elasticsearch開啟安全認證步驟

1.創建證書

進入到es主目錄下執行
./bin/elasticsearch-certutil ca Elasticsearch開啟安全認證詳細步驟
第一個證書名稱默認，直接回車
第二個輸入密碼，直接回車
完成后會生成一個文件：elastic-stack-ca.p12

2.根據生成的證書創建秘鑰

./bin/elasticsearch-certutil cert --ca elastic-stack-ca.p12
同樣的步驟，一直回車下去會生成elastic-certificates.p12秘鑰文件

3.開啟認證

依次把elastic-certificates.p12文件復制到各個節點的config目錄下并授權
chown -R elastic:elastic elastic-certificates.p12vim elasticsearch.ymlcluster.name: test-es
node.name: node-1  #每個節點名稱不同
network.host: 0.0.0.0
http.port: 9200
discovery.seed_hosts: ["es1", "es2", "es3"]
cluster.initial_master_nodes: ["es1", "es2", "es3"]
transport.tcp.port: 9300
http.cors.enabled: true
http.cors.allow-origin: "*"
cluster.routing.allocation.disk.watermark.flood_stage: 95%#添加以下配置
xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification_mode: certificate
xpack.security.transport.ssl.keystore.path: elastic-certificates.p12
xpack.security.transport.ssl.truststore.path: elastic-certificates.p12

4.啟動es并創建密碼

依次啟動es之后在一個節點執行
./bin/elasticsearch-setup-passwords auto
會自動生成以下賬戶密碼
elastic，apm_system，kibana，kibana_system，logstash_system，beats_system

至此ES開啟認證完成