{"type":"log","@timestamp":"2021-06-24T11:35:14+00:00","tags":["info","plugins-service"],"pid":952,"message":"Plugin \"timelines\" is disabled."}
{"type":"log","@timestamp":"2021-06-24T11:35:14+00:00","tags":["warning","config","deprecation"],"pid":952,"message":"Setting [elasticsearch.username] to \"elastic\" is deprecated. You should use the \"kibana_system\" user instead."}
{"type":"log","@timestamp":"2021-06-24T11:35:14+00:00","tags":["warning","config","deprecation"],"pid":952,"message":"plugins.scanDirs is deprecated and is no longer used"}
{"type":"log","@timestamp":"2021-06-24T11:35:14+00:00","tags":["warning","config","deprecation"],"pid":952,"message":"Config key [monitoring.cluster_alerts.email_notifications.email_address] will be required for email notifications to work in 8.0.\""}
{"type":"log","@timestamp":"2021-06-24T11:35:14+00:00","tags":["warning","config","deprecation"],"pid":952,"message":"Setting [monitoring.username] to \"elastic\" is deprecated. You should use the \"kibana_system\" user instead."}
{"type":"log","@timestamp":"2021-06-24T11:35:14+00:00","tags":["info","plugins-system"],"pid":952,"message":"Setting up [106] plugins: [taskManager,licensing,globalSearch,globalSearchProviders,banners,code,usageCollection,xpackLegacy,telemetryCollectionManager,telemetry,telemetryCollectionXpack,kibanaUsageCollection,securityOss,share,newsfeed,mapsEms,mapsLegacy,kibanaLegacy,translations,licenseApiGuard,legacyExport,embeddable,uiActionsEnhanced,expressions,charts,esUiShared,bfetch,data,home,console,consoleExtensions,apmOss,searchprofiler,painlessLab,grokdebugger,management,advancedSettings,savedObjects,visualizations,visTypeTable,visTypeTagcloud,visTypeVislib,visTypeVega,visTypeTimelion,features,licenseManagement,watcher,visTypeMarkdown,visTypeMetric,visTypeXy,tileMap,regionMap,presentationUtil,canvas,graph,timelion,dashboard,dashboardEnhanced,visualize,visTypeTimeseries,inputControlVis,indexPatternManagement,discover,discoverEnhanced,savedObjectsManagement,spaces,security,savedObjectsTagging,lens,reporting,lists,encryptedSavedObjects,dataEnhanced,dashboardMode,cloud,upgradeAssistant,snapshotRestore,fleet,indexManagement,rollup,remoteClusters,crossClusterReplication,indexLifecycleManagement,enterpriseSearch,beatsManagement,transform,ingestPipelines,fileUpload,maps,fileDataVisualizer,eventLog,actions,alerting,triggersActionsUi,stackAlerts,ruleRegistry,observability,osquery,ml,securitySolution,cases,infra,monitoring,logstash,apm,uptime]"}
{"type":"log","@timestamp":"2021-06-24T11:35:14+00:00","tags":["info","plugins","taskManager"],"pid":952,"message":"TaskManager is identified by the Kibana UUID: 5fc48a3d-4d2d-483a-b064-77fce3198095"}
{"type":"log","@timestamp":"2021-06-24T11:35:14+00:00","tags":["warning","plugins","security","config"],"pid":952,"message":"Generating a random key for xpack.security.encryptionKey. To prevent sessions from being invalidated on restart, please set xpack.security.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command."}
{"type":"log","@timestamp":"2021-06-24T11:35:14+00:00","tags":["warning","plugins","security","config"],"pid":952,"message":"Session cookies will be transmitted over insecure connections. This is not recommended."}
{"type":"log","@timestamp":"2021-06-24T11:35:14+00:00","tags":["warning","plugins","reporting","config"],"pid":952,"message":"Generating a random key for xpack.reporting.encryptionKey. To prevent sessions from being invalidated on restart, please set xpack.reporting.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command."}
{"type":"log","@timestamp":"2021-06-24T11:35:14+00:00","tags":["warning","plugins","reporting","config"],"pid":952,"message":"Chromium sandbox provides an additional layer of protection, but is not supported for Linux CentOS 8.4.2105\n OS. Automatically setting 'xpack.reporting.capture.browser.chromium.disableSandbox: true'."}
{"type":"log","@timestamp":"2021-06-24T11:35:14+00:00","tags":["warning","plugins","encryptedSavedObjects"],"pid":952,"message":"Saved objects encryption key is not set. This will severely limit Kibana functionality. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command."}
{"type":"log","@timestamp":"2021-06-24T11:35:15+00:00","tags":["warning","plugins","actions","actions"],"pid":952,"message":"APIs are disabled because the Encrypted Saved Objects plugin is missing encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command."}
{"type":"log","@timestamp":"2021-06-24T11:35:15+00:00","tags":["warning","plugins","alerting","plugins","alerting"],"pid":952,"message":"APIs are disabled because the Encrypted Saved Objects plugin is missing encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command."}
{"type":"log","@timestamp":"2021-06-24T11:35:15+00:00","tags":["info","plugins","monitoring","monitoring"],"pid":952,"message":"config sourced from: production cluster"}
{"type":"log","@timestamp":"2021-06-24T11:35:15+00:00","tags":["info","savedobjects-service"],"pid":952,"message":"Waiting until all Elasticsearch nodes are compatible with Kibana before starting saved objects migrations..."}
{"type":"log","@timestamp":"2021-06-24T11:35:15+00:00","tags":["error","savedobjects-service"],"pid":952,"message":"Unable to retrieve version information from Elasticsearch nodes."}
lizhedeMacBook-Pro:lz_study lizhe$ cat nginx.yaml
apiVersion: apps/v1beta1
kind: Deployment
metadata:
name: nginx-deployment
namespace: study
spec:
replicas: 2 # tells deployment to run 2 pods matching the template
template: # create pods using pod definition in this template
metadata:
# unlike pod-nginx.yaml, the name is not included in the meta data as a unique name is
# generated from the deployment name
labels:
app: nginx
spec:
containers:
- name: nginx
image: nginx:1.7.9
ports:
- containerPort: 80
lizhedeMacBook-Pro:lz_study lizhe$
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
name: letsencrypt-prod
spec:
acme:
# You must replace this email address with your own.
# Let's Encrypt will use this to contact you about expiring
# certificates, and issues related to your account.
email: YOUR
server: https://acme-v02.api.letsencrypt.org/directory
privateKeySecretRef:
# Secret resource used to store the account's private key.
name: issuer-account-key
# Add a single challenge solver, HTTP01
solvers:
- http01:
ingress:
class: traefik-cert-manager
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: golanghelloworld-cert
namespace: lizhe
spec:
commonName: nginx.golanghelloworld.com
secretName: golanghelloworld-cert
dnsNames:
- nginx.golanghelloworld.com
issuerRef:
name: letsencrypt-prod
kind: ClusterIssuer
Events:
Type Reason Age From Message
---- ------ ---- ---- -------
Normal Issuing 84s cert-manager Issuing certificate as Secret does not exist
Normal Generated 84s cert-manager Stored new private key in temporary Secret resource "golanghelloworld-cert-dr48r"
Normal Requested 84s cert-manager Created new CertificateRequest resource "golanghelloworld-cert-rq7cc"
Normal Issuing 57s cert-manager The certificate has been successfully issued