elasticsearch cluster 开启用户名+密码

分手后的思念是犯贱 2022-09-09 13:45 371阅读 0赞

当前目录：/home/es/elasticsearch-7.13.4
在这里插入图片描述

docker-compose.yml

  1. ---
  2. version: '2.2'
  3. services:
  4.   elasticsearch:
  5.     restart: always
  6.     image: elasticsearch:7.13.4
  7.     container_name: es-node1
  8.     network_mode: host
  9.     volumes:
  10.       - /data/es/data:/usr/share/elasticsearch/data
  11.       - /home/es/elasticsearch-7.13.4/config/elasticsearch.yml:/usr/share/elasticsearch/config/elasticsearch.yml
  12.       - /home/es/elasticsearch-7.13.4/config/jvm.options:/usr/share/elasticsearch/config/jvm.options
  13.       - /home/es/elasticsearch-7.13.4/config/es.pem:/usr/share/elasticsearch/config/es.pem 
  14.       - /home/es/elasticsearch-7.13.4/config/es-key.pem:/usr/share/elasticsearch/config/es-key.pem
  15.     environment:
  16.       bootstrap.memory_lock: "true"
  17.     ulimits:
  18.       memlock:
  19.         soft: -1
  20.         hard: -1

elasticsearch.yml

  1. cluster.name: jiankunking-log
  2. node.name: 10.163.16.188
  3. http.port: 9200
  4. transport.tcp.port: 8100
  5. discovery.seed_hosts: ["10.163.16.188","10.163.16.190","10.163.16.191"]
  6. cluster.initial_master_nodes: ["10.163.16.188","10.163.16.190","10.163.16.191"]
  7. network.bind_host: 10.163.16.188
  8. network.publish_host: 10.163.16.188
  9. path:
  10.   data:
  11.   - /usr/share/elasticsearch/data
  12. xpack.monitoring.collection.enabled: true
  14. xpack.security.enabled: true
  16. xpack.security.http.ssl.enabled: false
  17. xpack.security.http.ssl.key: /usr/share/elasticsearch/config/es-key.pem
  18. xpack.security.http.ssl.certificate: /usr/share/elasticsearch/config/es.pem
  19. xpack.security.http.ssl.certificate_authorities: ["/usr/share/elasticsearch/config/es.pem"]
  21. xpack.security.transport.ssl.enabled: true
  22. # 这里也可以指定为证书 
  23. xpack.security.transport.ssl.verification_mode: none
  24. xpack.security.transport.ssl.key: /usr/share/elasticsearch/config/es-key.pem
  25. xpack.security.transport.ssl.certificate: /usr/share/elasticsearch/config/es.pem
  26. xpack.security.transport.ssl.certificate_authorities: ["/usr/share/elasticsearch/config/es.pem"]

jvm.options

  1. ################################################################
  2. ##
  3. ## JVM configuration
  4. ##
  5. ################################################################
  6. ##
  7. ## WARNING: DO NOT EDIT THIS FILE. If you want to override the
  8. ## JVM options in this file, or set any additional options, you
  9. ## should create one or more files in the jvm.options.d
  10. ## directory containing your adjustments.
  11. ##
  12. ## See https://www.elastic.co/guide/en/elasticsearch/reference/current/jvm-options.html
  13. ## for more information.
  14. ##
  15. ################################################################
  19. ################################################################
  20. ## IMPORTANT: JVM heap size
  21. ################################################################
  22. ##
  23. ## The heap size is automatically configured by Elasticsearch
  24. ## based on the available memory in your system and the roles
  25. ## each node is configured to fulfill. If specifying heap is
  26. ## required, it should be done through a file in jvm.options.d,
  27. ## and the min and max should be set to the same value. For
  28. ## example, to set the heap to 4 GB, create a new file in the
  29. ## jvm.options.d directory containing these lines:
  31. -Xms31g
  32. -Xmx31g
  34. ## See https://www.elastic.co/guide/en/elasticsearch/reference/current/heap-size.html
  35. ## for more information
  36. ##
  37. ################################################################
  40. ################################################################
  41. ## Expert settings
  42. ################################################################
  43. ##
  44. ## All settings below here are considered expert settings. Do
  45. ## not adjust them unless you understand what you are doing. Do
  46. ## not edit them in this file; instead, create a new file in the
  47. ## jvm.options.d directory containing your adjustments.
  48. ##
  49. ################################################################
  51. ## GC configuration
  52. 8-13:-XX:+UseConcMarkSweepGC
  53. 8-13:-XX:CMSInitiatingOccupancyFraction=75
  54. 8-13:-XX:+UseCMSInitiatingOccupancyOnly
  56. ## G1GC Configuration
  57. # NOTE: G1 GC is only supported on JDK version 10 or later
  58. # to use G1GC, uncomment the next two lines and update the version on the
  59. # following three lines to your version of the JDK
  60. # 10-13:-XX:-UseConcMarkSweepGC
  61. # 10-13:-XX:-UseCMSInitiatingOccupancyOnly
  62. 14-:-XX:+UseG1GC
  64. ## JVM temporary directory
  65. -Djava.io.tmpdir=${ES_TMPDIR}
  67. ## heap dumps
  69. # generate a heap dump when an allocation from the Java heap fails; heap dumps
  70. # are created in the working directory of the JVM unless an alternative path is
  71. # specified
  72. -XX:+HeapDumpOnOutOfMemoryError
  74. # specify an alternative path for heap dumps; ensure the directory exists and
  75. # has sufficient space
  76. -XX:HeapDumpPath=data
  78. # specify an alternative path for JVM fatal error logs
  79. -XX:ErrorFile=logs/hs_err_pid%p.log
  81. ## JDK 8 GC logging
  82. 8:-XX:+PrintGCDetails
  83. 8:-XX:+PrintGCDateStamps
  84. 8:-XX:+PrintTenuringDistribution
  85. 8:-XX:+PrintGCApplicationStoppedTime
  86. 8:-Xloggc:logs/gc.log
  87. 8:-XX:+UseGCLogFileRotation
  88. 8:-XX:NumberOfGCLogFiles=32
  89. 8:-XX:GCLogFileSize=64m
  91. # JDK 9+ GC logging
  92. 9-:-Xlog:gc*,gc+age=trace,safepoint:file=logs/gc.log:utctime,pid,tags:filecount=32,filesize=64m

证书

es-key.pem 自签名的私钥
es.pem 自签名的证书

证书有效时间，尽量长一些
如果该集群后面要加入remote cluster的话，证书的签名CA要一样。

重启

关掉集群 分片 自动分配设置

  1. PUT /_cluster/settings
  2. {
  3.   "transient": {
  4.     "cluster.routing.allocation.enable": "none"
  5.   }
  6. }

修改配置重启所有节点

  1. docker-compose stop
  2. docker-compose up -d --build

等最后一个节点起来后，进入容器执行

  1. ./bin/elasticsearch-setup-passwords interactive

设置对应账号名的密码即可。

重新开启集群 分片 自动分配

  1. PUT /_cluster/settings
  2. {
  3.   "persistent": {
  4.     "cluster.routing.allocation.enable": "all"
  5.   }
  6. }

发表评论

表情：
评论列表 （有 0 条评论，371人围观）

还没有评论，来说两句吧...

相关阅读