The elasticsearch infrastructure is based on the official HELM chart from 3. January 2020 and elasticsearch version 7.5.1.

HELM is required in the version 2.

If you didn't:

• create a docker image yet, do it first.
• configure HELM yet, do it first.
• configure kubernetes cluster, do it first.

After setting up previous steps you need to create a StorageClass to be able to claim a volume with the SSD type. Please run: (this has to be executed only once on the new cluster)

kubectl apply -f deploy/storage-class.yml

Add helm repo

helm repo add elastic https://helm.elastic.co

To install elasticsearch using helm follow these steps (can be applied at the same time, the order is not important):

helm install --name elasticsearch-master --values deploy/master.yml elastic/elasticsearch
helm install --name elasticsearch-data --values deploy/data.yml elastic/elasticsearch
helm install --name elasticsearch-client --values deploy/client.yml elastic/elasticsearch

The docker image is built in the CI and pushed to erento-docker container registry. The docker image version is specified in the Dockerfile & Jenkinsfile (both have to be updated after upgrade). Please remember that creating the docker image with the same image name and tag will most likely not install correct image because the downloaded images are cached and therefore the old image will be used.

If you create a new docker image you have to modify the image tag in /deploy/*.yml files.

To build the image manually (e.g.: for testing locally) run:

docker build -t erento_elastic_search .

Create a new cluster:

export ZONE=europe-west1-b
export CLUSTER=elasticsearch-cluster
export MACHINE_TYPE=n1-standard-4
export K8S_VERSION=1.14.9-gke.2
gcloud container clusters create "$CLUSTER" --zone "$ZONE" --metadata disable-legacy-endpoints=true --enable-ip-alias --max-pods-per-node 20 --cluster-version "$K8S_VERSION" --disk-type pd-ssd --enable-autoupgrade --enable-stackdriver-kubernetes --image-type COS --machine-type "$MACHINE_TYPE" --node-version "$K8S_VERSION" --preemptible

Note: FOR PRODUCTION USE --region europe-west1 to have regional cluster

and install Helm:

helm init --history-max 200

Wait until the tiller pod is running and add the service account:

kubectl create serviceaccount --namespace kube-system tiller
kubectl create clusterrolebinding tiller-cluster-rule --clusterrole=cluster-admin --serviceaccount=kube-system:tiller
kubectl patch deploy --namespace kube-system tiller-deploy -p '{"spec":{"template":{"spec":{"serviceAccount":"tiller"}}}}'

Do not forget to clean up after testing by running:

gcloud container clusters delete "$CLUSTER" --zone "$ZONE"

For testing, it is better to uncomment a LoadBalancer in the ./deploy/client.yml to get a public IP address for communication with elasticsearch.

Download new oxt file from Language support of LibreOffice and unzip the file.

Afterwards replace or add xx_XX.dic and xx_XX.aff in /hunspell/xx_XX/ and recreate docker image.

• While using synonyms we cannot use german_stop filter due to issue in Lucene & closed ticket on elasticsearch.
• Every pod emits a message: OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release. this is due to GC in Java 9. After elastic upgrades their default image to Java 10 we can use a new GC which is not based on this deprecated option, see more.

• When the elasticsearch pods are down, look at the following post mortem report.

• Please, fork our repository. It will help us to follow your changes and give you a possibility to pull any future upgrades we will provide over time.
• Change dictionaries/synonyms.txt to be aligned with your business.
• Create your own docker image based on Dockerfile or use the default one if you don't need any plugins, synonyms or hunspell. (You cannot use our docker image because it is published to the private container registry.)
• Change image & imageTag in the deploy/*.yml files to your docker image.
• You will have to remove or change imagePullSecrets in deploy/*.yml. It is used to be authorized to pull the docker image from the private registry.