1. 도메인이 외부에 노출되어 있어야 함2. 도메인으로 외부에서 서비스 접근 가능해야 함: nginx, ingress 구성3. Let's Encrypt 인증서 갱신: nginx

DeploymentapiVersion: apps/v1kind: Deploymentmetadata: name: kafka-ui namespace: kafkaspec: replicas: 1 selector: matchLabels: app: kafka-ui template: metadata: labels: app: kafka-ui spec: containers: - name: kafka-ui image: provectuslabs/kafka-ui:latest ports: - containerPort: 8080 env: - name: KAFKA_CLU..

kiban_system 비밀번호 생성# elastic pod 접속kubectl exec -it pod/elastic-0 -n elastic -- sh# 비밀번호 생성elasticsearch-reset-password -u kibana_systemConfigMapapiVersion: v1kind: ConfigMapmetadata: name: kibana-config namespace: elastic # Ensure it matches the Elasticsearch namespacedata: kibana.yml: | server.name: kibana server.host: "0.0.0.0" elasticsearch.hosts: ["http://elastic-headless:9200..

원인: node의 max_map_count 용량이 작아서 발생한 문제조치방법1: node에 직접 설정# 임시sudo sysctl -w vm.max_map_count=262144# 영구echo "vm.max_map_count=262144" | sudo tee -a /etc/sysctl.confsudo sysctl -p방법2: daemonset 추가apiVersion: apps/v1kind: DaemonSetmetadata: name: sysctl-settings namespace: kube-systemspec: selector: matchLabels: name: sysctl-settings template: metadata: labels: name: sysc..

certificates 생성을 위한 pod 구성kubectl run test --image=docker.elastic.co/elasticsearch/elasticsearch:{tag} -- tail -f /dev/nullkubectl exec -it pod/test -- shcertificates 생성dns 등록이 중요# ca 생성elasticsearch-certutil ca --out certs/elastic-stack-ca.p12 --pass ""# cert 생성elasticsearch-certutil cert --ca certs/elastic-stack-ca.p12 --ca-pass "" \ --dns elastic-0.elastic-headless,elastic-1.elastic-headless..

ConfigMapJVM 메모리 설정 중요로그인창을 위해서는 security 설정을 해야 함 > ssl 설정도 해야 함apiVersion: v1kind: ConfigMapmetadata: name: elastic-config namespace: elasticdata: elasticsearch.yml: | cluster.name: my-cluster node.name: ${HOSTNAME} discovery.seed_hosts: ["elastic-0.elastic-headless", "elastic-1.elastic-headless", "elastic-2.elastic-headless"] cluster.initial_master_nodes: ["elastic-0", "elastic..