elasticsearch-tls
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| elasticsearch-tls [2020/11/07 12:18] – [Configure Kibana for TLS and User Authentication] baumi | elasticsearch-tls [2020/11/08 12:41] (current) – baumi | ||
|---|---|---|---|
| Line 23: | Line 23: | ||
| Please enter the desired output file [elastic-stack-ca.zip]: | Please enter the desired output file [elastic-stack-ca.zip]: | ||
| [root@elk-test-elasticsearch elasticsearch]# | [root@elk-test-elasticsearch elasticsearch]# | ||
| + | Archive: | ||
| + | | ||
| + | inflating: / | ||
| + | inflating: / | ||
| [root@elk-test-elasticsearch elasticsearch]# | [root@elk-test-elasticsearch elasticsearch]# | ||
| Line 153: | Line 157: | ||
| - ./ | - ./ | ||
| </ | </ | ||
| - | - Copy P12 file to correct place< | + | - Copy P12 file to correct place< |
| + | $ cp certs/ | ||
| + | $ sudo chown 1000:1000 elasticsearch/ | ||
| + | $ sudo chmod 600 elasticsearch/ | ||
| + | </ | ||
| - Update elasticsearch.yml< | - Update elasticsearch.yml< | ||
| $ grep xpack elasticsearch/ | $ grep xpack elasticsearch/ | ||
| Line 204: | Line 212: | ||
| - ./ | - ./ | ||
| </ | </ | ||
| - | - Add TLS & authentication information to kibana.yml | + | - Add TLS & authentication information to kibana.yml< |
| - | - | + | elasticsearch: |
| + | | ||
| + | ssl.certificateAuthorities: | ||
| + | username: " | ||
| + | password: " | ||
| + | </ | ||
| + | - Restart elk-stack< | ||
| + | $ docker-compose up -d && docker-compose logs -f | ||
| + | </ | ||
| + | |||
| + | ===== Move username & password from Kibana Config ===== | ||
| + | |||
| + | - Create Keystore and populate with logon information< | ||
| + | $ docker exec -it elk-test-kibana bash | ||
| + | bash-4.2$ bin/ | ||
| + | Created Kibana keystore in / | ||
| + | bash-4.2$ bin/ | ||
| + | Enter value for elasticsearch.username: | ||
| + | bash-4.2$ bin/ | ||
| + | Enter value for elasticsearch.password: | ||
| + | </ | ||
| + | - Copy keystore to persistent storage< | ||
| + | $ docker cp elk-test-kibana:/ | ||
| + | </ | ||
| + | - Adjust docker-compose.yml for bind mount of keystore file< | ||
| + | services: | ||
| + | kibana: | ||
| + | volumes: | ||
| + | - ./ | ||
| + | </ | ||
| + | - Remove elasticsearch.username and elasticsearch.username from kibana.yml | ||
| + | - Restart kibana | ||
| + | |||
| + | |||
| {{tag>kb elasticsearch}} | {{tag>kb elasticsearch}} | ||
elasticsearch-tls.1604747919.txt.gz · Last modified: by baumi