Kibana with PKI auth

Elastic Stack Kibana
1

There is a comment in the Kibana.yml file that says "Your Kibana users still need to authenticate with Elasticsearch, which is proxied through the Kibana server." I have elasticsearch setup to handle PKI auth, and it works well when connecting from a browser directly into elasticsearch's 9200 port. But when I try to authenticate through Kibana's 5601 port, it will not accept PKI auth, but insists on user/password.

Is there any way to require PKI user authentication for Kibana users without using a proxy?

2

One of the main issues preventing Kibana from supporting PKI was passing through the associated headers. This was resolved in https://github.com/elastic/kibana/issues/6221

There is a current issue to support PKI: https://github.com/elastic/kibana/issues/7341

Do you have a support contract with Elastic? If so, your rep can provide assistance as well.