Speaker
Wataru Takase
(KEK)
Description
Although ElasticSearch and Kibana bring great monitoring platform, they lack access control feature by default. This means any user who can access to Kibana can retrieve any information from ElasticSearch. In CERN cloud service, a homemade ElasticSearch plugin has been deployed to restricts data access based on cloud user. It enables each user to have a separated dashboard for cloud usage. Based on the solution, we integrated Kerberos authentication to Kibana and ElasticSearch. Our solution enables user/role based ElasticSearch access control and Kibana dashboards separation. The integration and deployment was completed in CC-IN2P3.
| Length of presentation (minutes, max. 20) | 20 |
|---|
Author
Wataru Takase
(KEK)
