快捷導(dǎo)航

docker compose安裝es+kibana 8.12.2的詳細(xì)過程

更新時(shí)間：2024年05月09日 10:48:08 作者：k↑

因云平臺(tái)需要改造,es7升級(jí)為es8,所以記錄一下,es8需要開啟ssl認(rèn)證,需要配置證書,全本帶你用docker安裝,便于后面es8的學(xué)習(xí),這篇文章主要介紹了docker compose安裝es+kibana 8.12.2的詳細(xì)過程,感興趣的朋友跟隨小編一起看看吧

準(zhǔn)備工作

ik分詞

https://github.com/infinilabs/analysis-ik/releases/download/v8.12.2/elasticsearch-analysis-ik-8.12.2.zip

pinyin分詞

https://github.com/infinilabs/analysis-pinyin/releases/download/v8.12.2/elasticsearch-analysis-pinyin-8.12.2.zip

生成證書

bin目錄下執(zhí)行如下命令

./elasticsearch-certutil cert --ca config/certs/elastic-certificates.p12

配置文件（elasticsearch.yml）

http.cors.enabled: true
http.cors.allow-origin: "*"
network.host: 0.0.0.0
cluster.name: laokou-elasticsearch #可自定義
node.name: node-elasticsearch #可自定義
http.port: 9200
# 單節(jié)點(diǎn)
discovery.type: single-node
# 內(nèi)存交換的選項(xiàng)，官網(wǎng)建議為true
bootstrap.memory_lock: true
xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.keystore.type: PKCS12
xpack.security.transport.ssl.verification_mode: certificate
xpack.security.transport.ssl.keystore.path: certs/elastic-certificates.p12
xpack.security.transport.ssl.truststore.path: certs/elastic-certificates.p12
xpack.security.transport.ssl.truststore.type: PKCS12
xpack.security.http.ssl.enabled: true
xpack.security.http.ssl.keystore.type: PKCS12
xpack.security.http.ssl.keystore.path: certs/elastic-certificates.p12
xpack.security.http.ssl.truststore.path:  certs/elastic-certificates.p12
xpack.security.http.ssl.verification_mode: certificate
xpack.security.http.ssl.truststore.type: PKCS12
http.cors.allow-headers: Authorization

文件劃分

配置編排

version: '3.8'
services:
  elasticsearch:
    image: elasticsearch:8.12.2
    container_name: elasticsearch
    # 保持容器在沒有守護(hù)程序的情況下運(yùn)行
    tty: true
    restart: always
    privileged: true
    ports:
      - "9200:9200"
      - "9300:9300"
    volumes:
      - ./elasticsearch8/config/elasticsearch.yml:/usr/share/elasticsearch/config/elasticsearch.yml
      # 請(qǐng)手動(dòng)授予rw權(quán)限，不然無法寫入文件
      - ./elasticsearch8/data:/usr/share/elasticsearch/data
      - ./elasticsearch8/logs:/usr/share/elasticsearch/logs
      - ./elasticsearch8/plugins:/usr/share/elasticsearch/plugins
      - ./elasticsearch8/config/certs/elastic-certificates.p12:/usr/share/elasticsearch/config/certs/elastic-certificates.p12
    environment:
      - TZ=Asia/Shanghai
      - ES_JAVA_OPTS=-Xmx512m -Xms512m
      - ELASTIC_PASSWORD=laokou123
    network_mode: bridge
    ulimits:
      memlock:
        soft: -1
        hard: -1

docker-compose up -d

配置文件（kibana.yml）

server.name: kibana
server.host: 0.0.0.0
server.port: 5601
server.ssl.enabled: false
elasticsearch.hosts: [ "https://elasticsearch.laokou.org:9200" ]
xpack.monitoring.ui.container.elasticsearch.enabled: true
elasticsearch.ssl.verificationMode: none
elasticsearch.username: "kibana_system"
elasticsearch.password: "laokou123"
i18n.locale: zh-CN

配置編排

  kibana:
    image: kibana:8.12.2
    container_name: kibana
    # 保持容器在沒有守護(hù)程序的情況下運(yùn)行
    tty: true
    restart: always
    privileged: true
    environment:
      - TZ=Asia/Shanghai
    ports:
      - "5601:5601"
    volumes:
      - ./kibana8/config/kibana.yml:/usr/share/kibana/config/kibana.yml
    depends_on:
      - elasticsearch
    extra_hosts:
      - "elasticsearch.laokou.org:127.0.0.1"
    deploy:
      resources:
        limits:
          cpus: '0.50'
          memory: 1G

創(chuàng)建密碼

docker exec -it elasticsearch /bin/bash
curl -s -X POST https://elasticsearch.laokou.org:9200/_security/user/kibana_system/_password -d "{\"password\":\"laokou123\"}"