HOWTO use kibana with keycloak on the standalone
Why do that¶
Demonstrate the ability of the Kibana Punchplatform plugin to restrict access to Punchplatform features.
Prerequisites¶
- Works on standalone only
- Internet
What to do¶
Use Kibana through Keycloak Gatekeeper (proxy)¶
If you have a standalone, follow the next steps..
- Install or reinstall standalone with --with-keycloak options.
- start standalone
- go to kibana using Keycloak Gatekeeper (proxy) http://127.0.0.1:3000
- Login with bob/bob (restricted user) or alice/alice (full access user) credentials.
You can check the status of Keycloak using punchplatform-keycloak.sh --status and
punchplatform-keycloak-gatekeeper.sh --status
Custom keycloak configuration¶
Administration Console¶
Administration application is available on http://127.0.0.1:8180 with admin/password credentials.
Punchplatform plugin is defined by a client named standalone-proxy. You can manage groups, users and roles from here.