diff --git a/network_roles.yaml b/network_roles.yaml
index 1eb9da9..1c31fca 100644
--- a/network_roles.yaml
+++ b/network_roles.yaml
@@ -1,3 +1,4 @@
+# Network and virtual IP address for the Elasticsearch service
 - id: "elasticsearch"
   default_mapping: "management"
   properties:
@@ -10,3 +11,18 @@
          node_roles:
            - "elasticsearch_kibana"
            - "primary-elasticsearch_kibana"
+# Network and virtual IP address for the Kibana service
+# TODO(pasquier-s): expose the Kibana service on this virtual IP address
+# instead of es_vip_mgmt
+- id: "kibana"
+  default_mapping: "management"
+  properties:
+    subnet: true
+    gateway: false
+    vip:
+       - name: "kibana"
+         namespace: "haproxy"
+         alias: "kibana"
+         node_roles:
+           - "elasticsearch_kibana"
+           - "primary-elasticsearch_kibana"