Basic Auth Password encryption

[zachery harley]

I have been trying to find out if there is anyway to store my basic auth password that is used in service discovery to be stored encrypted.

I have TLS setup and functioning, but ideally would be using both, provided the password can be encrypted. I have seen this bit of documentation: https://prometheus.io/docs/operating/security/

which would suggest that bcrypt passwords can be used, however its not mentioned in the documentation how this would be added in the prometheus.yml file.

Any help/pointers would be appreciated.

Thanks,
Zachery

[Brian Brazil]

On Thu, 19 Nov 2020 at 15:48, zachery harley <zacher...@gmail.com> wrote:

I have been trying to find out if there is anyway to store my basic auth password that is used in service discovery to be stored encrypted.

I have TLS setup and functioning, but ideally would be using both, provided the password can be encrypted. I have seen this bit of documentation: https://prometheus.io/docs/operating/security/

which would suggest that bcrypt passwords can be used, however its not mentioned in the documentation how this would be added in the prometheus.yml file.

You can't do this, as one way or the other Prometheus needs access to the unencrypted password.

 

--

Brian Brazil

www.robustperception.io