Release Date: 04.12.2020
Improvements
Kibana New Platform support
The Search Guard Kibana plugin is now based on Kibana’s New Platform Architecture.
The New Platform especially allows for a tighter integration of Kibana plugins. While this meant fundamental changes to the Search Guard plugin under the hood, not many changes are visible from a user’s point of view for now. Most prominently, the loading screen when switching to and from the Search Guard configuration UI is gone.
In the future, this might allow tighter integration between Search Guard or Signals and other plugins.
Breaking Changes
- The previously deprecated
kibana.yml
configuration optionssearchguard.basicauth.enabled
andsearchguard.jwt.enabled
have been removed now. If you are still using these options, you need to remove them fromkibana.yml
. The options are replaced bysearchguard.auth.type: basicauth
orsearchguard.auth.type: jwt
respectively. - If you are using Kerberos, you must set
searchguard.auth.type
tokerberos
explicitly.
Note for users of the beta version: While the beta version required applying a patch to Kibana, this is no longer necessary for the release version.
Search Guard UI
- The role editing page and the action group editing page in the Search Guard configuration UI now allows the specification of any permission. Before these pages would only allow using action groups known to the plugin.
- The Create Role page of the Search Guard configuration UI now supports the permission exclusion feature.
- The internal user database editor now supports complex user attributes.
Bug Fixes
Search Guard UI
- For the authentication types Kerberos and Proxy, the “Logout” link is no longer rendered in the user menu, as these authentication types don’t support actual logout.
- Properly escape white space and other special characters in a resource id in the SG configuration plugin UI and Signals.
- Fix DLS query removal on the Create Role page in the Kibana plugin.
- Read-only mode was broken. Fixed.