Passwords stored in plain text

[anorwood-xten]

Hi team,

Noted that when defining the data source the username and password are being stored in clear text. Do you have any experience with pulling the username and/or password from a secure source (a Vault, for example)? There are obvious security concerns with keeping passwords in plaintext (even if it's on a yaml file on our infra)

Thanks!

[mlybarger]

raising this up again.

[thaddak]

I adapted the code to encrypt the entire dsn. The code is below.

https://github.com/thaddak/sql_exporter

[mlybarger]

this looks promising @thaddak , we will be trying this out. have you considered a MR/PR to the main repo? or forking the repo itself if it's not maintained?

[thaddak]

Hi Mark, No, I adapted the code for my own use and put it up on github to make it easier to share. I'm not a developer and don't want the responsibility of maintaining code :) Hopefully that code works for you. Regards, Thaddaeus

[mlybarger]

of course. thanks so much for you contribution!

…

On Wed, Mar 22, 2023 at 9:20 AM TK ***@***.***> wrote: Hi Mark, No, I adapted the code for my own use and put it up on github to make it easier to share. I'm not a developer and don't want the responsibility of maintaining code :) Hopefully that code works for you. Regards, Thaddaeus On Thu, 23 Mar 2023 at 00:04, Mark Lybarger ***@***.***> wrote: > this looks promising @thaddak <https://github.com/thaddak> , we will be > trying this out. have you considered a MR/PR to the main repo? or forking > the repo itself if it's not maintained? > > — > Reply to this email directly, view it on GitHub > <#107 (comment) >, > or unsubscribe > < https://github.com/notifications/unsubscribe-auth/A6VDO7PFQH6BZ54EYTECB6TW5L2HHANCNFSM5HRHRUHA > > . > You are receiving this because you were mentioned.Message ID: > ***@***.***> > — Reply to this email directly, view it on GitHub <#107 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAL3FVVKGTBXYDJCICYZFMDW5L4B5ANCNFSM5HRHRUHA> . You are receiving this because you commented.Message ID: ***@***.***>