Using Kubernetes Quality of Service Classes Splunk Operator does not support vCPU licensing. StandaloneĮach Standalone Pod: 12 Physical CPU Cores or 24 vCPU at 2Ghz or greater per core, 12GB RAM.Įach Search Head Pod: 16 Physical CPU Cores or 32 vCPU at 2Ghz or greater per core, 12GB RAM.Įach Indexer Pod: 12 Physical CPU cores, or 24 vCPU at 2GHz or greater per core, 12GB RAM. Minimum Reference Hardwareīased on Splunk Enterprise Reference Hardware documentation, a summary of the minimum reference hardware requirements is given below. Please be aware that this may impact performance of other non-Splunk workloads. We would also recommend following the same guidance on Splunk Enterprise for disabling Transparent Huge Pages (THP) for the nodes in your Kubernetes cluster. Refer to the Splunk Enterprise Reference Hardware documentation for additional details. The resource guidelines for running production Splunk Enterprise instances in pods through the Splunk Operator are the same as running Splunk Enterprise natively on a supported operating system and file system. Review the Change Log page for a history of changes and Splunk Enterprise compatibility for each release. If your cluster does not have access to pull from Docker Hub, see the Required Images Documentation page.
splunk/splunk:: The Splunk Enterprise image (8.2.3.3 or later)Īll of the Splunk Enterprise images are publicly available on Docker Hub. splunk/splunk-operator: The Splunk Operator image built by this repository or the official release (1.0.5 or later). The Splunk Operator requires these docker images to be present or available to your Kubernetes cluster: Premium apps such as Enterprise Security and IT Service Intelligence are currently not supported. Splunk Apps InstallationĪpps and add-ons can be installed using the Splunk Operator by following the instructions given at Installing Splunk Apps. Before installing or upgrading the Splunk Operator, review the Change Log to verify version compatibility with Splunk Enterprise releases. Microsoft Azure Kubernetes Service (AKS), Red Hat OpenShiftĮach Splunk Operator release has specific Splunk Enterprise compatibility requirements. Splunk Development & Testing PlatformsĪmazon Elastic Kubernetes Service (EKS), Google Kubernetes Engine (GKE) We do not have platform recommendations, but this is a table of platforms that our developers, customers, and partners have used successfully with the Splunk Operator. The Splunk Operator should work with any CNCF certified distribution of Kubernetes. Kubernetes, version 1.16.2+ and later (x86 64-bit only). Prerequisites for the Splunk Operator Supported Kubernetes Versions Review the Change Log page for a history of changes in each release. GitHub splunk/splunk-operator Known Issues for the Splunk Operator Slack channel #splunk-operator-for-kubernetes If you’re interested in contributing to the SOK open source project, review the Contributing to the Project page. This direct connection will help us all be more successful and move at a rapid pace. The primary reason why Splunk is taking this approach is to push product development closer to those that use and depend upon it. This unique product will be enhanced, maintained and supported by the community, led by Splunkers with deep subject matter expertise. SPLUNK SUPPORTED: The Splunk Operator for Kubernetes is a supported method for deploying distributed Splunk Enterprise environments using containers.ĬOMMUNITY DEVELOPED: Splunk Operator for Kubernetes is an open source product developed by Splunkers with contributions from the community of partners and customers. Securing Splunk Deployments in Kubernetes. It is divided into the following sections: This guide is intended to help new users get up and running with the The Splunk Operator runs as a container, and uses the Kubernetes operator pattern and custom resources objects to create and manage a scalable and sustainable Splunk Enterprise environment. The Operator simplifies scaling and management of Splunk Enterprise by automating administrative workflows using Kubernetes best practices. The Splunk Operator for Kubernetes enables you to quickly and easily deploy Splunk Enterprise on your choice of private or public cloud provider. Splunk-operator Getting Started with the Splunk Operator for Kubernetes