Kibana Oauth2.0 proxy config

Docker configuration for using oauth2_proxy as Oauth2.0 proxy for Kibana 6.1.1 using either :

• Search Guard
• X-Pack

Edit searchguard/docker-compose.yml or xpack/docker-compose.yml with correct oauth config (container oauth2-proxy) :

- GITHUB_ORG=<Your Org>
- GITHUB_TEAM=<Your Team>
- CLIENT_ID=<Your Github Client ID>
- CLIENT_SECRET=<Your Github Client Secret>

The sample configuration here uses Github authentication for a single Team inside an organization, You can use any supported Oauth provider available here. You will need to update oauth-proxy/start.sh with the correct variables if they are not already there

SearchGuard

cd searchguard
docker-compose up

Then go to http://locahost:4180

X-Pack

Complete tutorial for xpack can be found here

cd xpack
docker-compose up

Then go to http://locahost:4180

Note for searchguard

The searchguard/docker-compose.yml uses two custom images with built-in proxy configuration :

• bertrandmartel/docker-elasticsearch forked from khezen/docker-elasticsearch
• bertrandmartel/docker-kibana forked from khezen/docker-kibana

For already existing configuration, check Using Kibana with proxy authentication

Using a base path

Only when using Search Guard config, if you want to use a base path, for instance "/kibana" :

nginx-proxy:
  environment:
    - BASE_PATH=/kibana/

and

kibana:
  environment:
    SERVER_BASE_PATH: "/kibana"

and

oauth2-proxy:
  environment:
    - UPSTREAM=http://nginx-proxy:8080/kibana/

After composing up, go to http://localhost:4180/kibana

You can find a sample config here

License

The MIT License (MIT) Copyright (c) 2017-2018 Bertrand Martel