Use 'kibana' user for Kibana

Toby McLaughlin · Toby McLaughlin · commit e41680ed7d61 · 2017-11-15T13:11:54.000+11:00
diff --git a/docker-compose.yml b/docker-compose.yml
@@ -25,7 +25,9 @@ services:
 
   kibana:
     image: docker.elastic.co/kibana/kibana:${TAG}
-    environment: ['ELASTICSEARCH_PASSWORD=${ELASTIC_PASSWORD}']
+    environment:
+      - ELASTICSEARCH_USERNAME=kibana
+      - ELASTICSEARCH_PASSWORD=${ELASTIC_PASSWORD}
     ports: ['127.0.0.1:5601:5601']
     networks: ['stack']
     depends_on: ['elasticsearch']
@@ -102,6 +104,14 @@ services:
     networks: ['stack']
     depends_on: ['elasticsearch']
 
+  setup_kibana:
+    image: centos:7
+    volumes: ['./scripts/setup-kibana.sh:/usr/local/bin/setup-kibana.sh:ro']
+    command: ['/bin/bash', '-c', 'cat /usr/local/bin/setup-kibana.sh | tr -d "\r" | bash']
+    environment: ['ELASTIC_PASSWORD=${ELASTIC_PASSWORD}']
+    networks: ['stack']
+    depends_on: ['elasticsearch']
+
   setup_auditbeat:
     image: docker.elastic.co/beats/auditbeat:${TAG}
     volumes: ['./scripts/setup-beat.sh:/usr/local/bin/setup-beat.sh:ro']
diff --git a/scripts/setup-kibana.sh b/scripts/setup-kibana.sh
@@ -0,0 +1,20 @@
+#!/bin/bash
+
+set -euo pipefail
+
+es_url=http://elastic:${ELASTIC_PASSWORD}@elasticsearch:9200
+
+# Wait for Elasticsearch to start up before doing anything.
+until curl -s $es_url -o /dev/null; do
+    sleep 1
+done
+
+# Set the password for the kibana user.
+# REF: https://www.elastic.co/guide/en/x-pack/6.0/setting-up-authentication.html#set-built-in-user-passwords
+until curl -s -H 'Content-Type:application/json' \
+     -XPUT $es_url/_xpack/security/user/kibana/_password \
+     -d "{\"password\": \"${ELASTIC_PASSWORD}\"}"
+do
+    sleep 2
+    echo Retrying...
+done
