Release Date: 04.12.2020

Improvements

Kibana New Platform support

The Search Guard Kibana plugin is now based on Kibana’s New Platform Architecture.

The New Platform especially allows for a tighter integration of Kibana plugins. While this meant fundamental changes to the Search Guard plugin under the hood, not many changes are visible from a user’s point of view for now. Most prominently, the loading screen when switching to and from the Search Guard configuration UI is gone.

In the future, this might allow tighter integration between Search Guard or Signals and other plugins.

Breaking Changes

  • The previously deprecated kibana.yml configuration options searchguard.basicauth.enabled and searchguard.jwt.enabled have been removed now. If you are still using these options, you need to remove them from kibana.yml. The options are replaced by searchguard.auth.type: basicauth or searchguard.auth.type: jwt respectively.
  • If you are using Kerberos, you must set searchguard.auth.type to kerberos explicitly.

Note for users of the beta version: While the beta version required applying a patch to Kibana, this is no longer necessary for the release version.

Search Guard UI

  • The role editing page and the action group editing page in the Search Guard configuration UI now allows the specification of any permission. Before these pages would only allow using action groups known to the plugin.

Bug Fixes

Search Guard UI

  • For the authentication types Kerberos and Proxy, the “Logout” link is no longer rendered in the user menu, as these authentication types don’t support actual logout.

  • Properly escape white space and other special characters in a resource id in the SG configuration plugin UI and Signals.

  • Fix DLS query removal on the Create Role page in the Kibana plugin.

  • Read-only mode was broken. Fixed.