elasticsearch設(shè)置賬號(hào)和密碼的完整代碼示例
1、es安裝，掛載路徑根據(jù)實(shí)際情況修改
docker run -d --restart always \ --name es \ -e "ES_JAVA_OPTS=-Xms512m -Xmx512m" \ -e "discovery.type=single-node" \ -e "TZ=Asia/Shanghai" \ -v /mnt/data/efk/es/data:/usr/share/elasticsearch/data \ -v /home/clouduser/cxb/efk/account-efk/es-plugins:/usr/share/elasticsearch/plugins \ -v /home/clouduser/cxb/efk/account-efk/es-config/elastic-certificates.p12:/usr/share/elasticsearch/config/elastic-certificates.p12 \ -v /home/clouduser/cxb/efk/account-efk/es-config/elasticsearch.yml:/usr/share/elasticsearch/config/elasticsearch.yml \ --network docker-common-net \ -p 9200:9200 \ -p 9300:9300 \ elasticsearch:8.6.0
2、生成證書(shū)
#進(jìn)入es容器 docker exec -it es /bin/bash # 生成ca ./bin/elasticsearch-certutil ca
注：兩個(gè)紅方框位置直接回車(chē)
3、生成cert證書(shū)
# 再生成cert ./bin/elasticsearch-certutil cert --ca elastic-stack-ca.p12
注：前兩個(gè)紅框直接回車(chē)，第三個(gè)紅框可以直接回車(chē)，也可以輸入證書(shū)密碼
4、查看證書(shū)
# 查看兩個(gè)證書(shū) ls
5、退出容器
exit
6、拷貝es容器的證書(shū)
或者直接拷貝到宿主機(jī)，通過(guò)掛載的方式掛載進(jìn)去。
# 進(jìn)入es的config文件夾 mkdir -p /data/es/single/config && cd /data/es/single/config # 拷貝容器證書(shū) docker cp es:/usr/share/elasticsearch/elastic-certificates.p12 ./ # 授權(quán)證書(shū) chmod 777 elastic-certificates.p12
7、添加配置文檔
vi elasticsearch.yml
network.host: 0.0.0.0 xpack.security.enabled: true xpack.security.transport.ssl.enabled: true xpack.security.transport.ssl.keystore.type: PKCS12 xpack.security.transport.ssl.verification_mode: certificate xpack.security.transport.ssl.keystore.path: /usr/share/elasticsearch/config/elastic-certificates.p12 xpack.security.transport.ssl.truststore.path: /usr/share/elasticsearch/config/elastic-certificates.p12 xpack.security.transport.ssl.truststore.type: PKCS12 xpack.security.audit.enabled: true
修改docker-compon.yml
# 進(jìn)入文件目錄 cd /data/es/single # 添加兩行 - /data/es/single/config/elastic-certificates.p12:/usr/share/elasticsearch/config/elastic-certificates.p12 - /data/es/single/config/elasticsearch.yml:/usr/share/elasticsearch/config/elasticsearch.yml
目前青田實(shí)際的yml文件：通過(guò)掛載的方式實(shí)現(xiàn)的上面兩個(gè)步驟
cluster.name: "docker-cluster" network.host: 0.0.0.0 xpack.security.enabled: true xpack.security.transport.ssl.enabled: true xpack.security.transport.ssl.keystore.type: PKCS12 xpack.security.transport.ssl.verification_mode: certificate xpack.security.transport.ssl.keystore.path: /usr/share/elasticsearch/config/elastic-certificates.p12 xpack.security.transport.ssl.truststore.path: /usr/share/elasticsearch/config/elastic-certificates.p12 xpack.security.transport.ssl.truststore.type: PKCS12 xpack.security.audit.enabled: true
8、設(shè)置es賬號(hào)、密碼
# 進(jìn)入es容器 docker exec -it es /bin/bash # 設(shè)置密碼（賬號(hào)默認(rèn)為 elastic） ./bin/elasticsearch-setup-passwords interactive
注：密碼可設(shè)置為同一個(gè)密碼，容易記住
9、給kibana設(shè)置賬目密碼
/home/clouduser/cxb/efk/account-efk/kibana/kibana.yml
i18n.locale: zh-CN server.host: "0.0.0.0" server.shutdownTimeout: "5s" elasticsearch.hosts: [ "http://es:9200" ] elasticsearch.username: "root" elasticsearch.password: "1q*********"
1，F(xiàn)ATAL Error: [config validation of [elasticsearch].username]: value of "elastic" is forbidden. This is a superuser account that cannot write to system indices that Kibana needs to function. Use a service account token instead.
界面會(huì)顯示：Kibana server is not ready yet.
這是因?yàn)閑s 不允許使用elastic用戶(hù)登錄kibana
所以這里需要?jiǎng)?chuàng)建一個(gè)自定義用戶(hù)
進(jìn)入es容器，docker exec -it es bash，執(zhí)行bin/elasticsearch-users useradd test
添加了用戶(hù)，并需要給這個(gè)用戶(hù)添加角色不然會(huì)報(bào)錯(cuò)
角色授權(quán)
bin/elasticsearch-users roles -a superuser test
bin/elasticsearch-users roles -a kibana_system test
總結(jié)
到此這篇關(guān)于elasticsearch設(shè)置賬號(hào)和密碼的文章就介紹到這了,更多相關(guān)elasticsearch設(shè)置賬號(hào)和密碼內(nèi)容請(qǐng)搜索腳本之家以前的文章或繼續(xù)瀏覽下面的相關(guān)文章希望大家以后多多支持腳本之家！
相關(guān)文章
Java實(shí)現(xiàn)數(shù)據(jù)脫敏的方法詳細(xì)講解
這篇文章主要給大家介紹了關(guān)于Java實(shí)現(xiàn)數(shù)據(jù)脫敏的相關(guān)資料,數(shù)據(jù)脫敏是指對(duì)某些敏感信息通過(guò)脫敏規(guī)則進(jìn)行數(shù)據(jù)的變形,實(shí)現(xiàn)敏感隱私數(shù)據(jù)的可靠保護(hù),需要的朋友可以參考下2023-06-06
MybatisPlusInterceptor實(shí)現(xiàn)sql攔截器超詳細(xì)教程
Mybatis-Plus超級(jí)實(shí)用的多種功能用法詳解
Spring中@Async注解實(shí)現(xiàn)異步調(diào)詳解
SpringBoot + minio實(shí)現(xiàn)分片上傳、秒傳、續(xù)傳功能
Java正則表達(dá)式易錯(cuò)知識(shí)點(diǎn)匯總
Java正確實(shí)現(xiàn)一個(gè)單例設(shè)計(jì)模式的示例
