集群安全Security

一、多节点 

1、配置文件中配置 

xpack.security.enabled: true

xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification_mode: certificate 
xpack.security.transport.ssl.client_authentication: required
xpack.security.transport.ssl.keystore.path: elastic-certificates.p12
xpack.security.transport.ssl.truststore.path: elastic-certificates.p12

2、创建密钥 

./bin/elasticsearch-certutil ca 

3、颁发证书 

./bin/elasticsearch-certutil cert --ca elastic-stack-ca.p12 

4、将证书放到 config目录下

进入config目录下 

5、将证书文件拷贝到集群中的另一个节点 

scp config/elastic-certificates.p12 elastic@192.168.1.123:/usr/local/elasticsearch-7.13.0/config/

查看node2节点的config 

6、启动两个节点 

网页上登入会产生弹窗，需要设置密码

7、设置密码 ，集群必须是启动状态

./bin/elasticsearch-setup-passwords interactive 

8、配置并启动kibana 

二、单节点 

配置文件只需：xpack.security.enabled: true 

直接启动，配置密码

./bin/elasticsearch-setup-passwords interactive 

配置并启动kibana