apiVersion: v1
kind: Service
metadata:
  name: elasticsearch-svc
  namespace: ircs-prod
  labels:
    app: elasticsearch
    app.kubernetes.io/part-of: ircs
    environment: prod
spec:
  type: ClusterIP
  selector:
    app: elasticsearch
  ports:
    - name: http
      port: 9200
      targetPort: http
    - name: transport
      port: 9300
      targetPort: transport
---
apiVersion: apps/v1
kind: StatefulSet
metadata:
  name: elasticsearch
  namespace: ircs-prod
  labels:
    app: elasticsearch
    app.kubernetes.io/part-of: ircs
    environment: prod
spec:
  serviceName: elasticsearch-svc
  replicas: 1
  podManagementPolicy: OrderedReady
  revisionHistoryLimit: 10
  persistentVolumeClaimRetentionPolicy:
    whenDeleted: Retain
    whenScaled: Retain
  updateStrategy:
    type: RollingUpdate
    rollingUpdate:
      partition: 0
  selector:
    matchLabels:
      app: elasticsearch
  template:
    metadata:
      labels:
        app: elasticsearch
        app.kubernetes.io/part-of: ircs
        environment: prod
    spec:
      dnsPolicy: ClusterFirst
      restartPolicy: Always
      schedulerName: default-scheduler
      securityContext:
        fsGroup: 1000
        fsGroupChangePolicy: OnRootMismatch
      terminationGracePeriodSeconds: 30
      initContainers:
        - name: install-plugins
          image: alpine:3.19
          imagePullPolicy: IfNotPresent
          command:
            - sh
            - -c
            - |
              set -e
              apk add --no-cache unzip wget
              mkdir -p /plugins/ik /plugins/pinyin

              if [ ! -f /plugins/ik/plugin-descriptor.properties ]; then
                rm -rf /plugins/ik/*
                wget -O /tmp/ik.zip https://release.infinilabs.com/analysis-ik/stable/elasticsearch-analysis-ik-9.1.4.zip
                unzip -q /tmp/ik.zip -d /plugins/ik
                rm /tmp/ik.zip
              fi

              if [ ! -f /plugins/pinyin/plugin-descriptor.properties ]; then
                rm -rf /plugins/pinyin/*
                wget -O /tmp/pinyin.zip https://release.infinilabs.com/analysis-pinyin/stable/elasticsearch-analysis-pinyin-9.1.4.zip
                unzip -q /tmp/pinyin.zip -d /plugins/pinyin
                rm /tmp/pinyin.zip
              fi

              chown -R 1000:1000 /plugins
          resources:
            requests:
              cpu: 50m
              memory: 64Mi
            limits:
              cpu: 250m
              memory: 256Mi
          volumeMounts:
            - name: plugins-volume
              mountPath: /plugins
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
      containers:
        - name: elasticsearch
          image: docker.elastic.co/elasticsearch/elasticsearch:9.1.4
          imagePullPolicy: IfNotPresent
          ports:
            - name: http
              containerPort: 9200
              protocol: TCP
            - name: transport
              containerPort: 9300
              protocol: TCP
          env:
            - name: discovery.type
              value: single-node
            - name: xpack.security.enabled
              value: "true"
            - name: xpack.security.http.ssl.enabled
              value: "false"
            - name: ELASTIC_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: ircs-prod-secrets
                  key: ELASTICSEARCH_PASSWORD
            - name: ES_JAVA_OPTS
              value: "-Xms512m -Xmx512m"
          startupProbe:
            tcpSocket:
              port: http
            failureThreshold: 60
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          readinessProbe:
            tcpSocket:
              port: http
            failureThreshold: 3
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          livenessProbe:
            tcpSocket:
              port: http
            failureThreshold: 3
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 1
          resources:
            requests:
              cpu: 100m
              memory: 1Gi
            limits:
              cpu: "1"
              memory: 2Gi
          volumeMounts:
            - name: elasticsearch-data
              mountPath: /usr/share/elasticsearch/data
            - name: plugins-volume
              mountPath: /usr/share/elasticsearch/plugins
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
      volumes:
        - name: plugins-volume
          emptyDir: {}
  volumeClaimTemplates:
    - apiVersion: v1
      kind: PersistentVolumeClaim
      metadata:
        name: elasticsearch-data
        labels:
          app: elasticsearch
          app.kubernetes.io/part-of: ircs
          environment: prod
      spec:
        accessModes: ["ReadWriteOnce"]
        volumeMode: Filesystem
        resources:
          requests:
            storage: 5Gi