Kibana security roles access control

My ELK stack stop respecting roles and role mapping. Anyone with a vaild cert can access any Space or index even if they don'tt have that role assigned to them. I upgrade to version 8.11.2 from 8.8.1 last month, but I a I am just noticing this now. I am not sure if they are related. I've tried using the dev tools to clear role cache, user cache and no luck. Any have an idea or suggestion of what I can try next?

@mst3r25 , So you're using PKI auth for kibana? Could you share an example of sanitzed example of a role which is not working?

I am using PKI for auth and it was working fine. I'm not sure when and why it stopped. I am in an enclave I will try to get you an example of one of the roles that is not working.


Is this what you are asking for?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.