sysctl: error setting key 'vm.max_map_count': Read-only file system

I solved.

1. from the host I ran sudo sysctl -w vm.max_map_count=262144

2. from the elk yaml I removed this line decommand: ['sysctl', '-w', 'vm.max_map_count=262144'] and I put privileged: false

deleted the elasticsearch deployment and applied one more time.

Hi sp1d3rino,

Can you please try to add the block below to your elk yaml file?

   spec:
  initContainers:
  - name: set-vm-max-map-count
    image: busybox
    imagePullPolicy: IfNotPresent
    command: ['sysctl', '-w', 'vm.max_map_count=262144']
    securityContext:
      privileged: true
  containers:
  - name: "elasticsearch"
  .....