赞
踩
一、多节点
1、配置文件中配置
xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification_mode: certificate
xpack.security.transport.ssl.client_authentication: required
xpack.security.transport.ssl.keystore.path: elastic-certificates.p12
xpack.security.transport.ssl.truststore.path: elastic-certificates.p12
2、创建密钥
./bin/elasticsearch-certutil ca
3、颁发证书
./bin/elasticsearch-certutil cert --ca elastic-stack-ca.p12
4、将证书放到 config目录下
进入config目录下
5、将证书文件拷贝到集群中的另一个节点
scp config/elastic-certificates.p12 elastic@192.168.1.123:/usr/local/elasticsearch-7.13.0/config/
查看node2节点的config
6、启动两个节点
网页上登入会产生弹窗,需要设置密码
7、设置密码 ,集群必须是启动状态
./bin/elasticsearch-setup-passwords interactive
8、配置并启动kibana
二、单节点
配置文件只需:xpack.security.enabled: true
直接启动,配置密码
./bin/elasticsearch-setup-passwords interactive
配置并启动kibana
Copyright © 2003-2013 www.wpsshop.cn 版权所有,并保留所有权利。