Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Code Block
languagebash
titleGenerate certificates and start ESK
collapsetrue
$ docker-compose -f create-certs.yml run --rm create_certs
Creating es_create_certs_run ... done
Archive:  /certs/bundle.zip
   creating: /certs/ca/
  inflating: /certs/ca/ca.crt
   creating: /certs/es01/
  inflating: /certs/es01/es01.crt
  inflating: /certs/es01/es01.key
   creating: /certs/kib01/
  inflating: /certs/kib01/kib01.crt
  inflating: /certs/kib01/kib01.key

$ docker-compose -f elastic-docker-tls.yml up -d
Creating es01 ... done
Creating kib01 ... done


Note

At this point, Kibana cannot connect to the Elasticsearch cluster. You must generate a password for the built-in kibana_system user, update the ELASTICSEARCH_PASSWORD in the compose file, and restart to enable Kibana to communicate with the secured cluster.

...

After the restart, now we can connect to the Kibana dashboard and verify that the service is working (remember to use the https protocol). As already seen, you can tear down the containers, network, and volumes by running docker-compose -f elastic-docker-tls.yml down -v.

Run FileBeat on K8s (TLS enabled)