Is it possible to use ReadonlyREST to secure elasticsearch indices without having Kibana? If yes, what is wrong with my configurations?
The following configuration prevents elasticsearch (version 6.3.1) service to run on an Ubuntu machine:
...
- name: Just certain indices, and read only
type: allow
actions: ["indices:data/read/*"]
indices: ["test-index*"] # index aliases are taken in account!
jwt_auth:
name: "jwt_provider_1"
jwt:
- name: jwt_provider_1
secret: "thesecret!" #for symmetric encryption
user_claim: user_id
header_name: Authorization
By commenting out the jwt_auth section, the restriction works. But, enabling this sections, prevents elasticsearch service to start at all (systemctl elasticsearch service start).
Thanks for the “HIS” field, I’ll see that and reply here.
Anyhow, since I know it works without Kibana I am more confident now! Because the samples on documentation, and most of the issues involves Kibana.