Clear text password exposed in environment

Elastic Stack Elasticsearch
1

./elasticsearch/config/node1/elasticsearch.yml contains plain text for the following sensitive data:
xpack.ssl.keystore.password:
xpack.ssl.truststore.password:
Can those parameter be encrypted?

2

For now, you need to configure proper permissions on the YAML file, so that it is not readable by other users.

In the future you might be able to specify a password on node startup (this comes with a few caveats), feel free to take a look at the github issue at https://github.com/elastic/elasticsearch/issues/32691

3

Thanks Alexander :slight_smile:

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.