---
_meta:
  type: "config"
  config_version: 2
config:
  dynamic:
    filtered_alias_mode: "warn"
    disable_rest_auth: false
    disable_intertransport_auth: false
    respect_request_indices_options: false
    kibana:
      multitenancy_enabled: true
      private_tenant_enabled: true
      default_tenant: ""
      server_username: "kibanaserver"
      index: ".kibana"
    http:
      anonymous_auth_enabled: false
      xff:
        enabled: true
        internalProxies: ".*"
        remoteIpHeader: "x-forwarded-for"
    authc:
      authentication_domain_kerb:
        http_enabled: false
        transport_enabled: false
        order: 3
        http_authenticator:
          challenge: true
          type: "kerberos"
          config: {}
        authentication_backend:
          type: "noop"
          config: {}
        description: "Migrated from v6"
      authentication_domain_proxy:
        http_enabled: false
        transport_enabled: false
        order: 2
        http_authenticator:
          challenge: true
          type: "proxy"
          config:
            user_header: "x-proxy-user"
            roles_header: "x-proxy-roles"
        authentication_backend:
          type: "noop"
          config: {}
        description: "Migrated from v6"
      authentication_domain_clientcert:
        http_enabled: false
        transport_enabled: false
        order: 1
        http_authenticator:
          challenge: true
          type: "clientcert"
          config: {}
        authentication_backend:
          type: "noop"
          config: {}
        description: "Migrated from v6"
      authentication_domain_basic_internal:
        http_enabled: true
        transport_enabled: true
        order: 0
        http_authenticator:
          challenge: true
          type: "basic"
          config: {}
        authentication_backend:
          type: "intern"
          config: {}
        description: "Migrated from v6"
    authz:
      roles_from_xxx:
        http_enabled: false
        transport_enabled: false
        authorization_backend:
          type: "xxx"
          config: {}
        description: "Migrated from v6"
      roles_from_myldap:
        http_enabled: false
        transport_enabled: false
        authorization_backend:
          type: "ldap"
          config:
            rolesearch: "(uniqueMember={0})"
            resolve_nested_roles: true
            rolebase: "ou=groups,o=TEST"
            rolename: "cn"
        description: "Migrated from v6"
    do_not_fail_on_forbidden: false
    multi_rolespan_enabled: false
    hosts_resolver_mode: "ip-only"
    transport_userrname_attribute: null