Skip to content

Managing kibana oauth access

Jump to bottom
Deepak Narayana Rao edited this page Oct 26, 2017 · 1 revision

Context

Kibana doesn't have in-built authentication. We have exposed kibana behind oauth proxy. This provides authentication for whitelisted google accounts

Providing access for all accounts in google domain

  • Add the domain in variable
kibana_oauth_authenticated_email_domains:
  - ekstep.org
  • Run jenkins job Logging

In above example, all users from ekstep.org can access kibana using google oauth

Providing access for specific google accounts

  • Add the email id in the variable
kibana_oauth_authenticated_email_ids:
  - foo@my-google-domain.com
  - bar@my-google-domain.com
  • Run jenkins job Logging

In above example foo@my-google-domain.com and bar@my-google-domain.com can access kibana using google oauth. Other users from my-google-domain.com will not have access to kibana

Clone this wiki locally