PROSAGA码农传奇-倒排索引/搜索引擎-在kubernetes集群中运行的elasticsearch pod的基本身份验证

在kubernetes集群中运行的elasticsearch pod的基本身份验证

作者: 一生浮华
发布时间: 2024-01-23 10:44:17 (6月前)
转自：

<div class =“post-text”itemprop =“text”>
  <P>
    好吧，如果你正在使用
     <code>
      nginx ingress controller
    </code>
     你可以像这样添加基本身份验证：
  </p>
   <pre>
    <code>
      apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: kibana
  namespace: kibana
  annotations:
    kubernetes.io/ingress.class: "nginx"
    # type of authentication
    nginx.ingress.kubernetes.io/auth-type: basic
    # name of the secret that contains the user/password definitions
    nginx.ingress.kubernetes.io/auth-secret: my-secret-basic-auth
    # message to display with an appropriate context why the authentication is required
    nginx.ingress.kubernetes.io/auth-realm: 'Authentication Required - kibana-admin'
  ...
  ...

</code>
  </pre>
  <P>
    该
     <code>
      my-secret-basic-auth
    </code>
     必须创建
     <code>
      htpasswd
    </code>
    ：
  </p>
   <pre>
    <code>
      $ htpasswd -c auth foo
New password: <bar>
New password:
Re-type new password:
Adding password for user foo

</code>
  </pre>
  <P>
    然后你需要创建秘密：
  </p>
   <pre>
    <code>
      $ kubectl create secret generic my-secret-basic-auth --from-file=auth
secret "my-secret-basic-auth" created

</code>
  </pre>
  <P>
    这很简单，易于维护，但你会坚持
     <code>
      nginx ingress controller
    </code>
     永远。
  </p>
</DIV>