-
Notifications
You must be signed in to change notification settings - Fork 8
Description
I have using simple setting based authentication. And confiured kibana user and password in kibana yml file. But kibana is not able to connect to elastic search when armor is used.Screen shot of my error and acl rule has beenis attachecd
"acl": [
{
"Comment": "By default no filters are executed and no filters a by-passed. In such a case an exception is thrown and access will be denied.",
"filters_bypass": [],
"filters_execute": []
},
{
"Comment": "For role admin all filters are bypassed (so none will be executed). This means unrestricted access.",
"roles": [
"admin"
],
"filters_bypass": [""],
"filters_execute": []
},
{
"Comment": "Internal kibana index",
"roles": ["kibana"],
"indices": [".kibana"],
"filters_bypass": [""],
"filters_execute": []
}
]
}
Elastic yml file configuration as follows
armor.rewrite_get_as_search: true
armor.authentication.authentication_backend.impl: com.petalmd.armor.authentication.backend.simple.SettingsBasedAuthenticationBackend
armor.authentication.authorizer.impl: com.petalmd.armor.authorization.simple.SettingsBasedAuthorizator
armor.authentication.http_authenticator.impl: com.petalmd.armor.authentication.http.basic.HTTPBasicAuthenticator
armor.authentication.settingsdb.user.admin: password
armor.authentication.settingsdb.user.kibana: kibana
armor.authentication.authorization.settingsdb.roles.admin: ["admin"]
armor.authentication.authorization.settingsdb.roles.kibana: ["kibana"]
armor.actionrequestfilter.names: ["readonly"]
armor.actionrequestfilter.readonly.allowed_actions: ["indices:data/read/", "monitor"]
armor.actionrequestfilter.readonly.forbidden_actions: ["cluster:admin", "indices:admin_", "indices:data/write_"]
kibana yml as follows
elasticsearch.username: "kibana"
elasticsearch.password: "kibana"
screenshot of kibana issue
Plese help if some one has faced the issue earlier