k8s部署elk+filebeat

Kubernetes(k8s)中部署ELK+Filebeat实践

最新推荐文章于 2025-10-23 19:45:15 发布

原创

最新推荐文章于 2025-10-23 19:45:15 发布 · 2.4k 阅读

3 ·

CC 4.0 BY-SA版权

本文详细介绍了如何在Kubernetes环境下部署Elasticsearch(ELK)栈，包括Elasticsearch集群、Logstash、Kibana的配置与部署，以及Filebeat的日志收集设置，确保日志数据能够被有效管理和分析。

k8s部署elk+filebeat 第一步elasticsearch集群

cat elasticsearch.yaml

apiVersion: v1
kind: Service
metadata:
name: elasticsearch
namespace: kafka
labels:
k8s-app: elasticsearch
spec:
ports:

name: transport
port: 9300
protocol: TCP
targetPort: 9300
clusterIP: None
selector:
k8s-app: elasticsearch
role: master

apiVersion: v1
kind: ServiceAccount
metadata:
name: elasticsearch
namespace: kafka
labels:
k8s-app: elasticsearch
—**
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: elasticsearch
labels:
k8s-app: elasticsearch
rules:

apiGroups:
- “”
  resources:
- “services”
- “namespaces”
- “configmaps”
- “endpoints”
- “secrets”
- “pods”
  verbs:
- “get”
- “list”
- “watch”

kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
namespace: kafka
name: elasticsearch
labels:
k8s-app: elasticsearch
subjects:

kind: ServiceAccount
name: elasticsearch
namespace: kafka
apiGroup: “”
roleRef:
kind: ClusterRole
name: elasticsearch
apiGroup: “”

apiVersion: apps/v1
kind: StatefulSet
metadata:
name: elasticsearch-master
namespace: kafka
labels:
k8s-app: elasticsearch
role: master
spec:
replicas: 4
serviceName: elasticsearch-master
selector:
matchLabels:
k8s-app: elasticsearch
role: master
template:
metadata:
labels:
k8s-app: elasticsearch
role: master
spec:
serviceAccountName: elasticsearch
containers:
- image: docker.elastic.co/elasticsearch/elasticsearch:7.5.0
name: elasticsearch-mater
resources:
# need mo