给Elasticsearch和Kibana加上权限控制

vi elasticsearch/config/elasticsearch.yml

xpack.security.enabled: true
xpack.security.authc.accept_default_password: false

discovery.type: single-node

elasticsearch/bin/elasticsearch-setup-passwords interactive

curl -XPOST -u elastic 'localhost:9200/_security/role/events_admin' -H "Content-Type: application/json" -d '{
  "indices" : [
    {
      "names" : [ "events*" ],
      "privileges" : [ "all" ]
    },
    {
      "names" : [ ".kibana*" ],
      "privileges" : [ "manage", "read", "index" ]
    }
  ]
}'

curl -XPOST -u elastic 'localhost:9200/_security/user/your_name' -H "Content-Type: application/json" -d '{
  "password" : "userpassword",
  "full_name" : "Full Name",
  "email" : "fullname@anony.mous",
  "roles" : [ "events_admin" ]
}'

vi kibana/config/kibana.yml

elasticsearch.username: "kibana"
elasticsearch.password: "kibanapassword"
xpack.security.encryptionKey: "something_at_least_32_characters"