/elasticsearch-proxy

A reverse proxy to allow OKD authentication, authorization (and other functionality) to Elasticsearch

Primary LanguageGoApache License 2.0Apache-2.0

OKD Elasticsearch Proxy

A reverse proxy to Elasticsearch that relies on either client certificate or Bearer token for use with OKD Cluster Logging

More information can be found in the design document.

Features:

  • Dynamically seeds a user's permissions based on their OKD projects and ability to satisfy subjectaccessreviews
  • Utilizes OKD Bearer token for authorization
  • Defaults a set of kibana index patterns for non infra users
  • Dynamically creates a kibana index for non infra users

This proxy is inspired by the oauth-proxy and the openshift-elasticsearch-plugin

Contributions

To contribute to the development of elasticsearch-proxy, see REVIEW.md