Improve the documentation for TLS (#728)
Co-authored-by: Julien Mailleret <8582351+jmlrt@users.noreply.github.com>
This commit is contained in:
parent
ca39bf107e
commit
674cea7938
1 changed files with 27 additions and 2 deletions
|
|
@ -68,8 +68,8 @@ $ bin/elasticsearch-certutil cert --ca ./my-ca.p12 --out ./my-keystore.p12 --pas
|
||||||
xpack.security.authc.realms.file.file1.order: 0
|
xpack.security.authc.realms.file.file1.order: 0
|
||||||
xpack.security.authc.realms.native.native1.order: 1
|
xpack.security.authc.realms.native.native1.order: 1
|
||||||
es_heap_size: 1g
|
es_heap_size: 1g
|
||||||
es_api_basic_auth_username: elastic
|
es_api_basic_auth_username: "elastic" # This is the default user created by the installation of elasticsearch
|
||||||
es_api_basic_auth_password: changeme
|
es_api_basic_auth_password: "changeme" # This is the default password created by the installation of elasticsearch
|
||||||
es_enable_http_ssl: true
|
es_enable_http_ssl: true
|
||||||
es_enable_transport_ssl: true
|
es_enable_transport_ssl: true
|
||||||
es_ssl_keystore: "files/certs/my-keystore.p12"
|
es_ssl_keystore: "files/certs/my-keystore.p12"
|
||||||
|
|
@ -78,3 +78,28 @@ $ bin/elasticsearch-certutil cert --ca ./my-ca.p12 --out ./my-keystore.p12 --pas
|
||||||
es_ssl_truststore_password: "truststore_password"
|
es_ssl_truststore_password: "truststore_password"
|
||||||
es_validate_certs: no
|
es_validate_certs: no
|
||||||
```
|
```
|
||||||
|
|
||||||
|
## Changing the default password of elastic user
|
||||||
|
|
||||||
|
To change the default password of user elastic:
|
||||||
|
|
||||||
|
* Add this line to your playbook:
|
||||||
|
|
||||||
|
```
|
||||||
|
vars:
|
||||||
|
es_api_basic_auth_username: "elastic"
|
||||||
|
es_api_basic_auth_password: "changeme"
|
||||||
|
es_users:
|
||||||
|
native:
|
||||||
|
elastic:
|
||||||
|
password: "<new password>"
|
||||||
|
```
|
||||||
|
|
||||||
|
* Deploy your playbook
|
||||||
|
* Update your playbook with:
|
||||||
|
|
||||||
|
```
|
||||||
|
vars:
|
||||||
|
es_api_basic_auth_username: "elastic"
|
||||||
|
es_api_basic_auth_password: "<new password>"
|
||||||
|
```
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue