From 5d742d2ff2ad4de0431f7b41e935c89934969431 Mon Sep 17 00:00:00 2001 From: Swann Croiset Date: Mon, 27 Jun 2016 16:57:52 +0200 Subject: [PATCH] Restrict access to Kibana Only Apache needs to access directly Kibana. Change-Id: I539a9a10b69d300a7d1555d44fdf57ddd391ac0c --- deployment_scripts/puppet/manifests/kibana.pp | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/deployment_scripts/puppet/manifests/kibana.pp b/deployment_scripts/puppet/manifests/kibana.pp index d9c1178..037e745 100644 --- a/deployment_scripts/puppet/manifests/kibana.pp +++ b/deployment_scripts/puppet/manifests/kibana.pp @@ -15,7 +15,7 @@ notice('fuel-plugin-elasticsearch-kibana: kibana.pp') class { 'lma_logging_analytics::kibana': - listen_address => hiera('lma::elasticsearch::listen_address'), + listen_address => '127.0.0.1', listen_port => hiera('lma::elasticsearch::kibana_port'), es_host => hiera('lma::elasticsearch::vip'), es_port => hiera('lma::elasticsearch::rest_port'), @@ -25,7 +25,7 @@ class { 'lma_logging_analytics::kibana': class { 'lma_logging_analytics::kibana_authentication': listen_address => hiera('lma::elasticsearch::listen_address'), listen_port => hiera('lma::elasticsearch::apache_port'), - kibana_address => hiera('lma::elasticsearch::listen_address'), + kibana_address => '127.0.0.1', kibana_port => hiera('lma::elasticsearch::kibana_port'), username => hiera('lma::kibana::username'), password => hiera('lma::kibana::password'),