No access to Kibana WebUI via Nginx Proxy

Elastic Stack Kibana
21

Hello Stephan,
i don't see the value of my token. Is it possible that I'm not authorized?

root@dsme01:~# curl -X GET -u elastic "https://elasticsearch.intern.harnet.de:9200/_security/service/elastic/kibana/credential?pretty"
Enter host password for user 'elastic':
{
  "service_account" : "elastic/kibana",
  "count" : 1,
  "tokens" : {
    "token_tdmQ-JIBkQRpmbBNyIA8" : { }
  },
  "nodes_credentials" : {
    "_nodes" : {
      "total" : 1,
      "successful" : 1,
      "failed" : 0
    },
    "file_tokens" : { }
  }
}
root@dsme01:~# curl -X GET -u elastic "https://elasticsearch.intern.harnet.de:9200/_security/service/elastic/kibana/credential/token?pretty"
Enter host password for user 'elastic':
{
  "error" : "Incorrect HTTP method for uri [/_security/service/elastic/kibana/credential/token?pretty] and method [GET], allowed: [POST]",
  "status" : 405
}
22

If you want to DELETE you need to use DELETE and the token id

see Here

DELETE /_security/service/<namespace>/<service>/credential/token/<token_name>

This is normal REST stuff, you need to looks at the API docs, use the Correct API, REST VERB etc...

So your command would be

curl -X DELETE -u elastic "https://elasticsearch.intern.harnet.de:9200/_security/service/elastic/kibana/credential/token/token_tdmQ-JIBkQRpmbBNyIA8"
23

Why don't I see my token value?
I understand the deleting.

24

When you create a token ...
like any other secret you only see it Once when it is created... just like any other secret you are expected to copy it etc... you will never see the value again from the API, standard security practice

25

Why do I see the token at the top of your configuration?

26

Because that's the call when I created the service token the one time it was shown.
The lines with
# are the response /.results of the , POST not part request.

I was just trying to show you the flow.

If you create a token you will get a response. It will show the value once just when you created.