{{- if (include "elasticsearch.ingest.enabled" . ) }} apiVersion: {{ template "common.capabilities.statefulset.apiVersion" . }} kind: StatefulSet metadata: name: {{ include "elasticsearch.ingest.fullname" . }} namespace: {{ include "common.names.namespace" . | quote }} labels: {{- include "common.labels.standard" . | nindent 4 }} app.kubernetes.io/component: ingest {{- if .Values.useIstioLabels }} ## Istio Labels: https://istio.io/docs/ops/deployment/requirements/ app: ingest {{- end }} {{- if .Values.commonLabels }} {{- include "common.tplvalues.render" ( dict "value" .Values.commonLabels "context" $ ) | nindent 4 }} {{- end }} {{- if or .Values.ingest.annotations .Values.commonAnnotations }} annotations: {{- if .Values.ingest.annotations }} {{- include "common.tplvalues.render" ( dict "value" .Values.ingest.annotations "context" $ ) | nindent 4 }} {{- end }} {{- if .Values.commonAnnotations }} {{- include "common.tplvalues.render" ( dict "value" .Values.commonAnnotations "context" $ ) | nindent 4 }} {{- end }} {{- end }} spec: {{- if not .Values.ingest.autoscaling.enabled }} replicas: {{ .Values.ingest.replicaCount }} {{- end }} podManagementPolicy: {{ .Values.ingest.podManagementPolicy }} selector: matchLabels: {{- include "common.labels.matchLabels" . | nindent 6 }} app.kubernetes.io/component: ingest serviceName: {{ include "elasticsearch.ingest.servicename" . }} {{- if .Values.ingest.updateStrategy }} updateStrategy: {{- toYaml .Values.ingest.updateStrategy | nindent 4 }} {{- end }} template: metadata: labels: {{- include "common.labels.standard" . | nindent 8 }} app.kubernetes.io/component: ingest {{- if .Values.useIstioLabels }} ## Istio Labels: https://istio.io/docs/ops/deployment/requirements/ app: ingest {{- end }} {{- if .Values.ingest.podLabels }} {{- include "common.tplvalues.render" (dict "value" .Values.ingest.podLabels "context" $) | nindent 8 }} {{- end }} annotations: {{- if and (include "elasticsearch.createTlsSecret" .) (not .Values.security.tls.ingest.existingSecret) }} checksum/tls: {{ include (print $.Template.BasePath "/tls-secret.yaml") . | sha256sum }} {{- end }} {{- if .Values.ingest.podAnnotations }} {{- include "common.tplvalues.render" (dict "value" .Values.ingest.podAnnotations "context" $) | nindent 8 }} {{- end }} spec: serviceAccountName: {{ template "elasticsearch.ingest.serviceAccountName" . }} {{- include "elasticsearch.imagePullSecrets" . | nindent 6 }} {{- if .Values.ingest.hostAliases }} hostAliases: {{- include "common.tplvalues.render" (dict "value" .Values.ingest.hostAliases "context" $) | nindent 8 }} {{- end }} {{- if .Values.ingest.affinity }} affinity: {{- include "common.tplvalues.render" (dict "value" .Values.ingest.affinity "context" $) | nindent 8 }} {{- else }} affinity: podAffinity: {{- include "common.affinities.pods" (dict "type" .Values.ingest.podAffinityPreset "component" "ingest" "context" $) | nindent 10 }} podAntiAffinity: {{- include "common.affinities.pods" (dict "type" .Values.ingest.podAntiAffinityPreset "component" "ingest" "context" $) | nindent 10 }} nodeAffinity: {{- include "common.affinities.nodes" (dict "type" .Values.ingest.nodeAffinityPreset.type "key" .Values.ingest.nodeAffinityPreset.key "values" .Values.ingest.nodeAffinityPreset.values) | nindent 10 }} {{- end }} {{- if .Values.ingest.nodeSelector }} nodeSelector: {{- include "common.tplvalues.render" (dict "value" .Values.ingest.nodeSelector "context" $) | nindent 8 }} {{- end }} {{- if .Values.ingest.tolerations }} tolerations: {{- include "common.tplvalues.render" (dict "value" .Values.ingest.tolerations "context" $) | nindent 8 }} {{- end }} {{- if .Values.ingest.schedulerName }} schedulerName: {{ .Values.ingest.schedulerName }} {{- end }} {{- if .Values.ingest.topologySpreadConstraints }} topologySpreadConstraints: {{- include "common.tplvalues.render" (dict "value" .Values.ingest.topologySpreadConstraints "context" $) | nindent 8 }} {{- end }} {{- if .Values.ingest.priorityClassName }} priorityClassName: {{ .Values.ingest.priorityClassName | quote }} {{- end }} {{- if .Values.ingest.podSecurityContext.enabled }} securityContext: {{- omit .Values.ingest.podSecurityContext "enabled" | toYaml | nindent 8 }} {{- end }} {{- if .Values.ingest.terminationGracePeriodSeconds }} terminationGracePeriodSeconds: {{ .Values.ingest.terminationGracePeriodSeconds }} {{- end }} {{- if or .Values.ingest.initContainers .Values.sysctlImage.enabled }} initContainers: {{- if .Values.sysctlImage.enabled }} ## Image that performs the sysctl operation to modify Kernel settings (needed sometimes to avoid boot errors) - name: sysctl image: {{ include "elasticsearch.sysctl.image" . }} imagePullPolicy: {{ .Values.image.pullPolicy | quote }} command: - /bin/bash - -ec - | {{- include "elasticsearch.sysctlIfLess" (dict "key" "vm.max_map_count" "value" "262144") | nindent 14 }} {{- include "elasticsearch.sysctlIfLess" (dict "key" "fs.file-max" "value" "65536") | nindent 14 }} securityContext: privileged: true runAsUser: 0 {{- if .Values.sysctlImage.resources }} resources: {{- toYaml .Values.sysctlImage.resources | nindent 12 }} {{- end }} {{- end }} {{- if .Values.ingest.initContainers }} {{- include "common.tplvalues.render" (dict "value" .Values.ingest.initContainers "context" $) | nindent 8 }} {{- end }} {{- if .Values.initContainers }} {{- include "common.tplvalues.render" (dict "value" .Values.initContainers "context" $) | nindent 8 }} {{- end }} {{- end }} containers: - name: elasticsearch image: {{ include "elasticsearch.image" . }} imagePullPolicy: {{ .Values.image.pullPolicy | quote }} {{- if .Values.ingest.containerSecurityContext.enabled }} securityContext: {{- omit .Values.ingest.containerSecurityContext "enabled" | toYaml | nindent 12 }} {{- end }} {{- if .Values.diagnosticMode.enabled }} command: {{- include "common.tplvalues.render" (dict "value" .Values.diagnosticMode.command "context" $) | nindent 12 }} {{- else if .Values.ingest.command }} command: {{- include "common.tplvalues.render" (dict "value" .Values.ingest.command "context" $) | nindent 12 }} {{- end }} {{- if .Values.diagnosticMode.enabled }} args: {{- include "common.tplvalues.render" (dict "value" .Values.diagnosticMode.args "context" $) | nindent 12 }} {{- else if .Values.ingest.args }} args: {{- include "common.tplvalues.render" (dict "value" .Values.ingest.args "context" $) | nindent 12 }} {{- end }} {{- if .Values.ingest.lifecycleHooks }} lifecycle: {{- include "common.tplvalues.render" (dict "value" .Values.ingest.lifecycleHooks "context" $) | nindent 12 }} {{- end }} env: - name: BITNAMI_DEBUG value: {{ ternary "true" "false" (or .Values.image.debug .Values.diagnosticMode.enabled) | quote }} - name: MY_POD_NAME valueFrom: fieldRef: fieldPath: metadata.name - name: ELASTICSEARCH_IS_DEDICATED_NODE value: "yes" - name: ELASTICSEARCH_NODE_ROLES value: "ingest" - name: ELASTICSEARCH_TRANSPORT_PORT_NUMBER value: {{ .Values.containerPorts.transport | quote }} - name: ELASTICSEARCH_HTTP_PORT_NUMBER value: {{ .Values.containerPorts.restAPI | quote }} - name: ELASTICSEARCH_CLUSTER_NAME value: {{ .Values.clusterName | quote }} - name: ELASTICSEARCH_CLUSTER_HOSTS value: {{ include "elasticsearch.hosts" . | quote }} - name: ELASTICSEARCH_TOTAL_NODES value: {{ add (ternary .Values.master.autoscaling.minReplicas .Values.master.replicaCount .Values.master.autoscaling.enabled) (ternary .Values.data.autoscaling.minReplicas .Values.data.replicaCount .Values.data.autoscaling.enabled) | quote }} - name: ELASTICSEARCH_CLUSTER_MASTER_HOSTS {{- $elasticsearchMasterFullname := include "elasticsearch.master.fullname" . }} {{- $replicas := int (ternary .Values.master.autoscaling.minReplicas .Values.master.replicaCount .Values.master.autoscaling.enabled) }} value: {{ range $i, $e := until $replicas }}{{ printf "%s-%d" $elasticsearchMasterFullname $e }} {{ end }} - name: ELASTICSEARCH_MINIMUM_MASTER_NODES value: {{ add (div (ternary .Values.master.autoscaling.minReplicas .Values.master.replicaCount .Values.master.autoscaling.enabled) 2) 1 | quote }} - name: ELASTICSEARCH_ADVERTISED_HOSTNAME value: "$(MY_POD_NAME).{{ (include "elasticsearch.ingest.servicename" .)}}.{{ include "common.names.namespace" . }}.svc.{{ .Values.clusterDomain }}" {{- if .Values.plugins }} - name: ELASTICSEARCH_PLUGINS value: {{ .Values.plugins | quote }} {{- end }} {{- if .Values.ingest.heapSize }} - name: ELASTICSEARCH_HEAP_SIZE value: {{ .Values.ingest.heapSize | quote }} {{- end }} {{- if .Values.security.enabled }} {{- include "elasticsearch.configure.security" . | nindent 12 }} {{- end }} {{- if .Values.ingest.extraEnvVars }} {{- include "common.tplvalues.render" ( dict "value" .Values.ingest.extraEnvVars "context" $ ) | nindent 12 }} {{- end }} {{- if .Values.extraEnvVars }} {{- include "common.tplvalues.render" ( dict "value" .Values.extraEnvVars "context" $ ) | nindent 12 }} {{- end }} {{- if or .Values.extraEnvVarsCM .Values.extraEnvVarsSecret .Values.ingest.extraEnvVarsCM .Values.ingest.extraEnvVarsSecret }} envFrom: {{- if .Values.extraEnvVarsCM }} - configMapRef: name: {{ include "common.tplvalues.render" ( dict "value" .Values.extraEnvVarsCM "context" $ ) }} {{- end }} {{- if .Values.ingest.extraEnvVarsCM }} - configMapRef: name: {{ include "common.tplvalues.render" ( dict "value" .Values.ingest.extraEnvVarsCM "context" $ ) }} {{- end }} {{- if .Values.extraEnvVarsSecret }} - secretRef: name: {{ include "common.tplvalues.render" ( dict "value" .Values.extraEnvVarsSecret "context" $ ) }} {{- end }} {{- if .Values.ingest.extraEnvVarsSecret }} - secretRef: name: {{ include "common.tplvalues.render" ( dict "value" .Values.ingest.extraEnvVarsSecret "context" $ ) }} {{- end }} {{- end }} ports: - name: rest-api containerPort: {{ .Values.containerPorts.restAPI }} - name: transport containerPort: {{ .Values.containerPorts.transport }} {{- if not .Values.diagnosticMode.enabled }} {{- if .Values.ingest.customStartupProbe }} startupProbe: {{- include "common.tplvalues.render" (dict "value" .Values.ingest.customStartupProbe "context" $) | nindent 12 }} {{- else if .Values.ingest.startupProbe.enabled }} startupProbe: {{- include "common.tplvalues.render" (dict "value" (omit .Values.ingest.startupProbe "enabled") "context" $) | nindent 12 }} tcpSocket: port: rest-api {{- end }} {{- if .Values.ingest.customLivenessProbe }} livenessProbe: {{- include "common.tplvalues.render" (dict "value" .Values.ingest.customLivenessProbe "context" $) | nindent 12 }} {{- else if .Values.ingest.livenessProbe.enabled }} livenessProbe: {{- include "common.tplvalues.render" (dict "value" (omit .Values.ingest.livenessProbe "enabled") "context" $) | nindent 12 }} exec: command: - /opt/bitnami/scripts/elasticsearch/healthcheck.sh {{- end }} {{- if .Values.ingest.customReadinessProbe }} readinessProbe: {{- include "common.tplvalues.render" (dict "value" .Values.ingest.customReadinessProbe "context" $) | nindent 12 }} {{- else if .Values.ingest.readinessProbe.enabled }} readinessProbe: {{- include "common.tplvalues.render" (dict "value" (omit .Values.ingest.readinessProbe "enabled") "context" $) | nindent 12 }} exec: command: - /opt/bitnami/scripts/elasticsearch/healthcheck.sh {{- end }} {{- end }} {{- if .Values.ingest.resources }} resources: {{- toYaml .Values.ingest.resources | nindent 12 }} {{- end }} volumeMounts: - name: data mountPath: /bitnami/elasticsearch/data {{- if .Values.config }} - mountPath: /opt/bitnami/elasticsearch/config/elasticsearch.yml name: config subPath: elasticsearch.yml {{- end }} {{- if .Values.extraConfig }} - mountPath: /opt/bitnami/elasticsearch/config/my_elasticsearch.yml name: config subPath: my_elasticsearch.yml {{- end }} {{- if .Values.security.enabled }} - name: elasticsearch-certificates mountPath: /opt/bitnami/elasticsearch/config/certs readOnly: true {{- end }} {{- if .Values.initScripts }} - name: custom-init-scripts mountPath: /docker-entrypoint-initdb.d/init-scripts {{- end }} {{- if .Values.initScriptsCM }} - name: custom-init-scripts-cm mountPath: /docker-entrypoint-initdb.d/init-scripts-cm {{- end }} {{- if .Values.initScriptsSecret }} - name: custom-init-scripts-secret mountPath: /docker-entrypoint-initdb.d/init-scripts-secret {{- end }} {{- if .Values.ingest.extraVolumeMounts }} {{- include "common.tplvalues.render" (dict "value" .Values.ingest.extraVolumeMounts "context" $) | nindent 12 }} {{- end }} {{- if .Values.extraVolumeMounts }} {{- include "common.tplvalues.render" (dict "value" .Values.extraVolumeMounts "context" $) | nindent 12 }} {{- end }} {{- if .Values.ingest.sidecars }} {{- include "common.tplvalues.render" ( dict "value" .Values.ingest.sidecars "context" $) | nindent 8 }} {{- end }} {{- if .Values.sidecars }} {{- include "common.tplvalues.render" ( dict "value" .Values.sidecars "context" $) | nindent 8 }} {{- end }} volumes: - name: "data" emptyDir: {} {{- if or .Values.config .Values.extraConfig }} - name: config configMap: name: {{ template "common.names.fullname" . }} {{- end }} {{- if .Values.security.enabled }} - name: elasticsearch-certificates secret: secretName: {{ template "elasticsearch.ingest.tlsSecretName" . }} defaultMode: 256 {{- end }} {{- if .Values.initScripts }} - name: custom-init-scripts configMap: name: {{ template "elasticsearch.initScripts" . }} {{- end }} {{- if .Values.initScriptsCM }} - name: custom-init-scripts-cm configMap: name: {{ template "elasticsearch.initScriptsCM" . }} {{- end }} {{- if .Values.initScriptsSecret }} - name: custom-init-scripts-secret secret: secretName: {{ template "elasticsearch.initScriptsSecret" . }} defaultMode: 0755 {{- end }} {{- if .Values.ingest.extraVolumes }} {{- include "common.tplvalues.render" (dict "value" .Values.ingest.extraVolumes "context" $) | nindent 8 }} {{- end }} {{- if .Values.extraVolumes }} {{- include "common.tplvalues.render" (dict "value" .Values.extraVolumes "context" $) | nindent 8 }} {{- end }} {{- end }}