Run the official docker image with k8s failed

Elastic Stack Beats
1

I got the following message:

Message: oci runtime error: container_linux.go:262: starting container process caused "exec: "filebeat": executable file not found

my daemonset.yaml :

apiVersion: extensions/v1beta1
kind: DaemonSet
metadata:
name: filebeat
namespace: kube-system
labels:
app: filebeat
spec:
template:
metadata:
labels:
app: filebeat
name: filebeat
spec:
containers:

  • name: filebeat
    image: docker.elastic.co/beats/filebeat:5.6.1
    env:
  • name: LOGSTASH_HOSTS
    value: logstash:5044
  • name: LOG_LEVEL
    value: info
  • name: FILEBEAT_HOST
    valueFrom:
    fieldRef:
    fieldPath: spec.nodeName
    volumeMounts:
  • name: varlog
    mountPath: /var/log/containers
  • name: varlogpods
    mountPath: /var/log/pods
    readOnly: true
  • name: varlibdockercontainers
    mountPath: /var/lib/docker/containers
    readOnly: true
  • name: filebeat-config
    mountPath: /usr/share/filebeat
  • name: registry
    mountPath: /usr/share/filebeat/data
    terminationGracePeriodSeconds: 30
    volumes:
  • name: varlog
    hostPath:
    path: /var/log/containers
  • name: varlogpods
    hostPath:
    path: /var/log/pods
  • name: varlibdockercontainers
    hostPath:
    path: /var/lib/docker/containers
  • name: filebeat-config
    configMap:
    name: filebeat-config
  • name: registry
    hostPath:
    path: /var/lib/filebeat/data
2

Hi @pnuzyf,

Could you please check your image actually works? I can do this with the official filebeat:

$ docker run docker.elastic.co/beats/filebeat:5.6.1 filebeat -e -v
2017/09/23 15:29:30.222723 beat.go:297: INFO Home path: [/usr/share/filebeat] Config path: [/usr/share/filebeat] Data path: [/usr/share/filebeat/data] Logs path: [/usr/share/filebeat/logs]
2017/09/23 15:29:30.222768 beat.go:192: INFO Setup Beat: filebeat; Version: 5.6.1
2017/09/23 15:29:30.223121 metrics.go:23: INFO Metrics logging every 30s

Does it work in the same way with your tag?

3

Thank you for your kind reply!

yes, I can execute "docker run docker.elastic.co/beats/filebeat". However, when I run this image with kubernetes , I got the following error message "oci runtime error: container_linux.go:262: starting container process caused "exec: "filebeat": executable file not found".

5

I'm wondering: does it work in the same way for your own tag?