Splunk Operator for Kubernetes - PVCs for /etc/ and /var fail when trying to use MapR fileystem

crawdaddy18 — Mon, 27 Jul 2020 17:38:11 GMT

Splunkers,

I am attempting to use the Splunk Operator for Kubernetes with the MapR filesystem. The pods fail with the following error:

STDERR:
homePath='/opt/splunk/var/lib/splunk/audit/db' of index=_audit on unusable filesystem.\
Validating databases (splunkd validatedb) failed with code '1'

---

I have created a splunk user on my MapR cluster with uid and gid of 41812 to match that of the splunk user in the pod (I am only trying to get a License Master to come up right now).

I can see the PV and the PVC created on the MapR cluster and I see the temporary files being created, so I don't know why things are failing. Any help is greatly appreciated. Thanks!

[splunk@ip-10-20-1-148 db]$ ll

total 0
-rw------- 1 splunk splunkgroup 0 Jul 27 16:27 test.Aeftef
-rw------- 1 splunk splunkgroup 0 Jul 27 16:44 test.CG68oO
-rw------- 1 splunk splunkgroup 0 Jul 27 16:29 test.cptS7n
-rw------- 1 splunk splunkgroup 0 Jul 27 16:32 test.eG1WdX

On a side note, I had to create splunkgroup with GID of 41812 and could not name it "splunk" in my AD due to a user already being named "splunk". Hope that is not an issue because technically, the LM POD user is splunk(41812) for the uid, gid, and group.

topic Splunk Operator for Kubernetes - PVCs for /etc/ and /var fail when trying to use MapR fileystem in Installation

Splunk Operator for Kubernetes - PVCs for /etc/ and /var fail when trying to use MapR fileystem