I can't curl my elasticsearch 8 on AWS ec2(ubuntu 20.04)

Elastic Stack Elasticsearch
,
1

installed elasticsearch(docker compose) 8.2 on aws ec2(ubuntu 20.04.)

Everything is working.My only problem is that I can't reach(curl) it from other instances and my backend server(it is on same vpc).

I added my node to its discovery node, and also set network.host: 0.0.0.0 but I still can't reach it (I tried with both private and public ip) Is it necessary to install SSL/TSL on it with elastic 8? Does anyone has any suggestion how to access it?

Here is my yml file
if [ ! -f config/certs/certs.zip ]; then
echo "Creating certs";
echo -ne
"instances:\n"
" - name: es01\n"
" dns:\n"
" - es01\n"
" - localhost\n"
" ip:\n"
" - 127.0.0.1\n"
" - name: es02\n"
" dns:\n"
" - es02\n"
" - localhost\n"
" ip:\n"
" - 127.0.0.1\n"
" - name: es03\n"
" dns:\n"
" - es03\n"
" - localhost\n"
" ip:\n"
" - 127.0.0.1\n"
> config/certs/instances.yml;
bin/elasticsearch-certutil cert --silent --pem -out config/certs/certs.zip --in config/certs/instances.yml --ca-cert config/certs/ca/ca.crt --ca-key config/certs/ca/ca>
unzip config/certs/certs.zip -d config/certs;
fi;
echo "Setting file permissions"
chown -R root:root config/certs;
find . -type d -exec chmod 750 {} ;;
find . -type f -exec chmod 640 {} ;;
echo "Waiting for Elasticsearch availability";
until curl -s --cacert config/certs/ca/ca.crt https://es01:9200 | grep -q "missing authentication credentials"; do sleep 30; done;
echo "Setting kibana_system password";
until curl -s -X POST --cacert config/certs/ca/ca.crt -u elastic:${ELASTIC_PASSWORD} -H "Content-Type: application/json" https://es01:9200/_security/user/kibana_system/_>
echo "All done!";
healthcheck:
test: ["CMD-SHELL", "[ -f config/certs/es01/es01.crt ]"]
interval: 1s
timeout: 5s
retries: 120

es01:
depends_on:
setup:
condition: service_healthy
image: docker.elastic.co/elasticsearch/elasticsearch:${STACK_VERSION}
volumes:
- certs:/usr/share/elasticsearch/config/certs
- esdata01:/usr/share/elasticsearch/data
ports:
- ${ES_PORT}:9200
environment:
- node.name=es01

- ES_JAVA_OPTS="-Xms256m -Xmx256m"

  - network.bind_host=0.0.0.0
  - network.host=0.0.0.0
  - cluster.name=${CLUSTER_NAME}
  - cluster.initial_master_nodes=es01,es02,es03
  - discovery.seed_hosts=es02,es03,"172.31.61.162"
  - ELASTIC_PASSWORD=${ELASTIC_PASSWORD}
  - bootstrap.memory_lock=true
  - xpack.security.enabled=true
  - xpack.security.http.ssl.enabled=true
  - xpack.security.http.ssl.key=certs/es01/es01.key
  - xpack.security.http.ssl.certificate=certs/es01/es01.crt
  - xpack.security.http.ssl.certificate_authorities=certs/ca/ca.crt
  - xpack.security.http.ssl.verification_mode=certificate
  - xpack.security.transport.ssl.enabled=true
  - xpack.security.transport.ssl.key=certs/es01/es01.key
  - xpack.security.transport.ssl.certificate=certs/es01/es01.crt
  - xpack.security.transport.ssl.certificate_authorities=certs/ca/ca.crt
  - xpack.security.transport.ssl.verification_mode=certificate
  - xpack.license.self_generated.type=${LICENSE}
mem_limit: ${MEM_LIMIT}
ulimits:
2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.