2025년 5월 20일 화요일

Elasticsearch 9.0의 변화 - 2nd

stack mornitoring 실행하니 이런 에러가 뜬다. 개체 암호화키가 필요하다고?

에러 메시지 안 뜰 수도 있음

까라면 까야지(..) 암호화키 생성.

PS D:\ELK\kibana-9.0.1\bin> .\kibana-encryption-keys.bat generate -i
## Kibana Encryption Key Generation Utility
 
The 'generate' command guides you through the process of setting encryption keys for:
 
xpack.encryptedSavedObjects.encryptionKey
    Used to encrypt stored objects such as dashboards and visualizations
    https://www.elastic.co/guide/en/kibana/current/xpack-security-secure-saved-objects.html#xpack-security-secure-saved-objects
 
xpack.reporting.encryptionKey
    Used to encrypt saved reports
    https://www.elastic.co/guide/en/kibana/current/reporting-settings-kb.html#general-reporting-settings
 
xpack.security.encryptionKey
    Used to encrypt session information
    https://www.elastic.co/guide/en/kibana/current/security-settings-kb.html#security-session-and-cookie-settings
 
 
Already defined settings are ignored and can be regenerated using the --force flag.  Check the documentation links for instructions on how to rotate encryption keys.
Definitions should be set in the kibana.yml used configure Kibana.
 
This tool will ask you a number of questions in order to generate the right set of keys for your needs.
 
Set xpack.encryptedSavedObjects.encryptionKey? [y/N] y
Set xpack.reporting.encryptionKey? [y/N] n
Set xpack.security.encryptionKey? [y/N] n
 
The following key was generated:
xpack.encryptedSavedObjects.encryptionKey
 
Save generated keys to a sample Kibana configuration file? [y/N] y
What filename should be used for the sample Kibana config file? [D:\ELK\kibana-9.0.1\config\kibana.sample.yml]):
Wrote configuration to D:\ELK\kibana-9.0.1\config\kibana.sample.yml
cs

생성된 암호화키 설정 추가.


보안이 계속 강화된다. 보안 중요하지(..)

댓글 없음:

댓글 쓰기

크리에이티브 커먼즈 라이선스