https://opensearch.org/downloads/
les premieres experimentations
version 3.3
1/ il faut absolument
a/ beaucoup d'espace disque
moins de 90% empeche le demarrage
b/ definir la variable d'env OPENSEARCH_INITIAL_ADMIN_PASSWORD
une fois ceci fait on peut démarrer le cluster.
2/ mettre en place la securité
docker exec -it opensearch-node1 /usr/share/opensearch/plugins/opensearch-security/tools/securityadmin.sh \
-cd /usr/share/opensearch/config/opensearch-security/ \
-icl -nhnv \
-cacert /usr/share/opensearch/config/root-ca.pem \
-cert /usr/share/opensearch/config/kirk.pem \
-key /usr/share/opensearch/config/kirk-key.pem \
-h opensearch-node1 -p 9200
normalement le message de sortie indique :
Security Admin v7
Will connect to opensearch-node1:9200 ... done
Connected as "CN=kirk,OU=client,O=client,L=test,C=de"
OpenSearch Version: 3.3.0
Contacting opensearch cluster 'opensearch' and wait for YELLOW clusterstate ...
Clustername: opensearch-cluster
Clusterstate: YELLOW
Number of nodes: 2
Number of data nodes: 2
.opendistro_security index already exists, so we do not need to create one.
INFO: .opendistro_security index state is YELLOW, it seems you miss some replicas
Populate config from /usr/share/opensearch/config/opensearch-security/
Will update '/config' with /usr/share/opensearch/config/opensearch-security/config.yml
SUCC: Configuration for 'config' created or updated
avec le user admin et le mdp de OPENSEARCH_INITIAL_ADMIN_PASSWORD
No comments:
Post a Comment