Manage secrets in fleet managed elastic-agents

Elastic Stack Elastic Agent
1

Hello all,
We currently use fleet managed elastic-agents to collect logs from a variety of data sources. We would like to store our secrets that we use for agent policies as a kubernetes secret and use the kubernetes_secrets provider. Is this provider supported for fleet managed elastic-agents?

The documentation is a bit sparse on this topic.

2

Hello,

As far as I know kubernetes_secrets provider is not supported by Fleet.
Secrets are stored by Fleet internally if the integration supports it, see this issue for the list of integration secrets: [Meta] Migration to secret variables · Issue #8610 · elastic/integrations · GitHub

3

Thanks Julia. Are other providers like the env provider supported by fleet managed agents?

4

I got some help from my team:

The providers all work with Fleet managed agents, they are on by default.
${kubernetes_secrets.<default>.<somesecret>.<value>} should work in a Fleet managed agent policy. You can try entering that through the integrations configuration UI, which in theory should work.

1 Like