基于Kubernetes的Elasticsearch部署与IK分词器配置指南

文档概述

本文档详细记录了在Kubernetes环境中部署Elasticsearch并配置IK中文分词器的完整过程，包括镜像构建、权限处理、配置验证等关键步骤。

1. 环境准备

1.1 基础环境要求

Kubernetes集群（Docker Desktop、Minikube或K3s）
Docker环境
Elasticsearch版本：9.4.1
IK分词器版本：9.4.1

1.2 文件结构

es-ik-docker/
├── Dockerfile
└── elasticsearch-analysis-ik-9.4.1.zip

2. Docker镜像构建

2.1 Dockerfile配置

FROM docker.elastic.co/elasticsearch/elasticsearch:9.4.1

# 拷贝IK分词器插件
COPY elasticsearch-analysis-ik-9.4.1.zip /tmp/

# 临时切换到root用户处理权限问题
USER root

# 修改文件属主并安装插件
RUN chown 1000:1000 /tmp/elasticsearch-analysis-ik-9.4.1.zip && \
    /usr/share/elasticsearch/bin/elasticsearch-plugin install \
    file:///tmp/elasticsearch-analysis-ik-9.4.1.zip \
    --batch && \
    rm /tmp/elasticsearch-analysis-ik-9.4.1.zip

# 切回安全的elasticsearch用户
USER elasticsearch

2.2 构建命令

docker build -t my-elasticsearch-ik:9.4.1 .

3. Kubernetes部署配置

3.1 Deployment配置

apiVersion: apps/v1
kind: Deployment
metadata:
  name: elasticsearch-ik
spec:
  selector:
    matchLabels:
      app: elasticsearch-ik
  replicas: 1
  strategy:
    type: Recreate
  template:
    metadata:
      labels:
        app: elasticsearch-ik
    spec:
      securityContext:
        fsGroup: 0
      containers:
      - name: elasticsearch
        image: my-elasticsearch-ik:9.4.1
        ports:
        - containerPort: 9200
        - containerPort: 9300
        env:
        - name: discovery.type
          value: "single-node"
        - name: ELASTIC_PASSWORD
          value: "your_secure_password"  # 示例密码
        - name: xpack.security.enabled
          value: "true"
        - name: ES_JAVA_OPTS
          value: "-Xms512m -Xmx512m"
        volumeMounts:
        - name: es-data
          mountPath: /usr/share/elasticsearch/data
          subPath: elasticsearch-data
      volumes:
      - name: es-data
        persistentVolumeClaim:
          claimName: es-pvc
---
apiVersion: v1
kind: Service
metadata:
  name: elasticsearch-service
spec:
  type: NodePort
  ports:
  - port: 9200
    targetPort: 9200
    nodePort: 30000  # 示例端口
  selector:
    app: elasticsearch-ik

4. 权限问题解决方案

4.1 问题分析

在构建过程中遇到的权限问题：

COPY指令复制的文件默认属于root用户
Elasticsearch容器默认以非root用户(UID 1000)运行
非root用户无法修改root拥有的文件权限

4.2 解决方案

通过临时切换到root用户来处理文件权限和插件安装：

使用USER root临时获取最高权限
执行chown修改文件属主
安装插件并清理临时文件
使用USER elasticsearch切回安全用户

5. IK分词器验证

5.1 验证命令

curl -X POST "http://localhost:30000/_analyze" \
  -u elastic:your_secure_password \
  -H "Content-Type: application/json" \
  -d '{
    "analyzer": "ik_smart",
    "text": "我是中国人，我爱我的祖国"
  }'

5.2 预期结果

{
  "tokens": [
    {"token": "我", "type": "CN_CHAR"},
    {"token": "是", "type": "CN_CHAR"},
    {"token": "中国人", "type": "CN_WORD"},
    {"token": "我", "type": "CN_CHAR"},
    {"token": "爱我", "type": "CN_WORD"},
    {"token": "的", "type": "CN_CHAR"},
    {"token": "祖国", "type": "CN_WORD"}
  ]
}