SlideShare a Scribd company logo
1
Elasticsearch Vietnam
Date: Nov 17, 2022
Nov 17, 2022
8:15 - 8:45 PM (ICT)
GFT Technologies Group
Tyler Nguyen
APAC Solution Architect
Operations on Kubernetes:
Key Specificities
3
Let’s get started!
4
Agenda
● Introduction
● Rationale
● Best Practices
● Conclusion
5
Introduction
6
GFT in 60 seconds
7
8
Me in a nutshell
● Cloud platform evangelist
● 12+ years experience in IT industry
● APAC Solution Architect @ GFT
Technologies Group
● Administrator of of Vietnam Elasticsearch
Community
● Student Mentor & Sponsor @ Vietseeds
Foundation
● Solo traveller / Metalhead / Coffeeholic :D<
9
Rationale
10
Discussion
● What is Container Orchestration Platform? Pros n Cons?
● Why do we deploy Elasticsearch on Kubernetes?
● Is Kubernetes a Good Choice for Elasticsearch?
● Challenge?
● Suggestion?
AVAILABILITY
Amount of the system's uptime
in a given time period
RESILIENCE
Ability to maintain the capability
in the face of a disruption
ELASTICITY
Adapting to workload changes
by provisioning and
deprovisioning resources in an
autonomic manner
GRANULARITY
Increasing the system's capacity
and performance through
incremental processor
expansion.
Concerns
12
Best Practices
13
● High availability.(*)
● Proper specifications.
● System reservations.
● Use systemd cgroups driver.
● Prefer cgroup v2.(*)
● BAU processes.
● Disaster recovery and Backups.
● Data security.
DOs
● Single-node cluster.
● Same specification for all
nodes.
● No system reservations.
● No limit resource allocation.
● No expandable storage
management.
● No replication, backups,
disaster recovery.
● No data encryption in-transit
and encryption-at-rest.
DONTs
Key Point #1: Ensure the K8s Infrastructure Robustness
14
● Type-based nodes isolation.
● Resources allocation.
● Storage class of service.
● Firewall and network policies.
● Role-based Access Control
(RBAC).
● Use the Elasticsearch latest
version.
● Consider using Elasticsearch
Operator (aka ECK) if possible.
DOs
● Standalone Elasticsearch
cluster.
● No dedicated master-eligible
nodes.
● Use default storage class.
● Same resources allocation.
● No RBAC.
● Public accessible.
● Deprecated Elasticsearch
versions (<5.x)
DONTs
Key Point #2: Elasticsearch Provisioning
15
● Update strategy.
● Graceful shutdown.
● Autoscaling(*)
.
● Readiness and Liveness Probes.
● Headless services.
● Observability stack.
● Container smaller image sizes.
● Cross-cluster replication(*)
.
DOs
● Single-node cluster.
● Same specification for all
nodes.
● Recreate deployment strategy.
● Manual scaling.
● No healthchecks.
● Communication through load
balancers.
● No observability stack.
DONTs
Key Point #3: Elasticsearch Operations - Cluster Level
16
● Index organization.
● Using alias.
● Retention.
● Utilize Reindex API.
● Utilize Forcemerge(*)
.
● Single-type Index.
● Index Routing.
● Sharding and sizing strategies.
DOs
● No alias.
● No retention.
● Multi-type Index.
● Beware Delete Index API.
● Short refresh interval
● Dynamic string mappings
DONTs
Key Point #4: Elasticsearch Operations - Index Level
17
Summary
18
Conclusions
● High availability oriented design pattern.
● Native cloud with Elasticsearch Cloud on Kubernetes (ECK)
● Update strategies (especially in Elasticsearch/Kubernetes version upgrade).
● An essential role of observability stack.
● Consideration of using managed services to avoid operations overhead.
● Nodes/Indices/Shards strategies.
19
Elastic is a Search Company.
www.elastic.co
Thank You
20
Contact us
● tylern91.github.io 󰗏 Find me
● fb.com/groups/elasticsearchvn 󰗏 Elasticsearch Vietnam Group

More Related Content

What's hot (20)

PPTX
Coding standards for java
maheshm1206
 
PPTX
Exploring MongoDB & Elasticsearch: Better Together
ObjectRocket
 
PPTX
PROCEDIMIENTO E INSTALACIÓN DE VALVULA BREAK AWAY wong.pptx
Victor Barzola
 
PPTX
NGINX: Basics and Best Practices
NGINX, Inc.
 
PPTX
Nginx A High Performance Load Balancer, Web Server & Reverse Proxy
Amit Aggarwal
 
PPT
How to manage a big scale HTML/CSS project
Renoir Boulanger
 
PDF
Índice del libro "Hacking con Drones" de 0xWord
Telefónica
 
PDF
Kubernetes Webinar - Using ConfigMaps & Secrets
Janakiram MSV
 
PDF
Complete MVC on NodeJS
Hüseyin BABAL
 
PDF
Lubricación y sistema de enfriamiento II
rottwailler
 
PPTX
End-to-End CI/CD at scale with Infrastructure-as-Code on AWS
Bhuvaneswari Subramani
 
PDF
Manual Operador L150H.pdf
LeoChil1
 
PPTX
Đánh giá tải với Gatling [Meetup #21 - 02]
Vietnam Open Infrastructure User Group
 
PDF
Sirius Web Advanced : Customize and Extend the Platform
Obeo
 
PPTX
REST Problems
predic8
 
PPTX
Introduction to Linux Exploit Development
johndegruyter
 
PDF
gRPC and Microservices
Jonathan Gomez
 
PPTX
Express JS Rest API Tutorial
Simplilearn
 
PDF
Aks pimarox from zero to hero
Johan Biere
 
PPTX
Prometheus 101
Paul Podolny
 
Coding standards for java
maheshm1206
 
Exploring MongoDB & Elasticsearch: Better Together
ObjectRocket
 
PROCEDIMIENTO E INSTALACIÓN DE VALVULA BREAK AWAY wong.pptx
Victor Barzola
 
NGINX: Basics and Best Practices
NGINX, Inc.
 
Nginx A High Performance Load Balancer, Web Server & Reverse Proxy
Amit Aggarwal
 
How to manage a big scale HTML/CSS project
Renoir Boulanger
 
Índice del libro "Hacking con Drones" de 0xWord
Telefónica
 
Kubernetes Webinar - Using ConfigMaps & Secrets
Janakiram MSV
 
Complete MVC on NodeJS
Hüseyin BABAL
 
Lubricación y sistema de enfriamiento II
rottwailler
 
End-to-End CI/CD at scale with Infrastructure-as-Code on AWS
Bhuvaneswari Subramani
 
Manual Operador L150H.pdf
LeoChil1
 
Đánh giá tải với Gatling [Meetup #21 - 02]
Vietnam Open Infrastructure User Group
 
Sirius Web Advanced : Customize and Extend the Platform
Obeo
 
REST Problems
predic8
 
Introduction to Linux Exploit Development
johndegruyter
 
gRPC and Microservices
Jonathan Gomez
 
Express JS Rest API Tutorial
Simplilearn
 
Aks pimarox from zero to hero
Johan Biere
 
Prometheus 101
Paul Podolny
 

Similar to Elasticsearch Operations on K8s - Key Specificities (20)

PPTX
Container orchestration and microservices world
Karol Chrapek
 
PPTX
Migrating from oracle soa suite to microservices on kubernetes
Konveyor Community
 
PDF
Introduction to containers, k8s, Microservices & Cloud Native
Terry Wang
 
PPTX
Database as a Service (DBaaS) on Kubernetes
ObjectRocket
 
PDF
[Virtual Meetup] Using Elasticsearch as a Time-Series Database in the Endpoin...
Anna Ossowski
 
PDF
Scaling Open edX with Kubernetes
Appsembler
 
PDF
Kubernetes intro
Pravin Magdum
 
PPTX
Docker on Amazon ECS
Deepak Kumar
 
PPTX
Introduction to rook
Rohan Gupta
 
PPTX
Kubernetes @ Squarespace (SRE Portland Meetup October 2017)
Kevin Lynch
 
PPTX
Comparison between zookeeper, etcd 3 and other distributed coordination systems
Imesha Sudasingha
 
PDF
Introduction to Kubernetes and Google Container Engine (GKE)
Opsta
 
PDF
Microservices at Mercari
Google Cloud Platform - Japan
 
PDF
How LogDNA Scaled Elasticsearch on Kubernetes
LogDNA
 
PDF
Scheduling a fuller house - Talk at QCon NY 2016
Sharma Podila
 
PDF
Netflix Container Scheduling and Execution - QCon New York 2016
aspyker
 
PPTX
Introduction to kubernetes
Rishabh Indoria
 
PDF
Top 10 present and future innovations in the NoSQL Cassandra ecosystem (2022)
Cédrick Lunven
 
PDF
Creating Kubernetes Autoscalers
Jamie Thompson
 
PPTX
Hello, Docker!
Michael Kwesi Essandoh
 
Container orchestration and microservices world
Karol Chrapek
 
Migrating from oracle soa suite to microservices on kubernetes
Konveyor Community
 
Introduction to containers, k8s, Microservices & Cloud Native
Terry Wang
 
Database as a Service (DBaaS) on Kubernetes
ObjectRocket
 
[Virtual Meetup] Using Elasticsearch as a Time-Series Database in the Endpoin...
Anna Ossowski
 
Scaling Open edX with Kubernetes
Appsembler
 
Kubernetes intro
Pravin Magdum
 
Docker on Amazon ECS
Deepak Kumar
 
Introduction to rook
Rohan Gupta
 
Kubernetes @ Squarespace (SRE Portland Meetup October 2017)
Kevin Lynch
 
Comparison between zookeeper, etcd 3 and other distributed coordination systems
Imesha Sudasingha
 
Introduction to Kubernetes and Google Container Engine (GKE)
Opsta
 
Microservices at Mercari
Google Cloud Platform - Japan
 
How LogDNA Scaled Elasticsearch on Kubernetes
LogDNA
 
Scheduling a fuller house - Talk at QCon NY 2016
Sharma Podila
 
Netflix Container Scheduling and Execution - QCon New York 2016
aspyker
 
Introduction to kubernetes
Rishabh Indoria
 
Top 10 present and future innovations in the NoSQL Cassandra ecosystem (2022)
Cédrick Lunven
 
Creating Kubernetes Autoscalers
Jamie Thompson
 
Hello, Docker!
Michael Kwesi Essandoh
 
Ad

Recently uploaded (20)

PDF
Agentic AI lifecycle for Enterprise Hyper-Automation
Debmalya Biswas
 
PPTX
AUTOMATION AND ROBOTICS IN PHARMA INDUSTRY.pptx
sameeraaabegumm
 
PPTX
Webinar: Introduction to LF Energy EVerest
DanBrown980551
 
PPTX
"Autonomy of LLM Agents: Current State and Future Prospects", Oles` Petriv
Fwdays
 
PDF
Mastering Financial Management in Direct Selling
Epixel MLM Software
 
PPTX
From Sci-Fi to Reality: Exploring AI Evolution
Svetlana Meissner
 
PDF
Newgen 2022-Forrester Newgen TEI_13 05 2022-The-Total-Economic-Impact-Newgen-...
darshakparmar
 
PDF
"AI Transformation: Directions and Challenges", Pavlo Shaternik
Fwdays
 
PDF
“NPU IP Hardware Shaped Through Software and Use-case Analysis,” a Presentati...
Edge AI and Vision Alliance
 
PPTX
OpenID AuthZEN - Analyst Briefing July 2025
David Brossard
 
PDF
Building Real-Time Digital Twins with IBM Maximo & ArcGIS Indoors
Safe Software
 
PDF
CIFDAQ Token Spotlight for 9th July 2025
CIFDAQ
 
PDF
Transcript: New from BookNet Canada for 2025: BNC BiblioShare - Tech Forum 2025
BookNet Canada
 
PDF
New from BookNet Canada for 2025: BNC BiblioShare - Tech Forum 2025
BookNet Canada
 
PDF
Go Concurrency Real-World Patterns, Pitfalls, and Playground Battles.pdf
Emily Achieng
 
PPTX
Q2 FY26 Tableau User Group Leader Quarterly Call
lward7
 
PDF
Jak MŚP w Europie Środkowo-Wschodniej odnajdują się w świecie AI
dominikamizerska1
 
PDF
Exolore The Essential AI Tools in 2025.pdf
Srinivasan M
 
PDF
The Rise of AI and IoT in Mobile App Tech.pdf
IMG Global Infotech
 
DOCX
Cryptography Quiz: test your knowledge of this important security concept.
Rajni Bhardwaj Grover
 
Agentic AI lifecycle for Enterprise Hyper-Automation
Debmalya Biswas
 
AUTOMATION AND ROBOTICS IN PHARMA INDUSTRY.pptx
sameeraaabegumm
 
Webinar: Introduction to LF Energy EVerest
DanBrown980551
 
"Autonomy of LLM Agents: Current State and Future Prospects", Oles` Petriv
Fwdays
 
Mastering Financial Management in Direct Selling
Epixel MLM Software
 
From Sci-Fi to Reality: Exploring AI Evolution
Svetlana Meissner
 
Newgen 2022-Forrester Newgen TEI_13 05 2022-The-Total-Economic-Impact-Newgen-...
darshakparmar
 
"AI Transformation: Directions and Challenges", Pavlo Shaternik
Fwdays
 
“NPU IP Hardware Shaped Through Software and Use-case Analysis,” a Presentati...
Edge AI and Vision Alliance
 
OpenID AuthZEN - Analyst Briefing July 2025
David Brossard
 
Building Real-Time Digital Twins with IBM Maximo & ArcGIS Indoors
Safe Software
 
CIFDAQ Token Spotlight for 9th July 2025
CIFDAQ
 
Transcript: New from BookNet Canada for 2025: BNC BiblioShare - Tech Forum 2025
BookNet Canada
 
New from BookNet Canada for 2025: BNC BiblioShare - Tech Forum 2025
BookNet Canada
 
Go Concurrency Real-World Patterns, Pitfalls, and Playground Battles.pdf
Emily Achieng
 
Q2 FY26 Tableau User Group Leader Quarterly Call
lward7
 
Jak MŚP w Europie Środkowo-Wschodniej odnajdują się w świecie AI
dominikamizerska1
 
Exolore The Essential AI Tools in 2025.pdf
Srinivasan M
 
The Rise of AI and IoT in Mobile App Tech.pdf
IMG Global Infotech
 
Cryptography Quiz: test your knowledge of this important security concept.
Rajni Bhardwaj Grover
 
Ad

Elasticsearch Operations on K8s - Key Specificities

  • 2. Nov 17, 2022 8:15 - 8:45 PM (ICT) GFT Technologies Group Tyler Nguyen APAC Solution Architect Operations on Kubernetes: Key Specificities
  • 4. 4 Agenda ● Introduction ● Rationale ● Best Practices ● Conclusion
  • 6. 6 GFT in 60 seconds
  • 7. 7
  • 8. 8 Me in a nutshell ● Cloud platform evangelist ● 12+ years experience in IT industry ● APAC Solution Architect @ GFT Technologies Group ● Administrator of of Vietnam Elasticsearch Community ● Student Mentor & Sponsor @ Vietseeds Foundation ● Solo traveller / Metalhead / Coffeeholic :D<
  • 10. 10 Discussion ● What is Container Orchestration Platform? Pros n Cons? ● Why do we deploy Elasticsearch on Kubernetes? ● Is Kubernetes a Good Choice for Elasticsearch? ● Challenge? ● Suggestion?
  • 11. AVAILABILITY Amount of the system's uptime in a given time period RESILIENCE Ability to maintain the capability in the face of a disruption ELASTICITY Adapting to workload changes by provisioning and deprovisioning resources in an autonomic manner GRANULARITY Increasing the system's capacity and performance through incremental processor expansion. Concerns
  • 13. 13 ● High availability.(*) ● Proper specifications. ● System reservations. ● Use systemd cgroups driver. ● Prefer cgroup v2.(*) ● BAU processes. ● Disaster recovery and Backups. ● Data security. DOs ● Single-node cluster. ● Same specification for all nodes. ● No system reservations. ● No limit resource allocation. ● No expandable storage management. ● No replication, backups, disaster recovery. ● No data encryption in-transit and encryption-at-rest. DONTs Key Point #1: Ensure the K8s Infrastructure Robustness
  • 14. 14 ● Type-based nodes isolation. ● Resources allocation. ● Storage class of service. ● Firewall and network policies. ● Role-based Access Control (RBAC). ● Use the Elasticsearch latest version. ● Consider using Elasticsearch Operator (aka ECK) if possible. DOs ● Standalone Elasticsearch cluster. ● No dedicated master-eligible nodes. ● Use default storage class. ● Same resources allocation. ● No RBAC. ● Public accessible. ● Deprecated Elasticsearch versions (<5.x) DONTs Key Point #2: Elasticsearch Provisioning
  • 15. 15 ● Update strategy. ● Graceful shutdown. ● Autoscaling(*) . ● Readiness and Liveness Probes. ● Headless services. ● Observability stack. ● Container smaller image sizes. ● Cross-cluster replication(*) . DOs ● Single-node cluster. ● Same specification for all nodes. ● Recreate deployment strategy. ● Manual scaling. ● No healthchecks. ● Communication through load balancers. ● No observability stack. DONTs Key Point #3: Elasticsearch Operations - Cluster Level
  • 16. 16 ● Index organization. ● Using alias. ● Retention. ● Utilize Reindex API. ● Utilize Forcemerge(*) . ● Single-type Index. ● Index Routing. ● Sharding and sizing strategies. DOs ● No alias. ● No retention. ● Multi-type Index. ● Beware Delete Index API. ● Short refresh interval ● Dynamic string mappings DONTs Key Point #4: Elasticsearch Operations - Index Level
  • 18. 18 Conclusions ● High availability oriented design pattern. ● Native cloud with Elasticsearch Cloud on Kubernetes (ECK) ● Update strategies (especially in Elasticsearch/Kubernetes version upgrade). ● An essential role of observability stack. ● Consideration of using managed services to avoid operations overhead. ● Nodes/Indices/Shards strategies.
  • 19. 19 Elastic is a Search Company. www.elastic.co Thank You
  • 20. 20 Contact us ● tylern91.github.io 󰗏 Find me ● fb.com/groups/elasticsearchvn 󰗏 Elasticsearch Vietnam Group