网站建设的基础服务器,聊城网站建设服务好,网站可以做话筒台标吗,十大品牌排行榜前十名小伙伴们#xff0c;你们好#xff0c;我是老寇#xff0c;我又回来辣#xff0c;几个月不见甚是想念啊#xff01;#xff01;#xff01;
因云平台需要改造#xff0c;es7升级为es8#xff0c;所以记录一下#xff0c;es8需要开启ssl认证#xff0c;需要配置证书… 小伙伴们你们好我是老寇我又回来辣几个月不见甚是想念啊
因云平台需要改造es7升级为es8所以记录一下es8需要开启ssl认证需要配置证书全本带你用docker安装便于后面es8的学习
准备工作 ik分词 https://github.com/infinilabs/analysis-ik/releases/download/v8.12.2/elasticsearch-analysis-ik-8.12.2.zip pinyin分词 https://github.com/infinilabs/analysis-pinyin/releases/download/v8.12.2/elasticsearch-analysis-pinyin-8.12.2.zip 生成证书 bin目录下执行如下命令 ./elasticsearch-certutil cert --ca config/certs/elastic-certificates.p12 配置文件elasticsearch.yml
http.cors.enabled: true
http.cors.allow-origin: *
network.host: 0.0.0.0
cluster.name: laokou-elasticsearch #可自定义
node.name: node-elasticsearch #可自定义
http.port: 9200
# 单节点
discovery.type: single-node
# 内存交换的选项官网建议为true
bootstrap.memory_lock: true
xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.keystore.type: PKCS12
xpack.security.transport.ssl.verification_mode: certificate
xpack.security.transport.ssl.keystore.path: certs/elastic-certificates.p12
xpack.security.transport.ssl.truststore.path: certs/elastic-certificates.p12
xpack.security.transport.ssl.truststore.type: PKCS12
xpack.security.http.ssl.enabled: true
xpack.security.http.ssl.keystore.type: PKCS12
xpack.security.http.ssl.keystore.path: certs/elastic-certificates.p12
xpack.security.http.ssl.truststore.path: certs/elastic-certificates.p12
xpack.security.http.ssl.verification_mode: certificate
xpack.security.http.ssl.truststore.type: PKCS12
http.cors.allow-headers: Authorization
文件划分 配置编排
version: 3.8
services:elasticsearch:image: elasticsearch:8.12.2container_name: elasticsearch# 保持容器在没有守护程序的情况下运行tty: truerestart: alwaysprivileged: trueports:- 9200:9200- 9300:9300volumes:- ./elasticsearch8/config/elasticsearch.yml:/usr/share/elasticsearch/config/elasticsearch.yml# 请手动授予rw权限不然无法写入文件- ./elasticsearch8/data:/usr/share/elasticsearch/data- ./elasticsearch8/logs:/usr/share/elasticsearch/logs- ./elasticsearch8/plugins:/usr/share/elasticsearch/plugins- ./elasticsearch8/config/certs/elastic-certificates.p12:/usr/share/elasticsearch/config/certs/elastic-certificates.p12environment:- TZAsia/Shanghai- ES_JAVA_OPTS-Xmx512m -Xms512m- ELASTIC_PASSWORDlaokou123network_mode: bridgeulimits:memlock:soft: -1hard: -1
docker-compose up -d
配置文件kibana.yml
server.name: kibana
server.host: 0.0.0.0
server.port: 5601
server.ssl.enabled: false
elasticsearch.hosts: [ https://elasticsearch.laokou.org:9200 ]
xpack.monitoring.ui.container.elasticsearch.enabled: true
elasticsearch.ssl.verificationMode: none
elasticsearch.username: kibana_system
elasticsearch.password: laokou123
i18n.locale: zh-CN
配置编排 kibana:image: kibana:8.12.2container_name: kibana# 保持容器在没有守护程序的情况下运行tty: truerestart: alwaysprivileged: trueenvironment:- TZAsia/Shanghaiports:- 5601:5601volumes:- ./kibana8/config/kibana.yml:/usr/share/kibana/config/kibana.ymldepends_on:- elasticsearchextra_hosts:- elasticsearch.laokou.org:127.0.0.1deploy:resources:limits:cpus: 0.50memory: 1G
创建密码
docker exec -it elasticsearch /bin/bashcurl -s -X POST https://elasticsearch.laokou.org:9200/_security/user/kibana_system/_password -d {\password\:\laokou123\}
启动编排
docker-compose up -d
GitHub地址docker-compose启动es8
大功告成
