Terraform、ElasticSearch：无法访问此站点

Question

我配置了 Elasticsearch。我得到了“domain_endpoint”、“domain_hostname”、“kibana_endpoint”和“kibana_hostname”的 URL 个输出。但是，我打不到这些 URLS 中的任何一个。我收到“无法访问此站点”。我想念什么？下面是代码： main.tf:

module "elasticsearch" {
  source                  = "git::https://github.com/cloudposse/terraform-aws-elasticsearch.git?ref=tags/0.24.1"
  security_groups                = [data.terraform_remote_state.vpc.outputs.default_security_group_id]
  vpc_id                         = data.terraform_remote_state.vpc.outputs.vpc_id
  zone_awareness_enabled         = var.zone_awareness_enabled
  subnet_ids                     = slice(data.terraform_remote_state.vpc.outputs.private_subnets, 0, 2)
  elasticsearch_version          = var.elasticsearch_version
  instance_type                  = var.instance_type
  instance_count                 = var.instance_count
  encrypt_at_rest_enabled        = var.encrypt_at_rest_enabled
  dedicated_master_enabled       = var.dedicated_master_enabled
  create_iam_service_linked_role = var.create_iam_service_linked_role
  kibana_subdomain_name          = var.kibana_subdomain_name
  ebs_volume_size                = var.ebs_volume_size
  dns_zone_id                    = var.dns_zone_id
  kibana_hostname_enabled        = var.kibana_hostname_enabled
  domain_hostname_enabled        = var.domain_hostname_enabled
  advanced_options = {
    "rest.action.multi.allow_explicit_index" = "true"
  }
  context = module.this.context
}

terraform.tfvars:

enabled = true
region = "us-west-2"
namespace = "dev"
stage = "abcd"
name = "abcd"
instance_type = "m5.xlarge.elasticsearch"
elasticsearch_version = "7.7"
instance_count = 2
zone_awareness_enabled = true
encrypt_at_rest_enabled = false
dedicated_master_enabled = false
elasticsearch_subdomain_name = "abcd"
kibana_subdomain_name = "abcd"
ebs_volume_size = 250
create_iam_service_linked_role = false
dns_zone_id = "Z08006012KJUIEOPDLIUQ"
kibana_hostname_enabled = true
domain_hostname_enabled = true

Answer 1

您正在将您的 ES 域放置在私有子网中的 VPC 中。它的 public 或私有子实体无关紧要，public 访问权限不适用于此处。来自 AWS docs:

To perform even basic GET requests, your computer must be able to connect to the VPC. This connection often takes the form of a VPN, managed network, or proxy server.

即使您将它放在 public 子网中，也无法通过互联网访问它。此问题的一个流行解决方案是通过 ssh 隧道，这在 ES 的 AWS 文档中也有描述：

Testing VPC Domains

Terraform、ElasticSearch：无法访问此站点

Terraform, ElasticSearch: This site can’t be reached

terraform

aws-elasticsearch

terraform-provider-aws