Way to secure kibana access

Rancher 1.x
1

Hello,

I’m using ELK catalog for my logging solution whis is a very great tooling thanks all you guys for the hard work.

I’m looking to a way to secure both kibana and kopf access so that it will be enabled only to registered people.

Because I’m giving access to kibana and koph using Rancher LB, I was wondering on using HaProxy basic authent ==> does someone have example on how to configure this ?

Is there guidelines on how to do this ?

Thanks

Sébastien

2

You could do this pretty simply by:

  1. Only exposing kibana internally.
  2. Putting an nginx instance in front of kibana and using basic http auth.
3

there already a nginx proxifying request to kibana through the catalog, but i don’t think there is an option to configure basic auth from the catalog directly ?

4

Hi Sebastien,

You need to clic on “View in API” on your nginx-proxy container and EDIT it.
And modify metadata “nginx” to for example

{"conf":{"servername":"kibana","upstream_port":5601,"users":"admin"},"users":{"0":{"username":"admin","password":"{PLAIN}helloworldpassword"}}}

:slightly_smiling:

1 Like
5

Thanks, the {PLAIN} in the password looks like was the thing I was missing.

6

Ok, this solves the issue for Kibana, but what about kopf, does it mean we have to add an nginx in front?

Thanks for your answers!