使用 docker-compose 部署集群 創建索引的時候就確定好主分片的數量，**后期是無法修改主分片數量的** 3個 es, 1個kibana docker-compose-elasticsearch.yml ``` version: '3' services: elasticsearch9200: image: elasticsearch:7.6.2 container_name: elasticsearch9200 volumes: - ./data/elasticsearch9200/data:/usr/share/elasticsearch/data - ./data/elasticsearch9200/plugins:/usr/share/elasticsearch/plugins - ./data/elasticsearch9200/config:/usr/share/elasticsearch/config environment: - TZ=Asia/Shanghai - LANG=en_US.UTF-8 ports: - "9200:9200" - "9300:9300" networks: wkcrm_network: restart: always elasticsearch9201: image: elasticsearch:7.6.2 container_name: elasticsearch9201 volumes: - ./data/elasticsearch9201/data:/usr/share/elasticsearch/data - ./data/elasticsearch9201/plugins:/usr/share/elasticsearch/plugins - ./data/elasticsearch9201/config:/usr/share/elasticsearch/config environment: - TZ=Asia/Shanghai - LANG=en_US.UTF-8 ports: - "9201:9200" - "9301:9300" networks: wkcrm_network: restart: always elasticsearch9202: image: elasticsearch:7.6.2 container_name: elasticsearch9202 volumes: - ./data/elasticsearch9202/data:/usr/share/elasticsearch/data - ./data/elasticsearch9202/plugins:/usr/share/elasticsearch/plugins - ./data/elasticsearch9202/config:/usr/share/elasticsearch/config environment: - TZ=Asia/Shanghai - LANG=en_US.UTF-8 ports: - "9202:9200" - "9302:9300" networks: wkcrm_network: restart: always kibana5601: image: kibana:7.6.2 container_name: kibana5601 volumes: - ./data/kibana5601/data:/usr/share/kibana/data - ./data/kibana5601/config:/usr/share/kibana/config - ./data/kibana5601/plugins:/usr/share/kibana/plugins ports: - "5601:5601" networks: wkcrm_network: restart: always networks: wkcrm_network: external: name: wkcrm_network ``` start.sh ``` #!/bin/bash chmod -R 777 ./; docker network create --driver=bridge wkcrm_network docker-compose -f docker-compose-elasticsearch.yml up -d echo " ------------ 正在下載安裝中 ------------ "; ``` start.sh 執行報錯可以參考 Linux 目錄下的 sh文件執行報錯 的解決 elasticsearch9200的 elasticsearch.yml ``` # 開啟賬號密碼 #xpack.security.enabled: true #xpack.license.self_generated.type: basic #xpack.security.transport.ssl.enabled: true #xpack.security.transport.ssl.verification_mode: certificate #xpack.security.transport.ssl.keystore.path: elastic-certificates.p12 #xpack.security.transport.ssl.truststore.path: elastic-certificates.p12 #跨域支持 http.cors.enabled: true http.cors.allow-origin: "*" #集群名稱（所有節點的集群名稱必須一致） cluster.name: elasticsearch #節點名稱（集群下每個節點都不相同） node.name: "es-node-0" #定義為主節點 node.master: true #定義為數據節點 node.data: true #訪問的IP地址，0.0.0.0表示不限制 network.host: 0.0.0.0 #訪問端口號 http.port: 9200 #集群通訊端口號 transport.tcp.port: 9300 #所有節點的ip地址, docker 下可以使用服務名調用 discovery.zen.ping.unicast.hosts: ["elasticsearch9200:9300", "elasticsearch9201:9300", "elasticsearch9202:9300"] ``` elasticsearch9201的 elasticsearch.yml ``` # 開啟賬號密碼 #xpack.security.enabled: true #xpack.license.self_generated.type: basic #xpack.security.transport.ssl.enabled: true #xpack.security.transport.ssl.verification_mode: certificate #xpack.security.transport.ssl.keystore.path: elastic-certificates.p12 #xpack.security.transport.ssl.truststore.path: elastic-certificates.p12 #跨域支持 http.cors.enabled: true http.cors.allow-origin: "*" #集群名稱（所有節點的集群名稱必須一致） cluster.name: elasticsearch #節點名稱（集群下每個節點都不相同） node.name: "es-node-1" #定義為主節點 node.master: false #定義為數據節點 node.data: true #訪問的IP地址，0.0.0.0表示不限制 network.host: 0.0.0.0 #訪問端口號 http.port: 9200 #集群通訊端口號 transport.tcp.port: 9300 #所有節點的ip地址, docker 下可以使用服務名調用 discovery.zen.ping.unicast.hosts: ["elasticsearch9200:9300", "elasticsearch9201:9300", "elasticsearch9202:9300"] ``` elasticsearch9202的 elasticsearch.yml ``` # 開啟安全認證 #xpack.security.enabled: true #xpack.license.self_generated.type: basic #xpack.security.transport.ssl.enabled: true #xpack.security.transport.ssl.verification_mode: certificate #xpack.security.transport.ssl.keystore.path: elastic-certificates.p12 #xpack.security.transport.ssl.truststore.path: elastic-certificates.p12 #跨域支持 http.cors.enabled: true http.cors.allow-origin: "*" #集群名稱（所有節點的集群名稱必須一致） cluster.name: elasticsearch #節點名稱（集群下每個節點都不相同） node.name: "es-node-2" #定義為主節點 node.master: false #定義為數據節點 node.data: true #訪問的IP地址，0.0.0.0表示不限制 network.host: 0.0.0.0 #訪問端口號 http.port: 9200 #集群通訊端口號 transport.tcp.port: 9300 #所有節點的ip地址, docker 下可以使用服務名調用 discovery.zen.ping.unicast.hosts: ["elasticsearch9200:9300", "elasticsearch9201:9300", "elasticsearch9202:9300"] ``` 集群加賬號密碼的沒實現, 主要是沒實現節點間的ca證書 docker exec -it 容器id /bin/bash ./bin/elasticsearch-certutil ca 輸入的證書密碼, 最好都使用同一個 ``` # 這是生成證書名稱, 直接回車即可 Please enter the desired output file [elastic-stack-ca.p12]: Enter password for elastic-stack-ca.p12 : 設置證書密碼 123456 ``` ./bin/elasticsearch-certutil cert --ca elastic-stack-ca.p12 ``` Enter password for CA (elastic-stack-ca.p12) : 輸入 密碼 123456 輸入文件名 回車使用默認即可 輸入 密碼 123456 ``` bin/elasticsearch-keystore add xpack.security.transport.ssl.keystore.secure_password 輸入第一步輸入的密碼 bin/elasticsearch-keystore add xpack.security.transport.ssl.truststore.secure_password 輸入第一步輸入的密碼 生成位置 /usr/share/elasticsearch/elastic-certificates.p12 退出容器, 復制docker 文件到主機 ``` docker cp 主機id:/usr/share/elasticsearch/elastic-certificates.p12 /dockerdata/elasticsearch-cluster/data/elastic-certificates.p12 ``` 在config目錄創建certs目錄 拷貝p12文件至certs目錄 elasticsearch.yml ``` # 開啟安全認證 xpack.security.enabled: true xpack.license.self_generated.type: basic xpack.security.transport.ssl.enabled: true xpack.security.transport.ssl.verification_mode: certificate xpack.security.transport.ssl.keystore.path: certs/elastic-certificates.p12 xpack.security.transport.ssl.truststore.path: certs/elastic-certificates.p12 ```