97 lines
2.8 KiB
YAML
97 lines
2.8 KiB
YAML
# es-sts.yaml
|
||
apiVersion: apps/v1
|
||
kind: StatefulSet
|
||
metadata:
|
||
name: elasticsearch
|
||
namespace: elastic-system
|
||
spec:
|
||
serviceName: "elasticsearch" # 必须与 Headless Service 名一致
|
||
replicas: 3 # 生产环境至少3节点！
|
||
selector:
|
||
matchLabels:
|
||
app: elasticsearch
|
||
template:
|
||
metadata:
|
||
labels:
|
||
app: elasticsearch
|
||
spec:
|
||
# ⚠️ 关键：避免多个ES Pod调度到同一Node（防单点故障）
|
||
affinity:
|
||
podAntiAffinity:
|
||
requiredDuringSchedulingIgnoredDuringExecution:
|
||
- labelSelector:
|
||
matchExpressions:
|
||
- key: app
|
||
operator: In
|
||
values: ["elasticsearch"]
|
||
topologyKey: kubernetes.io/hostname
|
||
|
||
initContainers:
|
||
# 必须：调整 OS 内核参数（ES 要求）
|
||
- name: init-sysctl
|
||
image: busybox:1.35
|
||
securityContext:
|
||
privileged: true
|
||
command:
|
||
- sysctl
|
||
- -w
|
||
- vm.max_map_count=262144
|
||
- sysctl
|
||
- -w
|
||
- fs.file-max=65536
|
||
|
||
containers:
|
||
- name: elasticsearch
|
||
image: docker.elastic.co/elasticsearch/elasticsearch:9.2.2
|
||
env:
|
||
- name: cluster.name
|
||
value: "k8s-es-cluster"
|
||
- name: node.name
|
||
valueFrom:
|
||
fieldRef:
|
||
fieldPath: metadata.name # → es-0, es-1, es-2
|
||
- name: discovery.seed_hosts
|
||
value: "elasticsearch-0.elasticsearch,elasticsearch-1.elasticsearch,elasticsearch-2.elasticsearch"
|
||
- name: cluster.initial_master_nodes
|
||
value: "elasticsearch-0,elasticsearch-1,elasticsearch-2"
|
||
- name: ES_JAVA_OPTS
|
||
value: "-Xms2g -Xmx2g"
|
||
- name: network.host
|
||
value: "0.0.0.0"
|
||
ports:
|
||
- containerPort: 9200
|
||
name: http
|
||
- containerPort: 9300
|
||
name: transport
|
||
volumeMounts:
|
||
- name: data
|
||
mountPath: /usr/share/elasticsearch/data
|
||
readinessProbe:
|
||
httpGet:
|
||
path: /_cluster/health
|
||
port: 9200
|
||
initialDelaySeconds: 30
|
||
periodSeconds: 10
|
||
livenessProbe:
|
||
httpGet:
|
||
path: /_cluster/health
|
||
port: 9200
|
||
initialDelaySeconds: 60
|
||
periodSeconds: 30
|
||
|
||
# ⚠️ 必须设置 securityContext（ES 9+ 默认以非 root 启动）
|
||
securityContext:
|
||
fsGroup: 1000
|
||
runAsUser: 1000
|
||
runAsNonRoot: true
|
||
|
||
# ⚠️ 关键：每个副本独享 PVC → 自动创建3个 PV（各绑定一块 CBS）
|
||
volumeClaimTemplates:
|
||
- metadata:
|
||
name: data
|
||
spec:
|
||
accessModes: [ "ReadWriteOnce" ] # 腾讯云 CBS 支持 RWO
|
||
storageClassName: cbs # 或 cbs-premium（高性能 SSD）
|
||
resources:
|
||
requests:
|
||
storage: 100Gi # 按需调整 |