如何使用 docker elk stack 設置 kibana 用戶憑據

Question

如何使用 docker elk stack 容器為 kibana gui 設置登錄憑據。

必須在 docker-compose.yaml 文件中傳遞哪些 arguments 和環境變量才能使其正常工作。

Answer 1

# 1. For setting kibana gui user credentials for docker elk stack, 
# we have to set "xpack.security.enabled: true" either in elasticsearch.yml 
# file or pass this as a environment variable in docker-compose.yml file

# 2.Pass username & password as environment variable in docker-compose.yml 
# for elasticsearch service like below 



        version: '3.3'

        services:


          elasticsearch:

            image: docker.elastic.co/elasticsearch/elasticsearch:6.6.1
            ports:
              - "9200:9200"
              - "9300:9300"
            configs:
              - source: elastic_config
                target: /usr/share/elasticsearch/config/elasticsearch.yml
            environment:
              ES_JAVA_OPTS: "-Xmx256m -Xms256m"
              ELASTIC_USERNAME: "elastic"
              ELASTIC_PASSWORD: "MyPw123"
              http.cors.enabled: "true"
              http.cors.allow-origin: "*"
              xpack.security.enabled: "true"
            networks:
              - elk
            deploy:
              mode: replicated
              replicas: 1
          logstash:
            image: docker.elastic.co/logstash/logstash:6.6.1
            ports:
              - "5044:5044"
              - "9600:9600"
            configs:
              - source: logstash_config
                target: /usr/share/logstash/config/logstash.yml:rw
              - source: logstash_pipeline
                target: /usr/share/logstash/pipeline/logstash.conf
            environment:`enter code here`
            LS_JAVA_OPTS: "-Xmx256m -Xms256m"
            xpack.monitoring.elasticsearch.url: "elasticsearch:9200"
            xpack.monitoring.elasticsearch.username: "elastic"
            xpack.monitoring.elasticsearch.password: "MyPw123"
            networks:
              - elk
            deploy:
              mode: replicated
              replicas: 1

          kibana:
            image: docker.elastic.co/kibana/kibana:6.6.1
            ports:
              - "5601:5601"
            configs:
              - source: kibana_config
                target: /usr/share/kibana/config/kibana.yml


             networks:
               - elk
             deploy:
               mode: replicated
               replicas: 1

        configs:

          elastic_config:
            file: ./elasticsearch/config/elasticsearch.yml
          logstash_config:
            file: ./logstash/config/logstash.yml
          logstash_pipeline:
            file: ./logstash/pipeline/logstash.conf
          kibana_config:
            file: ./kibana/config/kibana.yml

        networks:
          elk:
            driver: overlay


#3. add this following lines in kibana.yml file
 ---
 ## Default Kibana configuration from kibana-docker.
 from https://github.com/elastic/kibana- 
 docker/blob/master/build/kibana/config/kibana.yml
 #
   server.name: kibana
   server.host: "0"
   elasticsearch.url: http://elasticsearch:9200
   elasticsearch.username: "elastic"
   elasticsearch.password: "MyPw123" 


 #4. then go to browser with localhost:5601->management->LicenseManagement 
 (underElasticsearch) and select trial or update your license.  

Answer 2

如果不向 kibana 的容器添加 XPACK_MONITORING & SECURITY 標志就無法讓它工作，並且不需要配置文件

但是我無法使用“kibana”用戶，即使在使用“elastic”用戶登錄並通過 UI 更改 kibana 的密碼之后也是如此。

version: "3.7"
services:   
    elasticsearch:
        image: elasticsearch:7.4.0
        restart: always
        ports:
            - 9200:9200
        environment:
            - discovery.type=single-node
            - xpack.security.enabled=true
            - ELASTIC_PASSWORD=123456
    kibana:
        image: kibana:7.4.0
        restart: always
        ports:
            - 5601:5601
        environment:
            - ELASTICSEARCH_HOSTS=http://elasticsearch:9200
            - XPACK_MONITORING_ENABLED=true
            - XPACK_MONITORING_COLLECTION_ENABLED=true
            - XPACK_SECURITY_ENABLED=true
            - ELASTICSEARCH_USERNAME=elastic
            - ELASTICSEARCH_PASSWORD="123456"
        depends_on:
            - elasticsearch

資源