I think you'll find that the kibana_lb.conf below actually proxies *any* request for 9200 from the kibana unit through to the ES unit. That is, anyone who can access the kibana unit on port 80, is able to POST/DELETE whatever they like in ES.
I've fixed this, with a bunch of other smaller changes here:
I think you'll find that the kibana_lb.conf below actually proxies *any* request for 9200 from the kibana unit through to the ES unit. That is, anyone who can access the kibana unit on port 80, is able to POST/DELETE whatever they like in ES.
I've fixed this, with a bunch of other smaller changes here:
https:/ /code.launchpad .net/~canonical -is-sa/ charms/ trusty/ kibana/ kibana4/ +merge/ 276944