elasticsearch-tls
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
elasticsearch-tls [2020/11/07 12:20] – [Configure Kibana for TLS and User Authentication] baumi | elasticsearch-tls [2020/11/08 12:41] (current) – baumi | ||
---|---|---|---|
Line 23: | Line 23: | ||
Please enter the desired output file [elastic-stack-ca.zip]: | Please enter the desired output file [elastic-stack-ca.zip]: | ||
[root@elk-test-elasticsearch elasticsearch]# | [root@elk-test-elasticsearch elasticsearch]# | ||
+ | Archive: | ||
+ | | ||
+ | inflating: / | ||
+ | inflating: / | ||
[root@elk-test-elasticsearch elasticsearch]# | [root@elk-test-elasticsearch elasticsearch]# | ||
Line 153: | Line 157: | ||
- ./ | - ./ | ||
</ | </ | ||
- | - Copy P12 file to correct place< | + | - Copy P12 file to correct place< |
+ | $ cp certs/ | ||
+ | $ sudo chown 1000:1000 elasticsearch/ | ||
+ | $ sudo chmod 600 elasticsearch/ | ||
+ | </ | ||
- Update elasticsearch.yml< | - Update elasticsearch.yml< | ||
$ grep xpack elasticsearch/ | $ grep xpack elasticsearch/ | ||
Line 214: | Line 222: | ||
$ docker-compose up -d && docker-compose logs -f | $ docker-compose up -d && docker-compose logs -f | ||
</ | </ | ||
+ | |||
+ | ===== Move username & password from Kibana Config ===== | ||
+ | |||
+ | - Create Keystore and populate with logon information< | ||
+ | $ docker exec -it elk-test-kibana bash | ||
+ | bash-4.2$ bin/ | ||
+ | Created Kibana keystore in / | ||
+ | bash-4.2$ bin/ | ||
+ | Enter value for elasticsearch.username: | ||
+ | bash-4.2$ bin/ | ||
+ | Enter value for elasticsearch.password: | ||
+ | </ | ||
+ | - Copy keystore to persistent storage< | ||
+ | $ docker cp elk-test-kibana:/ | ||
+ | </ | ||
+ | - Adjust docker-compose.yml for bind mount of keystore file< | ||
+ | services: | ||
+ | kibana: | ||
+ | volumes: | ||
+ | - ./ | ||
+ | </ | ||
+ | - Remove elasticsearch.username and elasticsearch.username from kibana.yml | ||
+ | - Restart kibana | ||
+ | |||
+ | |||
+ | |||
{{tag>kb elasticsearch}} | {{tag>kb elasticsearch}} | ||
elasticsearch-tls.1604748027.txt.gz · Last modified: 2020/11/07 12:20 by baumi