PKI auth for kibana - is it supported?

[vb4t]

Hello. I would like to set Kibana to use PKI auth instead of username/password. Following setting does not work:

elasticsearch.ssl.certificate: /app/volumes/config/certs/client.crt
elasticsearch.ssl.key: /app/volumes/config/certs/client.key

There are a lot of following messsages in kibana log:

...Status changed from uninitialized to red - Authentication Exception

Should this setting work? Is the PKI auth supported ... or will it be supported?

[Bargs (Matt Bargar)]

PKI isn't well supported in 5.x. You may be running into an issue where the default username/password get sent to ES even when they're not defined in kibana.yml. I believe this should be fixed in 6.0. beta1 just shipped, so you could test it out if you like.