Clear text password exposed in environment

[amitrap]

./elasticsearch/config/node1/elasticsearch.yml contains plain text for the following sensitive data:
xpack.ssl.keystore.password:
xpack.ssl.truststore.password:
Can those parameter be encrypted?

[spinscale (Alexander Reelsen)]

For now, you need to configure proper permissions on the YAML file, so that it is not readable by other users.

In the future you might be able to specify a password on node startup (this comes with a few caveats), feel free to take a look at the github issue at https://github.com/elastic/elasticsearch/issues/32691

[amitrap]

Thanks Alexander