Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OSS support #1172

Closed
racevedoo opened this issue Jul 1, 2019 · 2 comments
Closed

OSS support #1172

racevedoo opened this issue Jul 1, 2019 · 2 comments

Comments

@racevedoo
Copy link
Contributor

Proposal

Support OSS version. Currently, when I try to use the oss elasticsearch version(image: docker.elastic.co/elasticsearch/elasticsearch-oss:7.2.0), configuring like:

node.master: true
node.data: true
xpack.graph.enabled: false
xpack.ml.enabled: false
xpack.monitoring.enabled: false
xpack.security.enabled: false
xpack.watcher.enabled: false

I get the following error:

Error from server (node[0]: xpack.security.enabled is not user configurable): error when creating "kubernetes/elasticsearch/elasticsearch-logs.yml": admission webhook "validation.elasticsearch.elastic.co" denied the request: node[0]: xpack.security.enabled is not user configurable

Is that intended? Are there any plans to support oss?
Thanks!

@agup006
Copy link

agup006 commented Jul 7, 2019

Hi @racevedoo, ECK turns on security on by default for every cluster and requires the free security features from 6.8+ and 7.1+ which is why that error is appearing. We do not have plans to support OSS at this time

@dzmitry-lahoda
Copy link

so we are going to secure whole ES via Istio and do not need xpack security. why it is enforced?

apiVersion: elasticsearch.k8s.elastic.co/v1alpha1
kind: Elasticsearch
metadata:
  name: elastic-tracing
spec:
  version: 7.2.0
  nodes:
  - nodeCount: 2 # at least some safety
    config:
      node.master: true
      node.data: true
      node.ingest: true
      xpack.security.enabled: false
      # xpack.security.authc.token.enabled: false
      # xpack.security.http.ssl.enabled: false
      # xpack.security.transport.ssl.enabled: false
    volumeClaimTemplates:
    - metadata:
        name: elasticsearch-data # note: elasticsearch-data must be the name of the Elasticsearch volume
      spec:
        accessModes:
        - ReadWriteOnce
        resources:
          requests:
            storage: 10Gi
        #storageClassName: standard # can be any available storage class      
    secureSettings: []

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants