Skip to content

HOWTO use kibana with keycloak on the standalone

Why do that

Demonstrate the ability of the Kibana Punchplatform plugin to restrict access to Punchplatform features.

Prerequisites

  • Works on standalone only
  • Internet

What to do

Use Kibana through Keycloak Gatekeeper (proxy)

If you have a standalone, follow the next steps..

  • Install or reinstall standalone with --with-keycloak options.
  • start standalone
  • go to kibana using Keycloak Gatekeeper (proxy) http://127.0.0.1:3000
  • Login with bob/bob (restricted user) or alice/alice (full access user) credentials.

You can check the status of Keycloak using punchplatform-keycloak.sh --status and punchplatform-keycloak-gatekeeper.sh --status

Custom keycloak configuration

Administration Console

Administration application is available on http://127.0.0.1:8180 with admin/password credentials.

Punchplatform plugin is defined by a client named standalone-proxy. You can manage groups, users and roles from here.