apiVersion: kibana.k8s.elastic.co/v1
kind: Kibana
metadata:
  name: kibana-ha
spec:
  version: 8.17.4
  count: 2
  elasticsearchRef:
    name: elasticsearch-ha
  config:
    # Enable OIDC and basic auth as available providers.
    xpack.security.authc.providers: [oidc, basic]
    # Specify which OIDC realm to use (this should match the name of your OIDC realm in Elasticsearch)
    xpack.security.authc.oidc.oidc1.realm: "panic-haus"
    # Client settings that Kibana will use (and which must match your OIDC realm settings in Elasticsearch)
    xpack.security.authc.oidc.oidc1.client_id: "kibana"
    xpack.security.authc.oidc.oidc1.client_secret: "NDgPp4m8IhdpZ5z6wrCFByD9Y00dN7ga"
    # The URL for the Keycloak OpenID Connect discovery document.
    xpack.security.authc.oidc.oidc1.openid_connect_url: "https://sso.panic.haus/realms/panic-haus/.well-known/openid-configuration"