Commit 84749b0d authored by Pedro Eduardo Trujillo's avatar Pedro Eduardo Trujillo
Browse files

Restringe permisos de usuario anónimo 

En lugar de heredar los permisos de usuario de Kibana, el usuario
anónimo ahora solo tiene permitida la lectura en el índice de Kibana.
parent 7acec360

deploy/config/sg_roles.yml

+9 −0
Original line number Diff line number Diff line
@@ -47,6 +47,15 @@ sg_anonymous_role: 
    - CLUSTER_COMPOSITE_OPS_RO

    - cluster:monitor/health

  indices:

    '?kibana':

      '*':

        - READ

    '?kibana-6':

      '*':

        - READ

    '?kibana_*':

      '*':

        - READ

    'tracking-vessel-*':

      '*':

        - READ

deploy/config/sg_roles_mapping.yml

+0 −1
Original line number Diff line number Diff line
@@ -18,7 +18,6 @@ sg_kibana_server: 
sg_kibana_user:

  backendroles:

    - kibanauser

    - sg_anonymous_backendrole



sg_readall:

  readonly: true