Protect sensible configuration data in repository.cfg file
Using the keystore service, sensible configuration information can be stored savely as a secret in the keystore vault file.
For more information, please see https://kgs-software.atlassian.net/wiki/spaces/DOCUEN/pages/2415788037 .
Example:
To import a secret referenced by alias
MySecretinto the keystore value file execute this command:
keytool -importpass -storetype pkcs12 -alias MySecret -keystore <Keystorename> -storepass <keystorepassword>After execution of this command, keytool is asking for the phrase to store secretly.
Reference this secret in
repository.cfgfile like this:
repo1.protocolservice.elastic.authentication.credentials:elasticuser,MySecret