{"action":"created","issue":{"url":"https://api.github.com/repos/kopeio/aws-es-proxy/issues/7","repository_url":"https://api.github.com/repos/kopeio/aws-es-proxy","labels_url":"https://api.github.com/repos/kopeio/aws-es-proxy/issues/7/labels{/name}","comments_url":"https://api.github.com/repos/kopeio/aws-es-proxy/issues/7/comments","events_url":"https://api.github.com/repos/kopeio/aws-es-proxy/issues/7/events","html_url":"https://github.com/kopeio/aws-es-proxy/issues/7","id":175818305,"number":7,"title":"Kibana in Kubernetes cluster cannot talk to AWS ES using the proxy","user":{"login":"thenayr","id":434762,"avatar_url":"https://avatars.githubusercontent.com/u/434762?v=3","gravatar_id":"","url":"https://api.github.com/users/thenayr","html_url":"https://github.com/thenayr","followers_url":"https://api.github.com/users/thenayr/followers","following_url":"https://api.github.com/users/thenayr/following{/other_user}","gists_url":"https://api.github.com/users/thenayr/gists{/gist_id}","starred_url":"https://api.github.com/users/thenayr/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/thenayr/subscriptions","organizations_url":"https://api.github.com/users/thenayr/orgs","repos_url":"https://api.github.com/users/thenayr/repos","events_url":"https://api.github.com/users/thenayr/events{/privacy}","received_events_url":"https://api.github.com/users/thenayr/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-09-08T17:49:22Z","updated_at":"2016-10-13T10:53:17Z","closed_at":null,"body":"Currently attempting to do the following:\r\n\r\n* Replace the existing `elasticsearch-logging` service with this proxy. (this works)\r\n* Have fluentd log directly to my AWS ES cluster using the proxy (this works)\r\n* Have an in-cluster install of Kibana talk to AWS ES cluster using this proxy (this seems to have issues)\r\n\r\nI had to also do the following:\r\n\r\n* Upgrade Kibana to a version that supports ES 2.3 (what I'm running in AWS ES service).  Kibana `4.5.4` is the version that I chose.  \r\n* Configure Kibana to allow me to use it via Kubernetes proxy (this works by setting `server.basePath` to `/api/v1/proxy/namespaces/kube-system/services/kibana-logging`.  This setting is new(ish) to Kibana versions greater than `4.1.11`.    \r\n\r\nAt this point I have logs being sent to AWS ES service via fluentd,  however, when I load the Kibana  UI I get the following error:\r\n\r\n```\r\nCourier Fetch Error: unhandled courier request error: The request signature we calculated does not match the signature you provided. Check your AWS Secret Access Key and signing method. Consult the service documentation for details.\r\n```\r\n\r\n```\r\nThe Canonical String for this request should have been\r\n'POST\r\n/_mget\r\nignore_unavailable=true&preference=1473356469111&timeout=0\r\naccept:application/json, text/plain, */*\r\naccept-encoding:gzip, deflate, br\r\naccept-language:en-US,en;q=0.8\r\ncontent-length:62\r\ncontent-type:application/json;charset=UTF-8\r\nhost:search-qa-test-xxxxxxxxxx.us-east-1.es.amazonaws.com\r\nkbn-version:4.5.4\r\norigin:https://10.x.x.x\r\nreferer:https://10.x.x.x/api/v1/proxy/namespaces/kube-system/services/kibana-logging/app/kibana\r\nx-amz-date:20160908T174109Z\r\nx-amz-security-token:xxxxxxxxx\r\nx-forwarded-port:443\r\nx-forwarded-uri:/api/v1/proxy/namespaces/kube-system/services/kibana-logging/elasticsearch/_mget\r\n\r\naccept;accept-encoding;accept-language;content-length;content-type;host;kbn-version;origin;referer;x-amz-date;x-amz-security-token;x-forwarded-port;x-forwarded-uri\r\nxxxxxxx'\r\n\r\nThe String-to-Sign should have been\r\n'AWS4-HMAC-SHA256\r\n20160908T174109Z\r\n20160908/us-east-1/es/aws4_request\r\nxxxxxxxx'\r\n```\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/kopeio/aws-es-proxy/issues/comments/253480787","html_url":"https://github.com/kopeio/aws-es-proxy/issues/7#issuecomment-253480787","issue_url":"https://api.github.com/repos/kopeio/aws-es-proxy/issues/7","id":253480787,"user":{"login":"tazjin","id":1552853,"avatar_url":"https://avatars.githubusercontent.com/u/1552853?v=3","gravatar_id":"","url":"https://api.github.com/users/tazjin","html_url":"https://github.com/tazjin","followers_url":"https://api.github.com/users/tazjin/followers","following_url":"https://api.github.com/users/tazjin/following{/other_user}","gists_url":"https://api.github.com/users/tazjin/gists{/gist_id}","starred_url":"https://api.github.com/users/tazjin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tazjin/subscriptions","organizations_url":"https://api.github.com/users/tazjin/orgs","repos_url":"https://api.github.com/users/tazjin/repos","events_url":"https://api.github.com/users/tazjin/events{/privacy}","received_events_url":"https://api.github.com/users/tazjin/received_events","type":"User","site_admin":false},"created_at":"2016-10-13T10:53:17Z","updated_at":"2016-10-13T10:53:17Z","body":"I don't have a solution for your problem, but out of interest: Why are you not using the built-in Kibana in the ES service?"}}
{"actor":{"display_login":"tazjin"}}