es 集群并设置密码

1. 生成证书

bin/elasticsearch-certutil cert -out config/elastic-certificates.p12 -pass ""
2. elastic-certificates.p12 复制到其他节点

3. 修改每一个节点配置并启动

xpack.security.transport.ssl.verification_mode: certificate
xpack.security.transport.ssl.keystore.path: /www/install_zip/elasticsearch6.8.5/config/elastic-certificates.p12
xpack.security.transport.ssl.truststore.path: /www/install_zip/elasticsearch6.8.5/config/elastic-certificates.p12

 

4. bin/elasticsearch-setup-passwords interactive 设置密码

注意事项

1. 生成新文件 要给 elastic用户赋予权限

2. 启动es，kibana时 使用对应的权限用户