[bitnami/elasticsearch] Modify elasticsearch.yaml - permission denied about charts

[juan131]

Hi @Harrys-git

Could you please try to install the chart using the suggestion below (undoing the security improvement changes)?

• https://github.com/bitnami/charts/tree/main/bitnami/elasticsearch#to-2000

Please let us know if that's the case so we can give you further suggestions to make the chart compatible with your environment.

[Harrys-git]

I attempted the following:
Added the "config" block back to helm chart

1. runAsGroup: 0 = Failed to start pods due to security policies
2. global.compatibility.openshift.adaptSecurityContext: disabled = Failed to start pods due to security policies
3. readOnlyRootFilesystem: false = Unable to access 'path.data' (/opt/bitnami/elasticsearch/data) Caused by AccessDnied Exception. /opt/bitnami/elasticsearch/data (this was on all elastic nodes)

[Harrys-git]

The only way around this was to run an initScript that uses sed to replace the lines necessary. The initScript doesn't work properly without creating an emptyDir like explained in this ticket #24473.
Code is as follows:

extraVolumeMounts:
  - name: empty-dir
    mountPath: /bitnami/elasticsearch
    subPath: app-volume-dir

[juan131]

Hi @Harrys-git

The default configuration file for Elasticsearch (when no custom configuration is provided) looks like this:

http:
  port: "9200"
path:
  data: /bitnami/elasticsearch/data
transport:
  port: "9300"
network:
  host: 10.244.0.6
  publish_host: 10.244.0.6
  bind_host: 0.0.0.0
cluster:
  name: elastic
node:
  name: elasticsearch-master-0
discovery:
  type: single-node
xpack.security.http:
  ssl:
    enabled: false
xpack:
  security:
    enabled: "false"
  ml:
    enabled: "false"

As you can see, the "data" directory is /bitnami/elasticsearch/data where you shouldn't find permissions issues. The problem is that you're overriding this configuration file.

This is sth you can avoid using the extraConfig parameter (which extends the default configuration) instead of the config parameter (which overrides it). Alternatively, you can keep using config as you're doing now, but pleas ensure you add the block below:

path:
  data: /bitnami/elasticsearch/data

[github-actions]

This Issue has been automatically marked as "stale" because it has not had recent activity (for 15 days). It will be closed if no further activity occurs. Thanks for the feedback.

[github-actions]

Due to the lack of activity in the last 5 days since it was marked as "stale", we proceed to close this Issue. Do not hesitate to reopen it later if necessary.