网站运营托管网站设计权限

        小伙伴们，你们好，我是老寇，我又回来辣，几个月不见甚是想念啊！！！

因云平台需要改造，es7升级为es8，所以记录一下，es8需要开启ssl认证，需要配置证书，全本带你用docker安装，便于后面es8的学习

准备工作

ik分词

https://github.com/infinilabs/analysis-ik/releases/download/v8.12.2/elasticsearch-analysis-ik-8.12.2.zip

pinyin分词

https://github.com/infinilabs/analysis-pinyin/releases/download/v8.12.2/elasticsearch-analysis-pinyin-8.12.2.zip

生成证书

bin目录下执行如下命令

./elasticsearch-certutil cert --ca config/certs/elastic-certificates.p12

 配置文件（elasticsearch.yml）

http.cors.enabled: true
http.cors.allow-origin: "*"
network.host: 0.0.0.0
cluster.name: laokou-elasticsearch #可自定义
node.name: node-elasticsearch #可自定义
http.port: 9200
# 单节点
discovery.type: single-node
# 内存交换的选项，官网建议为true
bootstrap.memory_lock: true
xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.keystore.type: PKCS12
xpack.security.transport.ssl.verification_mode: certificate
xpack.security.transport.ssl.keystore.path: certs/elastic-certificates.p12
xpack.security.transport.ssl.truststore.path: certs/elastic-certificates.p12
xpack.security.transport.ssl.truststore.type: PKCS12
xpack.security.http.ssl.enabled: true
xpack.security.http.ssl.keystore.type: PKCS12
xpack.security.http.ssl.keystore.path: certs/elastic-certificates.p12
xpack.security.http.ssl.truststore.path:  certs/elastic-certificates.p12
xpack.security.http.ssl.verification_mode: certificate
xpack.security.http.ssl.truststore.type: PKCS12
http.cors.allow-headers: Authorization

文件划分

配置编排

version: '3.8'
services:elasticsearch:image: elasticsearch:8.12.2container_name: elasticsearch# 保持容器在没有守护程序的情况下运行tty: truerestart: alwaysprivileged: trueports:- "9200:9200"- "9300:9300"volumes:- ./elasticsearch8/config/elasticsearch.yml:/usr/share/elasticsearch/config/elasticsearch.yml# 请手动授予rw权限，不然无法写入文件- ./elasticsearch8/data:/usr/share/elasticsearch/data- ./elasticsearch8/logs:/usr/share/elasticsearch/logs- ./elasticsearch8/plugins:/usr/share/elasticsearch/plugins- ./elasticsearch8/config/certs/elastic-certificates.p12:/usr/share/elasticsearch/config/certs/elastic-certificates.p12environment:- TZ=Asia/Shanghai- ES_JAVA_OPTS=-Xmx512m -Xms512m- ELASTIC_PASSWORD=laokou123network_mode: bridgeulimits:memlock:soft: -1hard: -1

docker-compose up -d

配置文件（kibana.yml）

server.name: kibana
server.host: 0.0.0.0
server.port: 5601
server.ssl.enabled: false
elasticsearch.hosts: [ "https://elasticsearch.laokou.org:9200" ]
xpack.monitoring.ui.container.elasticsearch.enabled: true
elasticsearch.ssl.verificationMode: none
elasticsearch.username: "kibana_system"
elasticsearch.password: "laokou123"
i18n.locale: zh-CN

配置编排

  kibana:image: kibana:8.12.2container_name: kibana# 保持容器在没有守护程序的情况下运行tty: truerestart: alwaysprivileged: trueenvironment:- TZ=Asia/Shanghaiports:- "5601:5601"volumes:- ./kibana8/config/kibana.yml:/usr/share/kibana/config/kibana.ymldepends_on:- elasticsearchextra_hosts:- "elasticsearch.laokou.org:127.0.0.1"deploy:resources:limits:cpus: '0.50'memory: 1G

创建密码

docker exec -it elasticsearch /bin/bashcurl -s -X POST https://elasticsearch.laokou.org:9200/_security/user/kibana_system/_password -d "{\"password\":\"laokou123\"}"

启动编排

docker-compose up -d

GitHub地址：docker-compose启动es8

大功告成