# Setting up password as env variable is not woking in openshift
**URL:** https://discuss.elastic.co/t/setting-up-password-as-env-variable-is-not-woking-in-openshift/363045
**Category:** Elasticsearch
**Tags:** elastic-stack-security, docker
**Created:** [July 12, 2024, 3:14pm UTC](https://discuss.elastic.co/t/setting-up-password-as-env-variable-is-not-woking-in-openshift/363045 "2024-07-12T15:14:33Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@Sohaib\_El\_Mediouni](https://discuss.elastic.co/u/Sohaib_El_Mediouni)
#### Post date: [July 12, 2024, 3:14pm UTC](https://discuss.elastic.co/t/setting-up-password-as-env-variable-is-not-woking-in-openshift/363045/1 "2024-07-12T15:14:33Z")
Hello,
I'm trying to implement basic security for my elasticsearch in openshift using a statefulset. The problem I have encountered is that when I deploy my statefulset and try to test my elasticsearch, it gives me the following error: "unable to authenticate user [elastic] for REST request [/]". Even though it's set up in my environment, I need to enter the pod to either set up or reset the password. Additionally, if I restart the pods, all the passwords are lost.
I'm using this redaht image :
[https://catalog.redhat.com/software/containers/elastic/elasticsearch/5fac2d6dac3db90370a224c7](https://catalog.redhat.com/software/containers/elastic/elasticsearch/5fac2d6dac3db90370a224c7)
Please help me with my statefulset. I have been stuck for a week.
```auto
kind: StatefulSet
apiVersion: apps/v1
metadata:
name: elasticsearch
namespace: newelk-uat-nat
spec:
replicas: 0
selector:
matchLabels:
app: elasticsearch
template:
metadata:
creationTimestamp: null
labels:
app: elasticsearch
spec:
volumes:
- name: elasticsearch-certs-p12
secret:
secretName: elasticsearch-certs-p12
defaultMode: 420
- name: elasticsearch-user-password
secret:
secretName: elasticsearch-user-password
defaultMode: 420
containers:
- resources:
limits:
cpu: '1'
memory: 3Gi
requests:
cpu: 500m
memory: 1Gi
terminationMessagePath: /dev/termination-log
name: elasticsearch
env:
- name: ingest.geoip.downloader.enabled
value: 'false'
- name: xpack.security.enabled
value: 'true'
- name: elasticsearch-xpack
value: disabled
- name: cluster.name
value: Trafic-Cluster-Uat-Openshift
- name: discovery.seed_hosts
value: >-
elasticsearch-0.elasticsearch-discovery,elasticsearch-1.elasticsearch-discovery
- name: cluster.initial_master_nodes
value: 'elasticsearch-0,elasticsearch-1'
- name: xpack.monitoring.collection.enabled
value: 'true'
- name: xpack.security.transport.ssl.enabled
value: 'true'
- name: xpack.security.transport.ssl.verification_mode
value: certificate
- name: xpack.security.transport.ssl.client_authentication
value: required
- name: xpack.security.transport.ssl.keystore.path
value: /usr/share/elasticsearch/config/certs/elastic-certificates.p12
- name: xpack.security.transport.ssl.truststore.path
value: /usr/share/elasticsearch/config/certs/elastic-certificates.p12
- name: ELASTICSEARCH_USERNAME
value: elastic
- name: ELASTICSEARCH_PASSWORD
valueFrom:
secretKeyRef:
name: elasticsearch-user-password
key: elasticsearch-user-password
ports:
- name: rest
containerPort: 9200
protocol: TCP
- name: inter-node
containerPort: 9300
protocol: TCP
imagePullPolicy: Always
volumeMounts:
- name: elasticsearch-certs-p12
mountPath: /usr/share/elasticsearch/config/certs
terminationMessagePolicy: File
image: >-
openshift/elastic/elasticsearch:7.17.19
restartPolicy: Always
terminationGracePeriodSeconds: 30
dnsPolicy: ClusterFirst
securityContext: {}
schedulerName: default-scheduler
volumeClaimTemplates:
- kind: PersistentVolumeClaim
apiVersion: v1
metadata:
name: elasticsearch-storage
creationTimestamp: null
spec:
accessModes:
- ReadWriteOnce
resources:
requests:
storage: 10Gi
volumeMode: Filesystem
status:
phase: Pending
serviceName: elasticsearch-discovery
podManagementPolicy: OrderedReady
updateStrategy:
type: RollingUpdate
rollingUpdate:
partition: 0
revisionHistoryLimit: 10
status:
observedGeneration: 496
replicas: 0
currentRevision: elasticsearch-74d9765c98
updateRevision: elasticsearch-74d9765c98
collisionCount: 0
availableReplicas: 0
```
also when i do oc exec -it elasticsearch-0 -- env | grep elasticsearch
i see my password :
elasticsearch-password=mypassowrd
---
### Author:  [@TimV](https://discuss.elastic.co/u/TimV)
#### Post date: [July 15, 2024, 1:45am UTC](https://discuss.elastic.co/t/setting-up-password-as-env-variable-is-not-woking-in-openshift/363045/2 "2024-07-15T01:45:52Z")
The correct environment variable is `ELASTIC_PASSWORD` (not "ELASTICSEARCH\_PASSWORD")
---
### Author:  [@Sohaib\_El\_Mediouni](https://discuss.elastic.co/u/Sohaib_El_Mediouni)
#### Post date: [July 15, 2024, 12:19pm UTC](https://discuss.elastic.co/t/setting-up-password-as-env-variable-is-not-woking-in-openshift/363045/3 "2024-07-15T12:19:32Z")
Thank you, it's working. For the deployment of Kibana, should I enter the Elasticsearch pod and set up a password for the kibana\_system, then add it to the environment variables like I did for elastic? Or can I directly do it in the environment variables and it will work?