Managing kibana oauth access

Context

Kibana doesn't have in-built authentication. We have exposed kibana behind oauth proxy. This provides authentication for whitelisted google accounts

Providing access for all accounts in google domain

• Add the domain in variable

kibana_oauth_authenticated_email_domains:
  - ekstep.org

• Run jenkins job Logging

In above example, all users from ekstep.org can access kibana using google oauth

Providing access for specific google accounts

• Add the email id in the variable

kibana_oauth_authenticated_email_ids:
  - [email protected]
  - [email protected]

• Run jenkins job Logging

In above example [email protected] and [email protected] can access kibana using google oauth. Other users from my-google-domain.com will not have access to kibana