastic stack using ECK and I’m trying to understand what logs Elastic produces and sotres about itself and how to access them. For example, I’d like to investigate whether Elasticsearch pre… --- ## [ECK how to change filebeat and metricbeat image paths?](https://discuss.elastic.co/t/eck-how-to-change-filebeat-and-metricbeat-image-paths/383817)
**Author:** [@Dave\_Houser](https://discuss.elastic.co/u/Dave_Houser)\ **Replies:** 3\ **Last updated:** [December 3, 2025, 3:33pm UTC](https://discuss.elastic.co/t/eck-how-to-change-filebeat-and-metricbeat-image-paths/383817 "2025-12-03T15:33:52Z")
How can I specify a custom path in our private registry for filebeat and metricbeat images? Note, these are the images that are used when Elastic pod is deployed, it seems that filebeat and metricbeat containers are nee… --- ## [Write Request Data flow ECK](https://discuss.elastic.co/t/write-request-data-flow-eck/383297)
**Author:** [@kim.ae](https://discuss.elastic.co/u/kim.ae)\ **Replies:** 0\ **Last updated:** [November 7, 2025, 4:58pm UTC](https://discuss.elastic.co/t/write-request-data-flow-eck/383297 "2025-11-07T16:58:55Z")
Currently I have a ECK Cluster running on a AKS cluster. The configuration is 3 master nodes, 5 hot data nodes that also are ingest nodes and 7 warm/cold nodes. We are having performance issues (filebeat is showing write… --- ## [Permission error when registering S3 bucket as snapshot repository](https://discuss.elastic.co/t/permission-error-when-registering-s3-bucket-as-snapshot-repository/382589)
**Author:** [@jhonsouza](https://discuss.elastic.co/u/jhonsouza)\ **Replies:** 0\ **Last updated:** [October 10, 2025, 4:18pm UTC](https://discuss.elastic.co/t/permission-error-when-registering-s3-bucket-as-snapshot-repository/382589 "2025-10-10T16:18:17Z")
Hello everyone! :waving\_hand: I hope you’re all doing well. I’m currently trying to register an S3 bucket as a snapshot repository for my Elasticsearch backups, but I’m running into a permission error. Below are my co… --- ## [ECK: Kibana via Ingress NGINX Controller 502 Bad Gateway](https://discuss.elastic.co/t/eck-kibana-via-ingress-nginx-controller-502-bad-gateway/372041)
**Author:** [@hustluh](https://discuss.elastic.co/u/hustluh)\ **Replies:** 4\ **Last updated:** [October 6, 2025, 3:51pm UTC](https://discuss.elastic.co/t/eck-kibana-via-ingress-nginx-controller-502-bad-gateway/372041 "2025-10-06T15:51:53Z")
I am having an issue using the latest images of ECK's Elastic + Kibana via Helm Chart, installed with following the quick start guides. My Kibana pod is in a running state, as is my Elastic pod. The services are all run… --- ## [Need help on snapshot creation in Kubernets Opensearch version 2.3.0 using NFS](https://discuss.elastic.co/t/need-help-on-snapshot-creation-in-kubernets-opensearch-version-2-3-0-using-nfs/382433)
**Author:** [@Surekha\_Burkul](https://discuss.elastic.co/u/Surekha_Burkul)\ **Replies:** 1\ **Last updated:** [October 6, 2025, 8:36am UTC](https://discuss.elastic.co/t/need-help-on-snapshot-creation-in-kubernets-opensearch-version-2-3-0-using-nfs/382433 "2025-10-06T08:36:53Z")
I have OpenSearch version 2.3.0 installed in Kubernetes environment using 2 data nodes 2 ingest nodes and 2 master nodes in a cluster , i want to create snapshots for existing logstash indices in a cluster , how can i do… --- ## [Problems getting elastic-agent 8.15.1 to enroll for fleet server from kubernetes on cloud hosted ELK 8.15.1](https://discuss.elastic.co/t/problems-getting-elastic-agent-8-15-1-to-enroll-for-fleet-server-from-kubernetes-on-cloud-hosted-elk-8-15-1/382136)
**Author:** [@dagman62](https://discuss.elastic.co/u/dagman62)\ **Replies:** 0\ **Last updated:** [September 22, 2025, 8:47pm UTC](https://discuss.elastic.co/t/problems-getting-elastic-agent-8-15-1-to-enroll-for-fleet-server-from-kubernetes-on-cloud-hosted-elk-8-15-1/382136 "2025-09-22T20:47:04Z")
I am having problems getting agent to enroll with hosted elk version 8.15.1 using the kubernetes integration. The fleet server itself does index the logs from our bare metal ubuntu 24x running k8s however the kubernetes … --- ## [How to add AWS integration via Kibana CR?](https://discuss.elastic.co/t/how-to-add-aws-integration-via-kibana-cr/358505)
**Author:** [@Denis\_Pudov](https://discuss.elastic.co/u/Denis_Pudov)\ **Replies:** 3\ **Last updated:** [September 15, 2025, 11:50am UTC](https://discuss.elastic.co/t/how-to-add-aws-integration-via-kibana-cr/358505 "2025-09-15T11:50:42Z")
Hello. I tried to configure Kibana custom resource with xpack.fleet.agentPolicies to add aws integration without success. I have read many documentation and done a lot of experiments and looks that there is no support f… --- ## [Balance disk usage across warm nodes](https://discuss.elastic.co/t/balance-disk-usage-across-warm-nodes/381568)
**Author:** [@Narek\_Martirosyan](https://discuss.elastic.co/u/Narek_Martirosyan)\ **Replies:** 1\ **Last updated:** [September 5, 2025, 8:09am UTC](https://discuss.elastic.co/t/balance-disk-usage-across-warm-nodes/381568 "2025-09-05T08:09:47Z")
Elasticsearch: 9.0.3 (ECK managed) Kubernetes: AKS Topology: 2 hot data nodes, 2 warm data nodes, 3 master nodes Storage: persistent volumes per data node Workload: APM traces (plus APM logs/metrics); data st… --- ## [Elastic-operator: deploying multiple data pods at once](https://discuss.elastic.co/t/elastic-operator-deploying-multiple-data-pods-at-once/381375)
**Author:** [@idl0r](https://discuss.elastic.co/u/idl0r)\ **Replies:** 6\ **Last updated:** [August 28, 2025, 8:49am UTC](https://discuss.elastic.co/t/elastic-operator-deploying-multiple-data-pods-at-once/381375 "2025-08-28T08:49:59Z")
Hi guys, is it possible to let the elastic-operator deploy multiple data nods/pods at once? We have 24 data nodes being evenly distributed on 3 kubernetes worker. We’d like to deploy multiple at once because otherwise … [Next page](https://discuss.elastic.co/c/orchestration/eck/79.md?page=1)