influxdata / influxdata/influxdata-docker

Use Docker Secrets for Credentials

Open
#328 10 comments 29 reactions 0 assignees View on GitHub
Dominant language
Shell
Stars
364
Forks
255
Avg merge
3h 18m
Merged PRs (30d)
7

Description

Please add an option to read the admin and user passwords from a file.

Using a file's contents allows for integration with Docker Secret Store, which enables deterministic credentials for administration purposes instead of a random password generated at container init, or worse, plaintext passwords within Docker Stack definitions.

Common convention is to use separate ENV variables suffixed with `_FILE` to define the path of files containing the information otherwise passed as plain text ENV variables.

https://github.com/influxdata/influxdata-docker/blob/56529df4a46eaac4a83c87d9f36f3ba328b4676a/influxdb/1.7/init-influxdb.sh#L21

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with init-influxdb.sh at the referenced line, then trace how the admin and user passwords are read during container initialization. Add the requested file-based credential option using the documented _FILE convention, and verify that credentials supplied through Docker Secret Store files are accepted for both users.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker, shell
Domain
devops, security
Issue type
Feature
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Clearly specified
Newbie friendliness
48/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.