kubectl create namespace kube-log

# 下載es映象
docker pull elasticsearch:7.13.1

# 執行容器生成證書
$ docker run --name elastic-certs -i elasticsearch:7.13.1 /bin/sh -c  \
  "elasticsearch-certutil ca --out /tmp/elastic-stack-ca.p12 --pass '' && \
    elasticsearch-certutil cert --name security-master --dns \
    security-master --ca /tmp/elastic-stack-ca.p12 --pass '' --ca-pass '' \
    --out /tmp/elastic-certificates.p12"

# 從容器中將生成的證書拷貝出來
$ docker cp elastic-certs:/tmp/elastic-certificates.p12 .

# 刪除容器
$ docker rm -f elastic-certs

# 將 pcks12 中的資訊分離出來，寫入檔案
$ openssl pkcs12 -nodes -passin pass:'' -in elastic-certificates.p12 -out elastic-certificate.pem

 

# 新增證書
$ kubectl create secret -n kube-log generic elastic-certs --from-file=elastic-certificates.p12

# 設定叢集使用者名稱密碼
$ kubectl create secret -n kube-log generic elastic-auth --from-literal=username=elastic --from-literal=password=elastic123

helm repo add elastic https://helm.elastic.co
helm repo update
 

helm pull elastic/elasticsearch --untar --version 7.13.1
cd elasticsearch/