From e4821ec647c93fd7501f48258c46123030701c03 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Lauri=20V=C3=B5sandi?= Date: Wed, 31 Aug 2022 07:39:39 +0300 Subject: [PATCH] elastic-system: Fix anonymous auth for Kibana --- elastic-system/application.yml | 29 ++++++++++++----------------- 1 file changed, 12 insertions(+), 17 deletions(-) diff --git a/elastic-system/application.yml b/elastic-system/application.yml index 890a7be..13367f2 100644 --- a/elastic-system/application.yml +++ b/elastic-system/application.yml @@ -143,11 +143,6 @@ spec: count: 3 config: node.store.allow_mmap: false - xpack.security.authc: - anonymous: - username: anonymous - roles: superuser - authz_exception: false volumeClaimTemplates: - metadata: name: elasticsearch-data @@ -178,18 +173,18 @@ spec: disabled: true config: server.publicBaseUrl: https://kibana.k-space.ee - #xpack.security.authc.realms.oidc.my_oidc: - #order: 1 - #rp.client_id: "kibana" - #rp.response_type: code - #rp.redirect_uri: "https://kibana.k-space.ee/api/security/v1/oidc" - #op.issuer: "https://auth.k-space.ee" - #op.authorization_endpoint: "https://auth.k-space.ee/api/oidc/authorization" - #op.token_endpoint: "https://auth.k-space.ee/api/oidc/token" - #op.jwkset_path: "https://auth.k-space.ee/jwks.json" - #op.userinfo_endpoint: "https://auth.k-space.ee/api/oidc/userinfo" - #rp.post_logout_redirect_uri: "https://kibana.k-space.ee/logged_out" - #claims.principal: preferred_username + xpack.reporting.enabled: false + xpack.apm.ui.enabled: false + xpack.security.authc.providers: + anonymous.anonymous1: + order: 0 + credentials: + username: "elastic" + secureSettings: + - secretName: elasticsearch-es-elastic-user + entries: + - key: elastic + path: xpack.security.authc.providers.anonymous.anonymous1.credentials.password --- apiVersion: networking.k8s.io/v1 kind: Ingress