Eugene Chow

@kayrus Thanks for making EFK work on k8s :)

I built the RBAC rules based on the error messages. `es-master` didn't malfunction in my deployment so I thought it didn't need to talk to `kube-apiserver`. Can you advise?

3 masters

Let me check tomorrow. It might be spitting out errors. > On 24 Apr 2017, at 23:30, kayrus wrote: > > They definitely have to communicate to api-server. How do...

`es-master` is not producing any errors. But if you say that it needs to talk to `kube-apiserver`, I believe its RBAC should be the same as those for `es-data` and...

@kayrus what's your advice?

Namespace assignment is in the [deploy.sh](https://github.com/eugene-chow/elk-kubernetes/blob/master/deploy.sh) script so there's no need to specify it in the manifest. A ClusterRoleBinding applies a Role/ClusterRole to the whole cluster. Specifying the namespace has...

I last tested it on 1.5.4. i do have a 1.6.4 cluster but I haven’t yet attempted to deploy ELK. the RBAC should be exactly the same if not similar....

Now that you mention it, I recall that the namespace is needed when you tie the ClusterRole to a ServiceAccount in the ClusterRoleBinding. > On 19 Jun 2017, at 17:32,...

I encountered the same issue with versions 1.2.3 and above. Reverting to 1.2.2 and below makes the problem go away which is similar to the findings in the OP of...