Release Date: 04.12.2020
Kibana New Platform support
The Search Guard Kibana plugin is now based on Kibana’s New Platform Architecture.
The New Platform especially allows for a tighter integration of Kibana plugins. While this meant fundamental changes to the Search Guard plugin under the hood, not many changes are visible from a user’s point of view for now. Most prominently, the loading screen when switching to and from the Search Guard configuration UI is gone.
In the future, this might allow tighter integration between Search Guard or Signals and other plugins.
- The previously deprecated
searchguard.jwt.enabledhave been removed now. If you are still using these options, you need to remove them from
kibana.yml. The options are replaced by
- If you are using Kerberos, you must set
Note for users of the beta version: While the beta version required applying a patch to Kibana, this is no longer necessary for the release version.
Search Guard UI
- The role editing page and the action group editing page in the Search Guard configuration UI now allows the specification of any permission. Before these pages would only allow using action groups known to the plugin.
- The Create Role page of the Search Guard configuration UI now supports the permission exclusion feature.
- The internal user database editor now supports complex user attributes.
Search Guard UI
- For the authentication types Kerberos and Proxy, the “Logout” link is no longer rendered in the user menu, as these authentication types don’t support actual logout.
- Properly escape white space and other special characters in a resource id in the SG configuration plugin UI and Signals.
- Fix DLS query removal on the Create Role page in the Kibana plugin.
- Read-only mode was broken. Fixed.