给docker创建的elasticsearch容器添加密码简单步骤
作者:小太阳xss
在使用Elasticsearch(ES)Docker容器时,有时需要设置密码来保护数据的安全性,这篇文章主要给大家介绍了关于给docker创建的elasticsearch容器添加密码的简单步骤,需要的朋友可以参考下
一、修改配置文件
1.进入容器
docker exec -it elasticsearch bash
2.启用认证
vi config/elasticsearch.yml
#添加如下内容
http.cors.enabled: true http.cors.allow-origin: "*" http.cors.allow-headers: Authorization xpack.security.enabled: true xpack.security.transport.ssl.enabled: true
3.保存后,退出容器,重启ES
docker restart elasticsearch
二、设置用户密码
1.上一步重启ES容器后,再次进入容器:
docker exec -it elasticsearch /bin/bash
2.再次进入容器后,执行以下命令
./bin/elasticsearch-setup-passwords interactive
出现:Initiating the setup of passwords for reserved users elastic,apm_system,kibana,logstash_system,beats_system,remote_monitoring_user.
You will be prompted to enter passwords as the process progresses.
Please confirm that you would like to continue [y/N]
上边英文大概的意思是:你如果确定开启密码的话,需要设置以下六种账户的密码(建议设置成一样的)
Please confirm that you would like to continue [y/N]y Enter password for [elastic]: Reenter password for [elastic]: Enter password for [apm_system]: Reenter password for [apm_system]: Enter password for [kibana]: Reenter password for [kibana]: Enter password for [logstash_system]: Reenter password for [logstash_system]: Enter password for [beats_system]: Reenter password for [beats_system]: Enter password for [remote_monitoring_user]: Reenter password for [remote_monitoring_user]: Changed password for user [apm_system] Changed password for user [kibana] Changed password for user [logstash_system] Changed password for user [beats_system] Changed password for user [remote_monitoring_user] Changed password for user [elastic]
3.完成以上的设置后,需要再次重启ES容器
docker restart es
三、验证
http://127.0.0.1:9200/
附:docker elasticsearch 设置随机密码
1. 进入容器内部, 我es 服务得命名为elasticsearch,改为你自己命名得es容器即可
docker exec -it elasticsearch /bin/bash # 进入容器内部
2. 进入配置文件夹
cd config/
3. 在elasticsearch.yml 添加下面得内容, 编辑命令 vi elasticserch.yml
xpack.security.enabled: true xpack.license.self_generated.type: basic xpack.security.transport.ssl.enabled: true
4. 重启服务,并再次进入容器内部
docker restart elasticsearch
5. 输入自动生成密码命令即可 生成密码
# 查看密码生成策略 ./bin/elasticsearch-setup-passwords -h # 这个为自动生成密码 命令 ./bin/elasticsearch-setup-passwords auto 出现这个选择 输入y Initiating the setup of passwords for reserved users elastic,apm_system,kibana,logstash_system,beats_system,remote_monitoring_user. The passwords will be randomly generated and printed to the console. Please confirm that you would like to continue [y/N]y
总结
到此这篇关于给docker创建的elasticsearch容器添加密码的文章就介绍到这了,更多相关docker elasticsearch容器添加密码内容请搜索脚本之家以前的文章或继续浏览下面的相关文章希望大家以后多多支持脚本之家!