...
- elasticsearch.url: http://elk:9200 This is added to force Kibana to go back through the OAuth proxy for hits to Elastic, instead of the default of localhost. The name of the OAuth proxy is from of the "elk-backend" (the actual combined Elastic stack image) is "elk."
Background on How the YOUnite UI Makes the Dashboard Connection to Kibana
When a user clicks a link to display logging information via Kibana, the URL is modified as it is passes through authorization code in the NGINX proxy. The modification uses the information in the OAuth check_token response to pass along the Elastic alias that Kibana will use to populate the dashboard's data. Access to Kibana is allowed if a user has the correct permissions for Kibana access. By default all users have this permission. Logging information that is displayed/available is controlled through the usage of either the alias for the user's UUID, which contains all the indices they have access to, or via Kibana searches hitting specific indices to which the user has direct permissions (also encoded in the OAuth token).