mirror of https://github.com/easzlab/kubeasz.git
32 lines
2.0 KiB
Plaintext
32 lines
2.0 KiB
Plaintext
|
The elasticsearch cluster has been installed.
|
||
|
|
|
||
|
|
Elasticsearch can be accessed:
|
||
|
|
|
||
|
|
* Within your cluster, at the following DNS name at port 9200:
|
||
|
|
|
||
|
|
{{ template "elasticsearch.client.fullname" . }}.{{ .Release.Namespace }}.svc.cluster.local
|
||
|
|
|
||
|
|
* From outside the cluster, run these commands in the same shell:
|
||
|
|
{{- if contains "NodePort" .Values.client.serviceType }}
|
||
|
|
|
||
|
|
export NODE_PORT=$(kubectl get --namespace {{ .Release.Namespace }} -o jsonpath="{.spec.ports[0].nodePort}" services {{ template "elasticsearch.client.fullname" . }})
|
||
|
|
export NODE_IP=$(kubectl get nodes --namespace {{ .Release.Namespace }} -o jsonpath="{.items[0].status.addresses[0].address}")
|
||
|
|
echo http://$NODE_IP:$NODE_PORT
|
||
|
|
{{- else if contains "LoadBalancer" .Values.client.serviceType }}
|
||
|
|
|
||
|
|
WARNING: You have likely exposed your Elasticsearch cluster direct to the internet.
|
||
|
|
Elasticsearch does not implement any security for public facing clusters by default.
|
||
|
|
As a minimum level of security; switch to ClusterIP/NodePort and place an Nginx gateway infront of the cluster in order to lock down access to dangerous HTTP endpoints and verbs.
|
||
|
|
|
||
|
|
NOTE: It may take a few minutes for the LoadBalancer IP to be available.
|
||
|
|
You can watch the status of by running 'kubectl get svc -w {{ template "elasticsearch.client.fullname" . }}'
|
||
|
|
|
||
|
|
export SERVICE_IP=$(kubectl get svc --namespace {{ .Release.Namespace }} {{ template "elasticsearch.client.fullname" . }} -o jsonpath='{.status.loadBalancer.ingress[0].ip}')
|
||
|
|
echo http://$SERVICE_IP:9200
|
||
|
|
{{- else if contains "ClusterIP" .Values.client.serviceType }}
|
||
|
|
|
||
|
|
export POD_NAME=$(kubectl get pods --namespace {{ .Release.Namespace }} -l "app={{ template "elasticsearch.name" . }},component={{ .Values.client.name }},release={{ .Release.Name }}" -o jsonpath="{.items[0].metadata.name}")
|
||
|
|
echo "Visit http://127.0.0.1:9200 to use Elasticsearch"
|
||
|
|
kubectl port-forward --namespace {{ .Release.Namespace }} $POD_NAME 9200:9200
|
||
|
|
{{- end }}
|