# Elastic Cloud on Kubernetes (ECK)

**URL:** https://discuss.elastic.co/c/orchestration/eck/79.md?page=32

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 33

---

## [Fresh cluster all shards are unavailable](https://discuss.elastic.co/t/fresh-cluster-all-shards-are-unavailable/210216)

<div class="topic-metadata">

**Author:** [@dg\_hivebrite](https://discuss.elastic.co/u/dg_hivebrite)\
**Replies:** 9\
**Last updated:** [December 3, 2019, 2:34pm UTC](https://discuss.elastic.co/t/fresh-cluster-all-shards-are-unavailable/210216 "2019-12-03T14:34:55Z")

</div>

Hi, When my cluster is started, his status is in yellow: { "cluster\_name" : "datawarehouse", "status" : "yellow", "timed\_out" : false, "number\_of\_nodes" : 6, "number\_of\_data\_nodes" : 0, "active\_primary\_shards" :…

---

## [ECK and ES on EKS 1.12 installation / setup issue](https://discuss.elastic.co/t/eck-and-es-on-eks-1-12-installation-setup-issue/206401)

<div class="topic-metadata">

**Author:** [@sathia.thayathil](https://discuss.elastic.co/u/sathia.thayathil)\
**Replies:** 1\
**Last updated:** [December 2, 2019, 10:47am UTC](https://discuss.elastic.co/t/eck-and-es-on-eks-1-12-installation-setup-issue/206401 "2019-12-02T10:47:05Z")

</div>

{"type": "server", "timestamp": "2019-11-04T12:12:27,916Z", "level": "WARN", "component": "o.e.c.c.ClusterFormationFailureHelper", "cluster.name": "elastic", "node.name": "elastic-es-default-0", "message": "master not di…

---

## [ECK 1.0.0-beta1 doesn't start pod](https://discuss.elastic.co/t/eck-1-0-0-beta1-doesnt-start-pod/209886)

<div class="topic-metadata">

**Author:** [@dg\_hivebrite](https://discuss.elastic.co/u/dg_hivebrite)\
**Replies:** 2\
**Last updated:** [December 2, 2019, 10:37am UTC](https://discuss.elastic.co/t/eck-1-0-0-beta1-doesnt-start-pod/209886 "2019-12-02T10:37:12Z")

</div>

Hi, I'm beginning to use ECK, I deploy it on my kubernetes cluster hosted on GKE. The problem is when I'm checking if the elasticsearch cluster is running I can find my stateful sets but without pod. So I check, the c…

---

## [ECK compatibility with Docker for Windows (Kubernetes)](https://discuss.elastic.co/t/eck-compatibility-with-docker-for-windows-kubernetes/209873)

<div class="topic-metadata">

**Author:** [@olc-olivier](https://discuss.elastic.co/u/olc-olivier)\
**Replies:** 2\
**Last updated:** [November 29, 2019, 2:43pm UTC](https://discuss.elastic.co/t/eck-compatibility-with-docker-for-windows-kubernetes/209873 "2019-11-29T14:43:06Z")

</div>

Hi, Someone could tell me if I can install ECK with Docker for Windows (compliance) ? Thx. PS: I have this error. "logger":"transport","message":"Skipping pod because it has no IP yet","ver":"1.0.0-beta1-84792e30","n…

---

## [ECK 1.0 with on premise K8s](https://discuss.elastic.co/t/eck-1-0-with-on-premise-k8s/209745)

<div class="topic-metadata">

**Author:** [@ikaposi](https://discuss.elastic.co/u/ikaposi)\
**Replies:** 1\
**Last updated:** [November 27, 2019, 7:51pm UTC](https://discuss.elastic.co/t/eck-1-0-with-on-premise-k8s/209745 "2019-11-27T19:51:33Z")

</div>

Hi, I have installed a basic k8s cluster with kubeadm; cluster node state is ready and I can deploy an nginx image.. so far so good. Next I installed the elastic operator (1.0.0-beta1) using the steps described on: htt…

---

## [Waiting for the transport certificates (/mnt/elastic-internal/transport-certificates/elasticsearch-sample-es-default-0.tls.key)](https://discuss.elastic.co/t/waiting-for-the-transport-certificates-mnt-elastic-internal-transport-certificates-elasticsearch-sample-es-default-0-tls-key/209313)

<div class="topic-metadata">

**Author:** [@ftyuuu](https://discuss.elastic.co/u/ftyuuu)\
**Replies:** 2\
**Last updated:** [November 26, 2019, 11:28am UTC](https://discuss.elastic.co/t/waiting-for-the-transport-certificates-mnt-elastic-internal-transport-certificates-elasticsearch-sample-es-default-0-tls-key/209313 "2019-11-26T11:28:32Z")

</div>

I want to debug es, so i commented on the following code in cmd/manager/main.go. But pod stop at init container (elastic-internal-init-filesystem). if operator.HasRole(operator.NamespaceOperator, roles) { //if e…

---

## [New user can't login kibana](https://discuss.elastic.co/t/new-user-cant-login-kibana/204810)

<div class="topic-metadata">

**Author:** [@lonelyleaf](https://discuss.elastic.co/u/lonelyleaf)\
**Replies:** 6\
**Last updated:** [November 26, 2019, 10:42am UTC](https://discuss.elastic.co/t/new-user-cant-login-kibana/204810 "2019-11-26T10:42:57Z")

</div>

I setup eck and login by default "elastic" account successfully.But I or logstash can't login by new account created in kibana. {"statusCode":401,"error":"Unauthorized","message":"\[security\_exception\] unable to authe…

---

## [Can't change xpack security realms in ECK 1.0](https://discuss.elastic.co/t/cant-change-xpack-security-realms-in-eck-1-0/209118)

<div class="topic-metadata">

**Author:** [@Jaepyoung\_Kim](https://discuss.elastic.co/u/Jaepyoung_Kim)\
**Replies:** 2\
**Last updated:** [November 25, 2019, 9:44pm UTC](https://discuss.elastic.co/t/cant-change-xpack-security-realms-in-eck-1-0/209118 "2019-11-25T21:44:54Z")

</div>

Have an issue of updating security.authc.reamls in elasticsearcy.yml file in ECK. Installed ECK open source 1.0 in EKS. I can get password for "elastic" user using following command. kubectl get secret canoo-elasticse…

---

## [ECK data node type selection](https://discuss.elastic.co/t/eck-data-node-type-selection/209277)

<div class="topic-metadata">

**Author:** [@Komal\_Agarwal](https://discuss.elastic.co/u/Komal_Agarwal)\
**Replies:** 1\
**Last updated:** [November 25, 2019, 10:37am UTC](https://discuss.elastic.co/t/eck-data-node-type-selection/209277 "2019-11-25T10:37:35Z")

</div>

We have a cluster holding ~400gbs of data. We have divided this using 6 data nodes(2 nodes X 3 zones). Currently, in Elastic Cloud, all these are I3 machines. We want to understand what would be better in ECK - I3 nodes …

---

## [Kibana can't connect to ES having (openstack) LoadBalancer setting](https://discuss.elastic.co/t/kibana-cant-connect-to-es-having-openstack-loadbalancer-setting/206691)

<div class="topic-metadata">

**Author:** [@JuYeong\_Park](https://discuss.elastic.co/u/JuYeong_Park)\
**Replies:** 4\
**Last updated:** [November 19, 2019, 5:00am UTC](https://discuss.elastic.co/t/kibana-cant-connect-to-es-having-openstack-loadbalancer-setting/206691 "2019-11-19T05:00:42Z")

</div>

I want to use ES and Kibana on LoadBalancer Env. So, i added load balancer options to ES yaml as below. apiVersion: elasticsearch.k8s.elastic.co/v1beta1 kind: Elasticsearch metadata: name: lb spec: http: service…

---

## [Trouble installing kibana plugin](https://discuss.elastic.co/t/trouble-installing-kibana-plugin/207984)

<div class="topic-metadata">

**Author:** [@terryE](https://discuss.elastic.co/u/terryE)\
**Replies:** 1\
**Last updated:** [November 15, 2019, 8:05pm UTC](https://discuss.elastic.co/t/trouble-installing-kibana-plugin/207984 "2019-11-15T20:05:40Z")

</div>

I'm trying to use an init container to install a kibana plugin but I'm getting an error. Events: Type Reason Age From Message Warning ReconciliationErr…

---

## [Having issues with more than 1 instance](https://discuss.elastic.co/t/having-issues-with-more-than-1-instance/207154)

<div class="topic-metadata">

**Author:** [@booboothefool](https://discuss.elastic.co/u/booboothefool)\
**Replies:** 2\
**Last updated:** [November 13, 2019, 9:30pm UTC](https://discuss.elastic.co/t/having-issues-with-more-than-1-instance/207154 "2019-11-13T21:30:05Z")

</div>

Hi there so I've gotten the single instance configuration to work. And Kibana is able to connect to it. apiVersion: elasticsearch.k8s.elastic.co/v1beta1 kind: Elasticsearch metadata: name: elastic spec: version: 7.4…

---

## [Cross Cluster Search on ECK - how to set ca cert](https://discuss.elastic.co/t/cross-cluster-search-on-eck-how-to-set-ca-cert/202113)

<div class="topic-metadata">

**Author:** [@iremmats](https://discuss.elastic.co/u/iremmats)\
**Replies:** 16\
**Last updated:** [November 12, 2019, 9:40pm UTC](https://discuss.elastic.co/t/cross-cluster-search-on-eck-how-to-set-ca-cert/202113 "2019-11-12T21:40:53Z")

</div>

Hi, So we are playing around with ECK on multiple clusters in different region. We want to establish cross cluster search from one central cluster. How can we set the ca-cert for our clusters during creation? We follo…

---

## [Logstash and ECK](https://discuss.elastic.co/t/logstash-and-eck/206997)

<div class="topic-metadata">

**Author:** [@dbwest](https://discuss.elastic.co/u/dbwest)\
**Replies:** 2\
**Last updated:** [November 7, 2019, 10:26pm UTC](https://discuss.elastic.co/t/logstash-and-eck/206997 "2019-11-07T22:26:21Z")

</div>

Is Logstash part of ECK? How do I add it in? Is it currently on any dev branches or are there any ways to get edge releases that include it? I do not see it in stable. Are there any plans to add it in?

---

## [Does Helm use official ECK under the hood?](https://discuss.elastic.co/t/does-helm-use-official-eck-under-the-hood/206067)

<div class="topic-metadata">

**Author:** [@LeFrancois](https://discuss.elastic.co/u/LeFrancois)\
**Replies:** 1\
**Last updated:** [November 6, 2019, 7:47am UTC](https://discuss.elastic.co/t/does-helm-use-official-eck-under-the-hood/206067 "2019-11-06T07:47:15Z")

</div>

Hello, After reading the doc of Helm charts I saw it was grounded on the Docker images of ElasticSearch. But under the hood it seem strange that the features / codebase is not shared with ECK. I would like to clarifiy…

---

## [Failed to get API Group-Resources](https://discuss.elastic.co/t/failed-to-get-api-group-resources/206482)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 2\
**Last updated:** [November 5, 2019, 8:27pm UTC](https://discuss.elastic.co/t/failed-to-get-api-group-resources/206482 "2019-11-05T20:27:05Z")

</div>

Hello World! I'm trying to Deploy ECK in your Kubernetes cluster, yet running into following issue: $ microk8s.kubectl apply -f https://download.elastic.co/downloads/eck/1.0.0-beta1/all-in-one.yaml customresourcedefini…

---

## [Is it possible to use OSS docker images (without xpack)?](https://discuss.elastic.co/t/is-it-possible-to-use-oss-docker-images-without-xpack/184410)

<div class="topic-metadata">

**Author:** [@ismailbaskin](https://discuss.elastic.co/u/ismailbaskin)\
**Replies:** 3\
**Last updated:** [November 2, 2019, 5:37pm UTC](https://discuss.elastic.co/t/is-it-possible-to-use-oss-docker-images-without-xpack/184410 "2019-11-02T17:37:39Z")

</div>

Hi, I'm not sure but it seems ECK operator is strictly depends on xpack features. Is there any way to use it open source version of ElasticSearch with ECK operator?

---

## [ECK + Istio mTLS](https://discuss.elastic.co/t/eck-istio-mtls/205070)

<div class="topic-metadata">

**Author:** [@Spencer\_Gilbert](https://discuss.elastic.co/u/Spencer_Gilbert)\
**Replies:** 7\
**Last updated:** [November 1, 2019, 11:01am UTC](https://discuss.elastic.co/t/eck-istio-mtls/205070 "2019-11-01T11:01:06Z")

</div>

I saw on the release notes a mention of using ECK with Istio with disabling HTTP level TLS - I've been trying to use mTLS with Istio and ES and running into problems both with the transport layer (which I think I've reso…

---

## [Upgrade of custom-image statefulset causes cluster-wide Readiness probe failed](https://discuss.elastic.co/t/upgrade-of-custom-image-statefulset-causes-cluster-wide-readiness-probe-failed/205952)

<div class="topic-metadata">

**Author:** [@Zorlack](https://discuss.elastic.co/u/Zorlack)\
**Replies:** 3\
**Last updated:** [October 31, 2019, 5:11pm UTC](https://discuss.elastic.co/t/upgrade-of-custom-image-statefulset-causes-cluster-wide-readiness-probe-failed/205952 "2019-10-31T17:11:37Z")

</div>

Hello, I'm using ECK Operator 1.0.0-beta1 running on Rancher 2.0. I have a custom image for Elasticsearch which adds an off-cluster NFS share for snapshot backups. This capability works correctly, but when I go to upg…

---

## [If physical mechine down, how to move the bad pod to other working node when using local-volume storageclass](https://discuss.elastic.co/t/if-physical-mechine-down-how-to-move-the-bad-pod-to-other-working-node-when-using-local-volume-storageclass/205718)

<div class="topic-metadata">

**Author:** [@LoadingZhang](https://discuss.elastic.co/u/LoadingZhang)\
**Replies:** 2\
**Last updated:** [October 30, 2019, 8:42am UTC](https://discuss.elastic.co/t/if-physical-mechine-down-how-to-move-the-bad-pod-to-other-working-node-when-using-local-volume-storageclass/205718 "2019-10-30T08:42:06Z")

</div>

I’m using elastic-local-volume as storageclass. I shutdown a physical mechine to simulate hardware malfunction. I found the pod can not move to other node because of volume node affinity. Could we move it to other node…

---

## [Maximum number of data disk exceeded](https://discuss.elastic.co/t/maximum-number-of-data-disk-exceeded/204883)

<div class="topic-metadata">

**Author:** [@Alwandy](https://discuss.elastic.co/u/Alwandy)\
**Replies:** 1\
**Last updated:** [October 28, 2019, 6:15am UTC](https://discuss.elastic.co/t/maximum-number-of-data-disk-exceeded/204883 "2019-10-28T06:15:57Z")

</div>

Hey guys, For my initial creation of K8s, I have already assigned 4 data disks (this is our QA env) during the creation process. When running the template to create the master node to act as ingress and data. I hit on …

---

## [Automating ES installation with ECK via Helm](https://discuss.elastic.co/t/automating-es-installation-with-eck-via-helm/205335)

<div class="topic-metadata">

**Author:** [@Aravind](https://discuss.elastic.co/u/Aravind)\
**Replies:** 1\
**Last updated:** [October 28, 2019, 5:51am UTC](https://discuss.elastic.co/t/automating-es-installation-with-eck-via-helm/205335 "2019-10-28T05:51:55Z")

</div>

I would like to automate the installation of Elasticsearch via ECK on a cloud provider via helm. I don't want to prematurely go and install the custom kubernetes resource of kind: Elasticsearch before the operator is fu…

---

## [Installing ES with Custom image from private repository fails](https://discuss.elastic.co/t/installing-es-with-custom-image-from-private-repository-fails/205331)

<div class="topic-metadata">

**Author:** [@Aravind](https://discuss.elastic.co/u/Aravind)\
**Replies:** 3\
**Last updated:** [October 28, 2019, 5:44am UTC](https://discuss.elastic.co/t/installing-es-with-custom-image-from-private-repository-fails/205331 "2019-10-28T05:44:46Z")

</div>

Here is my file - apiVersion: elasticsearch.k8s.elastic.co/v1alpha1 kind: Elasticsearch metadata: name: jaeger-elasticsearch namespace: test spec: image: phx.ocir.io/\<\>/elasticsearch/elasticsearch:7.3.2 version:…

---

## [Change version and custom images in ECK](https://discuss.elastic.co/t/change-version-and-custom-images-in-eck/205306)

<div class="topic-metadata">

**Author:** [@LoadingZhang](https://discuss.elastic.co/u/LoadingZhang)\
**Replies:** 1\
**Last updated:** [October 28, 2019, 5:41am UTC](https://discuss.elastic.co/t/change-version-and-custom-images-in-eck/205306 "2019-10-28T05:41:32Z")

</div>

Now I set configuration as below: spec: version: 7.4.0 image: my\_custom\_image:7.4.0 What would happen if I change version to 7.4.1 but image not? And what would happen if change image tag to 7.4.1 but version not? …

---

## [Setup snapshots with minio, unable to retrieve secrets](https://discuss.elastic.co/t/setup-snapshots-with-minio-unable-to-retrieve-secrets/202351)

<div class="topic-metadata">

**Author:** [@Kent\_Brake](https://discuss.elastic.co/u/Kent_Brake)\
**Replies:** 2\
**Last updated:** [October 24, 2019, 8:43pm UTC](https://discuss.elastic.co/t/setup-snapshots-with-minio-unable-to-retrieve-secrets/202351 "2019-10-24T20:43:51Z")

</div>

Hi, I'm trying to setup snapshot with a local minion instance, but I can't seem to imports secrets as documented here. I setup the secrets with: kubectl create secret generic minio-credentials --from-file=s3.client.de…

---

## [Quickstart Example (v0.8) SSL error](https://discuss.elastic.co/t/quickstart-example-v0-8-ssl-error/183992)

<div class="topic-metadata">

**Author:** [@MooseyMersa](https://discuss.elastic.co/u/MooseyMersa)\
**Replies:** 7\
**Last updated:** [October 22, 2019, 8:48am UTC](https://discuss.elastic.co/t/quickstart-example-v0-8-ssl-error/183992 "2019-10-22T08:48:22Z")

</div>

Hi, I've followed the guide https://www.elastic.co/guide/en/cloud-on-k8s/current/index.html and deployed the items described, everything seems to have been correctly created. However when the Elasticsearch logs are insp…

---

## [How to create role mapping file](https://discuss.elastic.co/t/how-to-create-role-mapping-file/199459)

<div class="topic-metadata">

**Author:** [@sfgroups1](https://discuss.elastic.co/u/sfgroups1)\
**Replies:** 3\
**Last updated:** [October 18, 2019, 8:40am UTC](https://discuss.elastic.co/t/how-to-create-role-mapping-file/199459 "2019-10-18T08:40:34Z")

</div>

Hi, I am adding the LDAP authentication to my cluster, I need to create the group\_to\_role\_mapping.yml file for the roles. Is there an example I can follow? files: role\_mapping: "/mnt/elasticsearch/group\_…

---

## [ECK install kubernetes on-premise k8s cluster with local NFS](https://discuss.elastic.co/t/eck-install-kubernetes-on-premise-k8s-cluster-with-local-nfs/204065)

<div class="topic-metadata">

**Author:** [@umim9](https://discuss.elastic.co/u/umim9)\
**Replies:** 1\
**Last updated:** [October 17, 2019, 3:01pm UTC](https://discuss.elastic.co/t/eck-install-kubernetes-on-premise-k8s-cluster-with-local-nfs/204065 "2019-10-17T15:01:43Z")

</div>

Hi, I want install one ECK cluster in local on-premise k8s HA cluster. I use local network NFS share persistent store for k8s HA cluster. I am a beginner enginer. Someone can send install yaml file for me? Thank you…

---

## [Using s3-repository with EC2 Instance Profile and kube2iam](https://discuss.elastic.co/t/using-s3-repository-with-ec2-instance-profile-and-kube2iam/203252)

<div class="topic-metadata">

**Author:** [@akappler](https://discuss.elastic.co/u/akappler)\
**Replies:** 3\
**Last updated:** [October 16, 2019, 3:28pm UTC](https://discuss.elastic.co/t/using-s3-repository-with-ec2-instance-profile-and-kube2iam/203252 "2019-10-16T15:28:07Z")

</div>

I am trying to configure my Elasticsearch instance for access to a S3 bucket. I want to secure access via an AWS Role, which should be assumed automatically via kube2iam. I am running into two problems: For kube2iam …

---

## [Runaway memory usage](https://discuss.elastic.co/t/runaway-memory-usage/203483)

<div class="topic-metadata">

**Author:** [@JoeyLemur](https://discuss.elastic.co/u/JoeyLemur)\
**Replies:** 4\
**Last updated:** [October 14, 2019, 7:11pm UTC](https://discuss.elastic.co/t/runaway-memory-usage/203483 "2019-10-14T19:11:00Z")

</div>

I am deploying Elastic 7.4.0 in my cluster, specifying -Xms4096M -Xmx4096M for the nodes, but I continue to run into pods getting evicted for memory pressure. Examples: The node was low on resource: memory. Container e…

[Previous page](https://discuss.elastic.co/c/orchestration/eck/79.md?page=31)

[Next page](https://discuss.elastic.co/c/orchestration/eck/79.md?page=33)
