# Anonymous user config

**URL:** <https://discuss.elastic.co/t/anonymous-user-config/284037>\
**Category:** Elastic Cloud on Kubernetes (ECK)\
**Created:** [September 13, 2021, 9:28am UTC](https://discuss.elastic.co/t/anonymous-user-config/284037 "2021-09-13T09:28:52Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![imarkvisser](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/imarkvisser/32/94480_2.png) [@imarkvisser](https://discuss.elastic.co/u/imarkvisser)\
**Post date:** [September 13, 2021, 9:28am UTC](https://discuss.elastic.co/t/anonymous-user-config/284037/1 "2021-09-13T09:28:52Z")

</div>

Hi there,

We are currently running ECK with an anonymous user for users to log in with, which looks like;

```auto
kibana:
  enabled: true
  name: foo
  version: 7.11.2
  http:
  image:
  count: 1
  config:
    xpack.security.authc.providers:
      basic.basic1:
        order: 0
      anonymous.anonymous1:
        order: 1
        credentials:
          username: "xxxx"
          password: "xxxx"

```

The above works fine but that means we'd have to store the user and password in git which is less than ideal. Is it possible to set this part of the config as a secret somehow?

---

<div class="post-metadata">

**Author:** ![Thibault\_Richard](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thibault_richard/32/50513_2.png) [@Thibault\_Richard](https://discuss.elastic.co/u/Thibault_Richard)\
**Post date:** [September 13, 2021, 11:22am UTC](https://discuss.elastic.co/t/anonymous-user-config/284037/2 "2021-09-13T11:22:22Z")

</div>

Hello Mark,

Yes, by combining these two things:

- A Secret can be used with a Pod as container environment variable. ([Secrets | Kubernetes](https://kubernetes.io/docs/concepts/configuration/secret/#using-secrets-as-environment-variables)).
- Environment variables can be injected into Kibana configuration using ${MY\_ENV\_VAR} syntax ([Configure Kibana | Kibana Guide [7.14] | Elastic](https://www.elastic.co/guide/en/kibana/current/settings.html#settings)).

Example:

```auto
# create a secret with the credentials of the anonymous user
kubectl create secret generic test-kibana-anonymous-user --from-literal=username=anonymous --from-file=password=test-anonymous-user-password.txt

```

```auto
apiVersion: kibana.k8s.elastic.co/v1
kind: Kibana
metadata:
  name: test
spec:
  version: 7.14.1
  count: 1
  [...]
  config:
    xpack.security.authc.providers:
      basic.basic1:
        order: 1
      anonymous.anonymous1:
        order: 0
        credentials:
          username: ${ANONYMOUS_USERNAME}
          password: ${ANONYMOUS_PASSWORD}
  podTemplate:
    spec:
      containers:
        - name: kibana
          env:
            - name: ANONYMOUS_USERNAME
              valueFrom:
                secretKeyRef:
                  name: test-kibana-anonymous-user
                  key: username
            - name: ANONYMOUS_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: test-kibana-anonymous-user
                  key: password

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 11, 2021, 11:22am UTC](https://discuss.elastic.co/t/anonymous-user-config/284037/3 "2021-10-11T11:22:30Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.