SSL certificate | Let's Encrypt or self-signed

Elastic Stack Elasticsearch
4

Hi @Danelicious

I understand completely if you get confused. Let's try to work it out.

"node1" does not have to be the node.name configured in the yml-file, but it is recommended. The "name" in instances.yml describes how the certificate will be named.

I think you get confused with the domain names. Imagine having a domain controller with the domain abcd.com. Then you have server1, server2 and server3 as part of your domain. You can ping the servers with their names, server1.abcd.com, server2.abcd.com and server3.abcd.com. The names in the "dns" section must match the the fully qualified domain name of the servers or of their aliases.

With Kibana, it is the same. "name" describes the name and "dns" the FQDN.

Example:

instances.yml:

instances:
  - name: es01
    dns:
      - es01.abcd.com
 
  - name: es02
    dns:
      - es02.abcd.com
 
  - name: es03
    dns:
      - es03.abcd.com
 
  - name: kibana
    dns:
      - kibana.abcd.com

When the certificates are generated, you have to configure the settings in your configuration files of Elasticsearch and Kibana.

I don't know how to integrate Let's encrypt, sorry.

Hope this helps.

1 Like