splunk-enterprise-kubernetes-setup

To render and deploy Splunk Enterprise on Kubernetes, you can use this automation to generate deployment assets via either the Splunk Operator for Kubernetes (SOK) or Splunk POD workflow. It handles end-to-end processing from render to preflight, apply, and live validation.

Deploying Splunk using SOK covers standard Kubernetes deployments with CRDs and Helm values, while the POD profile targets Cisco UCS infrastructure. POD profiles additionally support ES premium app integration and specific M4 zone/site features.

Yes, you can perform a render-only deployment for Splunk on Kubernetes. The process generates reviewed artifacts and helper scripts by default, allowing you to run optional preflight checks, status checks, and dry-runs before applying changes.

Handling secrets and Splunk 10.x image deployments requires strict input validation and accepting required terms. The rendering enforces secret handling guidance and mandates terms acceptance for Splunk 10.x images to ensure safe, reproducible deployments.

Configurations supported for Splunk Kubernetes deployments include license handling, SmartStore configuration, and ES premium app integration for POD profiles. It also supports SOK and M4 zone/site features for clustered deployments.