deploy.txt

# 运行容器生成证书
docker run --name elastic-charts-certs -i -w /app elasticsearch:7.7.1 /bin/sh -c  \
  "elasticsearch-certutil ca --out /app/elastic-stack-ca.p12 --pass '' && \
    elasticsearch-certutil cert --name security-master --dns \
    security-master --ca /app/elastic-stack-ca.p12 --pass '' --ca-pass '' --out /app/elastic-certificates.p12"

# 从容器中将生成的证书拷贝出来
docker cp elastic-charts-certs:/app/elastic-certificates.p12 ./ 

# 删除容器
docker rm -f elastic-charts-certs

# 将 pcks12 中的信息分离出来，写入文件
openssl pkcs12 -nodes -passin pass:'' -in elastic-certificates.p12 -out elastic-certificate.pem

# 添加证书
kubectl create secret generic elastic-certificates --from-file=elastic-certificates.p12
kubectl create secret generic elastic-certificate-pem --from-file=elastic-certificate.pem

# 设置集群用户名密码，用户名不建议修改
kubectl create secret generic elastic-credentials \
  --from-literal=username=elastic --from-literal=password=admin@123
  
# 添加 Chart 仓库
helm repo add  elastic  https://helm.elastic.co
helm repo update


# 安装 ElasticSearch Data 节点
helm install elasticsearch-data -f elasticsearch/es-data-values.yaml --version 7.17.3 elasticsearch

# 安装 ElasticSearch Master 节点
helm install elasticsearch-master -f elasticsearch/es-master-values.yaml --version 7.17.3 elasticsearch


# 安装 ElasticSearch Client 节点
helm install elasticsearch-client -f elasticsearch/es-client-values.yaml --version 7.17.3 elasticsearch   


helm install kibana -f kibana/es-kibana-values.yaml --version 7.17.3 kibana
  
helm install logstash -f logstash/es-logstash-values.yaml --version 7.17.3 logstash

helm install logstash-localdata -f logstash/es-logstash-localdata-values.yaml --version 7.17.3 logstash