How can I issue the set auth-pass in Redis Sentinel without the password showing up in the Redis Sentinel console

742 views
Skip to first unread message

Brendan Furey

unread,
Feb 21, 2018, 5:54:01 PM2/21/18
to Redis DB
Redis Version : 3.2.10

After changing the Redis Password, I also need to dynamically set the new password in Redis Sentinel.  I can't restart Redis Sentinel.

I issue the following command to set the new password in Redis sentinel

           /usr/local/bin/redis-cli -p 26379 sentinel set mymaster auth-pass foo
 
However, the command shows up in the Redis Sentinel Console Log

           1:X 21 Feb 22:37:18.359 # +set master mymaster 10.1.112.60 6379 auth-pass foo

which presents a security risk as we have just displayed the new redis password in the console and subsequently in our logs. 

Question
How can I issue the set auth-pass in Redis Sentinel without the password showing up in the Redis Sentinel console, or
Is there a way I can set the password in Redis Sentinel and have it take effect without calling the 'sentinel set mymaster auth-pass' command.  e.g. CONFIG REWRITE in Redis Sentinel.

I have tried updating sentinel.conf with the new password directly and calling 'sentinel flushconfig', but that didn't cause the new password to take effect in Redis Sentinel.
Reply all
Reply to author
Forward
0 new messages