基于kubernetes的EFK日志系统搭建

EFK日志系统简介和准备工作

Kubernetes中比较流行的日志收集解决方案是Elasticsearch、Fluentd和 Kibana（EFK）技术栈，也是目前官方比较推荐的一种方案。官方推荐安装方式为使用helm安装

1.安装elasticsearch

https://artifacthub.io/packages/helm/elastic/elasticsearch
官方发布的chart地址

添加仓库

helm repo add elastic https://helm.elastic.co

查看是否添加成功

[root@master1 test]# helm search repo elasticsearch
NAME                     	CHART VERSION	APP VERSION	DESCRIPTION                                       
elastic/elasticsearch    	7.13.1       	7.13.1     	Official Elastic helm chart for Elasticsearch     
elastic/eck-operator     	1.6.0        	1.6.0      	A Helm chart for deploying the Elastic Cloud on...
elastic/eck-operator-crds	1.6.0        	1.6.0      	A Helm chart for installing the ECK operator Cu...

下载Chart到本地中

# 下载
helm pull elastic/elasticsearch
# 解压
tar -zxvf elasticsearch-7.13.1.tgz && cd elasticsearch

[root@master1 elasticsearch]# ls
Chart.yaml  examples  Makefile  README.md  templates  values.yaml

用docker生成证书

# 准备好镜像文件，如果拉不下来请自带翻墙
docker pull docker.elastic.co/elasticsearch/elasticsearch:7.13.1

# 启动惊喜
docker run -d -it --name=es docker.elastic.co/elasticsearch/elasticsearch:7.13.1 /bin/bash

# 进入容器
docker exec -it es /bin/bash

# 容器内操作生产证书
./bin/elasticsearch-certutil ca
./bin/elasticsearch-certutil cert --ca ela