KiPavois

KiPavois is an HTTP proxy rewriting Elasticsearch queries made by Kibana 4 to provide data isolation across different users.

To use this, you need an upstream application taking care of authentication, and that specify a special HTTP header (by default x-kibana-user) expected by KiPavois.

Usage

Docker image

KiPavois is delivered as a Docker image.

docker pull cogniteev/kipavois

Command-line use

You can install the NPM package:

npm install -g kipavois
kipavois --help

Behavior

If the x-kibana-user HTTP header is specified, then the proxy will modify body of certains queries, and block Kibana administrative operations.

Filters

A new filter is added to queries specified in the body of POST /_msearch operation.

Blocked operations

It is not possible to:

• update Kibana configuration
• create, update, or remove dashboards.

License

KiPavois is licensed under the Apache License, Version 2.0. See LICENSE file for full license text.