elasticsearch設(shè)置賬號和密碼的完整代碼示例
1、es安裝，掛載路徑根據(jù)實際情況修改
docker run -d --restart always \ --name es \ -e "ES_JAVA_OPTS=-Xms512m -Xmx512m" \ -e "discovery.type=single-node" \ -e "TZ=Asia/Shanghai" \ -v /mnt/data/efk/es/data:/usr/share/elasticsearch/data \ -v /home/clouduser/cxb/efk/account-efk/es-plugins:/usr/share/elasticsearch/plugins \ -v /home/clouduser/cxb/efk/account-efk/es-config/elastic-certificates.p12:/usr/share/elasticsearch/config/elastic-certificates.p12 \ -v /home/clouduser/cxb/efk/account-efk/es-config/elasticsearch.yml:/usr/share/elasticsearch/config/elasticsearch.yml \ --network docker-common-net \ -p 9200:9200 \ -p 9300:9300 \ elasticsearch:8.6.0
2、生成證書
#進入es容器 docker exec -it es /bin/bash # 生成ca ./bin/elasticsearch-certutil ca
注：兩個紅方框位置直接回車
3、生成cert證書
# 再生成cert ./bin/elasticsearch-certutil cert --ca elastic-stack-ca.p12
注：前兩個紅框直接回車，第三個紅框可以直接回車，也可以輸入證書密碼
4、查看證書
# 查看兩個證書 ls
5、退出容器
exit
6、拷貝es容器的證書
或者直接拷貝到宿主機，通過掛載的方式掛載進去。
# 進入es的config文件夾 mkdir -p /data/es/single/config && cd /data/es/single/config # 拷貝容器證書 docker cp es:/usr/share/elasticsearch/elastic-certificates.p12 ./ # 授權(quán)證書 chmod 777 elastic-certificates.p12
7、添加配置文檔
vi elasticsearch.yml
network.host: 0.0.0.0 xpack.security.enabled: true xpack.security.transport.ssl.enabled: true xpack.security.transport.ssl.keystore.type: PKCS12 xpack.security.transport.ssl.verification_mode: certificate xpack.security.transport.ssl.keystore.path: /usr/share/elasticsearch/config/elastic-certificates.p12 xpack.security.transport.ssl.truststore.path: /usr/share/elasticsearch/config/elastic-certificates.p12 xpack.security.transport.ssl.truststore.type: PKCS12 xpack.security.audit.enabled: true
修改docker-compon.yml
# 進入文件目錄 cd /data/es/single # 添加兩行 - /data/es/single/config/elastic-certificates.p12:/usr/share/elasticsearch/config/elastic-certificates.p12 - /data/es/single/config/elasticsearch.yml:/usr/share/elasticsearch/config/elasticsearch.yml
目前青田實際的yml文件：通過掛載的方式實現(xiàn)的上面兩個步驟
cluster.name: "docker-cluster" network.host: 0.0.0.0 xpack.security.enabled: true xpack.security.transport.ssl.enabled: true xpack.security.transport.ssl.keystore.type: PKCS12 xpack.security.transport.ssl.verification_mode: certificate xpack.security.transport.ssl.keystore.path: /usr/share/elasticsearch/config/elastic-certificates.p12 xpack.security.transport.ssl.truststore.path: /usr/share/elasticsearch/config/elastic-certificates.p12 xpack.security.transport.ssl.truststore.type: PKCS12 xpack.security.audit.enabled: true
8、設(shè)置es賬號、密碼
# 進入es容器 docker exec -it es /bin/bash # 設(shè)置密碼（賬號默認為 elastic） ./bin/elasticsearch-setup-passwords interactive
注：密碼可設(shè)置為同一個密碼，容易記住
9、給kibana設(shè)置賬目密碼
/home/clouduser/cxb/efk/account-efk/kibana/kibana.yml
i18n.locale: zh-CN server.host: "0.0.0.0" server.shutdownTimeout: "5s" elasticsearch.hosts: [ "http://es:9200" ] elasticsearch.username: "root" elasticsearch.password: "1q*********"
1，F(xiàn)ATAL Error: [config validation of [elasticsearch].username]: value of "elastic" is forbidden. This is a superuser account that cannot write to system indices that Kibana needs to function. Use a service account token instead.
界面會顯示：Kibana server is not ready yet.
這是因為es 不允許使用elastic用戶登錄kibana
所以這里需要創(chuàng)建一個自定義用戶
進入es容器，docker exec -it es bash，執(zhí)行bin/elasticsearch-users useradd test
添加了用戶，并需要給這個用戶添加角色不然會報錯
角色授權(quán)
bin/elasticsearch-users roles -a superuser test
bin/elasticsearch-users roles -a kibana_system test
總結(jié)
到此這篇關(guān)于elasticsearch設(shè)置賬號和密碼的文章就介紹到這了,更多相關(guān)elasticsearch設(shè)置賬號和密碼內(nèi)容請搜索腳本之家以前的文章或繼續(xù)瀏覽下面的相關(guān)文章希望大家以后多多支持腳本之家！
相關(guān)文章
Java實現(xiàn)數(shù)據(jù)脫敏的方法詳細講解
這篇文章主要給大家介紹了關(guān)于Java實現(xiàn)數(shù)據(jù)脫敏的相關(guān)資料,數(shù)據(jù)脫敏是指對某些敏感信息通過脫敏規(guī)則進行數(shù)據(jù)的變形,實現(xiàn)敏感隱私數(shù)據(jù)的可靠保護,需要的朋友可以參考下2023-06-06
MybatisPlusInterceptor實現(xiàn)sql攔截器超詳細教程
Spring中@Async注解實現(xiàn)異步調(diào)詳解
SpringBoot + minio實現(xiàn)分片上傳、秒傳、續(xù)傳功能
Java正確實現(xiàn)一個單例設(shè)計模式的示例
