authentication problems

[rful011]

I used to have two clusters, one with "security" enabled and a much older one that was set up before xpack was available to non paying customers without. On Monday I finally bit the proverbial bullet and enabled security and TLS on the older clusters. I now have most of the services working, but not cerebro :(

I cloned the cerebro account set up (user and password) to the newly secured cluster and inserted them in the config file:

Users connect to cerebro through an authenticated reverse proxy so there is no user authentication at this point

hosts = [
  { #newly secured cluster
    host = "https://es1.insec.auckland.ac.nz:9200"
    name = "security"
    headers-whitelist = [ "x-proxy-user", "x-proxy-roles", "X-Forwarded-For" ]
    auth = {
      username = "cerebro"
      password = "***********"
    }
  },
  { # this config has been working for months
    host = "https://secmonprd08.its.auckland.ac.nz:9200"
    name = "Test Cluster"
    auth = {
      username = "cerebro"
      password = "***********"
    }
    headers-whitelist = [ "x-proxy-user", "x-proxy-roles", "X-Forwarded-For" ]
  }
]

the original system still works fine but the security cluster now prompts for credentials.

What have I stuffed up?