--- apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elasticsearch metadata: name: elasticsearch namespace: elastic-system spec: version: 8.15.2 updateStrategy: changeBudget: maxSurge: 3 maxUnavailable: 1 http: tls: selfSignedCertificate: #去掉https disabled: true nodeSets: - name: default count: 3 podTemplate: spec: initContainers: - name: sysctl #image: docker.elastic.co/elasticsearch/elasticsearch:8.15.2 image: harbor.uenpay.com/base/elasticsearch:8.15.2 securityContext: privileged: true command: ['sh', '-c', 'sysctl -w vm.max_map_count=262144'] containers: - name: elasticsearch #image: docker.elastic.co/elasticsearch/elasticsearch:8.15.2 image: harbor.uenpay.com/base/elasticsearch:8.15.2 env: - name: TZ value: Asia/Shanghai - name: JAVA_OPTS value: -Duser.timezone=Asia/Shanghai - name: ES_JAVA_OPTS value: -Xms8g -Xmx8g - name: cluster.max_shards_per_node value: '5000' resources: requests: memory: 8Gi cpu: 4 limits: #内存要略大于jvm配置,否则造成OOMKill memory: 16Gi cpu: 8 # config: # node.master: true # node.data: true # node.ingest: true volumeClaimTemplates: - metadata: name: elasticsearch-data spec: accessModes: - ReadWriteOnce resources: requests: storage: 3Ti storageClassName: cephrbd-sc --- apiVersion: kibana.k8s.elastic.co/v1 kind: Kibana metadata: name: kibana namespace: elastic-system spec: version: 8.15.2 http: tls: selfSignedCertificate: #去掉https disabled: true count: 1 podTemplate: spec: containers: - name: kibana #image: docker.elastic.co/kibana/kibana:8.15.2 image: harbor.uenpay.com/base/kibana:8.15.2 env: - name: TZ value: Asia/Shanghai - name: JAVA_OPTS value: -Duser.timezone=Asia/Shanghai - name: NODE_OPTIONS value: "--max-old-space-size=2048" - name: I18N_LOCALE value: zh-CN - name: SERVER_PUBLICBASEURL value: "https://kibana.uenpay.com" resources: requests: memory: 4Gi cpu: 2 limits: memory: 8Gi cpu: 4 elasticsearchRef: name: elasticsearch