search

elastic / cloud-on-k8s

Elastic Cloud on Kubernetes
Other
2.52k stars 686 forks source link

[DOCS] Add workaround for Enterprise Search security context #7898

Closed leemthompo closed 2 weeks ago

leemthompo commented 2 weeks ago

On ECK, Enterprise Search does not work with readOnlyRootFilesystem: true

This PR tries to document @TattdCodeMonkey's workaround.

leemthompo commented 2 weeks ago

@barkbay @thbkrkr @pebrc would y'all be able to give authorized approval for this docs PR? 🙏

barkbay commented 2 weeks ago

Thanks @leemthompo!

leemthompo commented 2 weeks ago

Thanks @barkbay! Forgot to ask about backporting this PR if you have any preferences?

barkbay commented 2 weeks ago

@leemthompo I created a backport for 2.13 which is our current ECK version: https://github.com/elastic/cloud-on-k8s/pull/7911 Do you think we need to backport this to older versions?

leemthompo commented 2 weeks ago

Thanks @barkbay! I'm not sure if we should backport farther — @ppf2 do you have a preference here?

thbkrkr commented 2 weeks ago

Is this something we should make the operator do by default for Enterprise Search?

pebrc commented 2 weeks ago

I was wondering the same thing. But I wanted to check how big the war files are that are moved to an emptyDir if that is in GBs it is maybe not something we want to do by default?

thbkrkr commented 2 weeks ago

Less than half a GB, so it seems reasonable.

# tested in 8.14.0 (https://github.com/elastic/cloud-on-k8s/blob/main/config/samples/enterprisesearch/ent_es.yaml)
enterprise-search@ent-sample-ent-67fff4c559-zkqmn:~$ du -sh /usr/share/enterprise-search/{tmp,filebeat/data,lib/war}
4.7M    /usr/share/enterprise-search/tmp
24K     /usr/share/enterprise-search/filebeat/data
428M    /usr/share/enterprise-search/lib/war