iSharkFly-Docs
/
opensearch-docs-cn
mirror of https://github.com/iSharkFly-Docs/opensearch-docs-cn
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Give CCS Compose file unique node names 

Avoid weird conflicts if you use our main Compose file and then try to use this one.
This commit is contained in:
aetter 2021-09-24 13:49:48 -07:00
parent a9144167d8
commit d2ba96967b
1 changed files with 17 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

34
_security-plugin/access-control/cross-cluster-search.md
View File

@ -65,11 +65,11 @@ Save this file as `docker-compose.yml` and run `docker-compose up` to start two
```yml ```yml
version: '3' version: '3'
services: services:
opensearch-node1: opensearch-ccs-node1:
image: opensearchproject/opensearch:{{site.opensearch_version}} image: opensearchproject/opensearch:{{site.opensearch_version}}
container_name: opensearch-node1 container_name: opensearch-ccs-node1
environment: environment:
- cluster.name=opensearch-cluster1 - cluster.name=opensearch-ccs-cluster1
- discovery.type=single-node - discovery.type=single-node
- bootstrap.memory_lock=true # along with the memlock settings below, disables swapping - bootstrap.memory_lock=true # along with the memlock settings below, disables swapping
- "OPENSEARCH_JAVA_OPTS=-Xms512m -Xmx512m" # minimum and maximum Java heap size, recommend setting both to 50% of system RAM - "OPENSEARCH_JAVA_OPTS=-Xms512m -Xmx512m" # minimum and maximum Java heap size, recommend setting both to 50% of system RAM
@ -85,11 +85,11 @@ services:
networks: networks:
- opensearch-net - opensearch-net
opensearch-node2: opensearch-ccs-node2:
image: opensearchproject/opensearch:{{site.opensearch_version}} image: opensearchproject/opensearch:{{site.opensearch_version}}
container_name: opensearch-node2 container_name: opensearch-ccs-node2
environment: environment:
- cluster.name=opensearch-cluster2 - cluster.name=opensearch-ccs-cluster2
- discovery.type=single-node - discovery.type=single-node
- bootstrap.memory_lock=true # along with the memlock settings below, disables swapping - bootstrap.memory_lock=true # along with the memlock settings below, disables swapping
- "OPENSEARCH_JAVA_OPTS=-Xms512m -Xmx512m" # minimum and maximum Java heap size, recommend setting both to 50% of system RAM - "OPENSEARCH_JAVA_OPTS=-Xms512m -Xmx512m" # minimum and maximum Java heap size, recommend setting both to 50% of system RAM
@ -118,26 +118,26 @@ After the clusters start, verify the names of each:
```json ```json
curl -XGET -u 'admin:admin' -k 'https://localhost:9200' curl -XGET -u 'admin:admin' -k 'https://localhost:9200'
{ {
"cluster_name" : "opensearch-cluster1", "cluster_name" : "opensearch-ccs-cluster1",
... ...
} }
curl -XGET -u 'admin:admin' -k 'https://localhost:9250' curl -XGET -u 'admin:admin' -k 'https://localhost:9250'
{ {
"cluster_name" : "opensearch-cluster2", "cluster_name" : "opensearch-ccs-cluster2",
... ...
} }
``` ```
Both clusters run on `localhost`, so the important identifier is the port number. In this case, use port 9200 (`opensearch-node1`) as the remote cluster, and port 9250 (`opensearch-node2`) as the coordinating cluster. Both clusters run on `localhost`, so the important identifier is the port number. In this case, use port 9200 (`opensearch-ccs-node1`) as the remote cluster, and port 9250 (`opensearch-ccs-node2`) as the coordinating cluster.
To get the IP address for the remote cluster, first identify its container ID: To get the IP address for the remote cluster, first identify its container ID:
```bash ```bash
docker ps docker ps
CONTAINER ID IMAGE PORTS NAMES CONTAINER ID IMAGE PORTS NAMES
6fe89ebc5a8e opensearchproject/opensearch:{{site.opensearch_version}} 0.0.0.0:9200->9200/tcp, 0.0.0.0:9600->9600/tcp, 9300/tcp opensearch-node1 6fe89ebc5a8e opensearchproject/opensearch:{{site.opensearch_version}} 0.0.0.0:9200->9200/tcp, 0.0.0.0:9600->9600/tcp, 9300/tcp opensearch-ccs-node1
2da08b6c54d8 opensearchproject/opensearch:{{site.opensearch_version}} 9300/tcp, 0.0.0.0:9250->9200/tcp, 0.0.0.0:9700->9600/tcp opensearch-node2 2da08b6c54d8 opensearchproject/opensearch:{{site.opensearch_version}} 9300/tcp, 0.0.0.0:9250->9200/tcp, 0.0.0.0:9700->9600/tcp opensearch-ccs-node2
``` ```
Then get that container's IP address: Then get that container's IP address:
@ -154,7 +154,7 @@ curl -k -XPUT -H 'Content-Type: application/json' -u 'admin:admin' 'https://loca
{ {
"persistent": { "persistent": {
"search.remote": { "search.remote": {
"opensearch-cluster1": { "opensearch-ccs-cluster1": {
"seeds": ["172.31.0.3:9300"] "seeds": ["172.31.0.3:9300"]
} }
} }
@ -171,11 +171,11 @@ curl -XPUT -k -H 'Content-Type: application/json' -u 'admin:admin' 'https://loca
At this point, cross-cluster search works. You can test it using the `admin` user: At this point, cross-cluster search works. You can test it using the `admin` user:
```bash ```bash
curl -XGET -k -u 'admin:admin' 'https://localhost:9250/opensearch-cluster1:books/_search?pretty' curl -XGET -k -u 'admin:admin' 'https://localhost:9250/opensearch-ccs-cluster1:books/_search?pretty'
{ {
... ...
"hits": [{ "hits": [{
"_index": "opensearch-cluster1:books", "_index": "opensearch-ccs-cluster1:books",
"_type": "_doc", "_type": "_doc",
"_id": "1", "_id": "1",
"_score": 1.0, "_score": 1.0,
@ -196,7 +196,7 @@ curl -XPUT -k -u 'admin:admin' 'https://localhost:9250/_plugins/_security/api/in
Then run the same search as before with `booksuser`: Then run the same search as before with `booksuser`:
```json ```json
curl -XGET -k -u booksuser:password 'https://localhost:9250/opensearch-cluster1:books/_search?pretty' curl -XGET -k -u booksuser:password 'https://localhost:9250/opensearch-ccs-cluster1:books/_search?pretty'
{ {
"error" : { "error" : {
"root_cause" : [ "root_cause" : [
@ -225,11 +225,11 @@ Both clusters must have the user, but only the remote cluster needs the role and
Finally, repeat the search: Finally, repeat the search:
```bash ```bash
curl -XGET -k -u booksuser:password 'https://localhost:9250/opensearch-cluster1:books/_search?pretty' curl -XGET -k -u booksuser:password 'https://localhost:9250/opensearch-ccs-cluster1:books/_search?pretty'
{ {
... ...
"hits": [{ "hits": [{
"_index": "opensearch-cluster1:books", "_index": "opensearch-ccs-cluster1:books",
"_type": "_doc", "_type": "_doc",
"_id": "1", "_id": "1",
"_score": 1.0, "_score": 1.0,