Unable to setup searchguard in kubernetes cluster

Search Guard
1

Hi All,

Java version: 1.8.0_181

OS:- Ubuntu

ES:- 6.5.4

SG:- 6:6.5.4-24.0

I am trying to setup Search Guard in kubernetes Elasticsearch cluster and I am following the below project,

https://github.com/xanthous-tech/k8s-es-search-guard-cluster

However I am unable to bring up the pods and below is the error I am getting in the logs of master pod,

misra_debasish91@cloudshell:~/searchguard/k8s-es-search-guard-cluster/elasticsearch$ kubectl logs es-master-57595cdcb7-5vrh7
chown: /elasticsearch/config/tlsconfig.yml: Read-only file system
chown: /elasticsearch/config/…data: Read-only file system
chown: /elasticsearch/config/…2019_02_13_18_36_49.509944129/tlsconfig.yml: Read-only file system
chown: /elasticsearch/config/…2019_02_13_18_36_49.509944129/elasticsearch.yml: Read-only file system
chown: /elasticsearch/config/…2019_02_13_18_36_49.509944129: Read-only file system
chown: /elasticsearch/config/…2019_02_13_18_36_49.509944129: Read-only file system
chown: /elasticsearch/config/elasticsearch.yml: Read-only file system
chown: /elasticsearch/config: Read-only file system
chown: /elasticsearch/config: Read-only file system
Exception in thread “main” java.nio.file.NoSuchFileException: /elasticsearch/config/jvm.options
at sun.nio.fs.UnixException.translateToIOException(UnixException.java:86)
at sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:102)
at sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:107)
at sun.nio.fs.UnixFileSystemProvider.newByteChannel(UnixFileSystemProvider.java:214)
at java.nio.file.Files.newByteChannel(Files.java:361)
at java.nio.file.Files.newByteChannel(Files.java:407)
at java.nio.file.spi.FileSystemProvider.newInputStream(FileSystemProvider.java:384)
at java.nio.file.Files.newInputStream(Files.java:152)
at org.elasticsearch.tools.launchers.JvmOptionsParser.main(JvmOptionsParser.java:58)

I have attached the below file,

es-master.yaml

es-data-statefulset.yaml

es-svc.yaml

es-config.yaml

es-discovery-svc.yaml

es-data-svc.yaml

Please share your thoughts and help me to resolve this error.

Regards,

Ganeshbabu R

es-config.yaml (2.13 KB)

es-discovery-svc.yaml (271 Bytes)

es-master.yaml (2.7 KB)

es-svc.yaml (237 Bytes)

es-data-stateful.yaml (2.76 KB)

es-data-svc.yaml (244 Bytes)

2

I guess this is more a question for the xanthous-tech/k8s-es-search-guard-cluster project and the issue seems not Search Guard related.
We recommend GitHub - floragunncom/search-guard-helm: Search Guard Helm Chart for Kubernetes, maybe this works better for you.

···

Am 13.02.2019 um 20:34 schrieb Ganesh Babu <babu.ganesh0708@gmail.com>:

Hi All,

Java version: 1.8.0_181
OS:- Ubuntu
ES:- 6.5.4
SG:- 6:6.5.4-24.0

I am trying to setup Search Guard in kubernetes Elasticsearch cluster and I am following the below project,

GitHub - xanthous-tech/k8s-es-search-guard-cluster: Elasticsearch cluster on top of Kubernetes made easy.

However I am unable to bring up the pods and below is the error I am getting in the logs of master pod,

misra_debasish91@cloudshell:~/searchguard/k8s-es-search-guard-cluster/elasticsearch$ kubectl logs es-master-57595cdcb7-5vrh7
chown: /elasticsearch/config/tlsconfig.yml: Read-only file system
chown: /elasticsearch/config/..data: Read-only file system
chown: /elasticsearch/config/..2019_02_13_18_36_49.509944129/tlsconfig.yml: Read-only file system
chown: /elasticsearch/config/..2019_02_13_18_36_49.509944129/elasticsearch.yml: Read-only file system
chown: /elasticsearch/config/..2019_02_13_18_36_49.509944129: Read-only file system
chown: /elasticsearch/config/..2019_02_13_18_36_49.509944129: Read-only file system
chown: /elasticsearch/config/elasticsearch.yml: Read-only file system
chown: /elasticsearch/config: Read-only file system
chown: /elasticsearch/config: Read-only file system
Exception in thread "main" java.nio.file.NoSuchFileException: /elasticsearch/config/jvm.options
        at sun.nio.fs.UnixException.translateToIOException(UnixException.java:86)
        at sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:102)
        at sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:107)
        at sun.nio.fs.UnixFileSystemProvider.newByteChannel(UnixFileSystemProvider.java:214)
        at java.nio.file.Files.newByteChannel(Files.java:361)
        at java.nio.file.Files.newByteChannel(Files.java:407)
        at java.nio.file.spi.FileSystemProvider.newInputStream(FileSystemProvider.java:384)
        at java.nio.file.Files.newInputStream(Files.java:152)
        at org.elasticsearch.tools.launchers.JvmOptionsParser.main(JvmOptionsParser.java:58)

I have attached the below file,
es-master.yaml
es-data-statefulset.yaml
es-svc.yaml
es-config.yaml
es-discovery-svc.yaml
es-data-svc.yaml

Please share your thoughts and help me to resolve this error.

Regards,
Ganeshbabu R

--
You received this message because you are subscribed to the Google Groups "Search Guard Community Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.
To post to this group, send email to search-guard@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/5d2e2725-4fbd-4340-95c2-4983fd9eb5b2%40googlegroups.com\.
For more options, visit https://groups.google.com/d/optout\.
<es-config.yaml><es-discovery-svc.yaml><es-master.yaml><es-svc.yaml><es-data-stateful.yaml><es-data-svc.yaml>