These docs are for Cribl Edge 4.12 and are no longer actively maintained.

See the latest version (4.13).

secrets.yml

secrets.yml stores secrets for Cribl Edge.

The secrets are decrypted and encrypted using a cribl.secret file. cribl.secret is unique per Fleet and resides in the $CRIBL_HOME/groups/<groupName>/local/cribl/auth directory on Leader nodes, or in $CRIBL_HOME/local/cribl/auth for Workers or single-instance deployments.

Cribl automatically decrypts plaintext secrets from secrets.yml on startup and stores them in memory, keeping your data secure.

<secret-id>:
  secretType: # [string] One of: keypair | text | credentials
  secrets:
    # -------------- if secretType is keypair ---------------
    apiKey: "<encrypted-value>"
    secretKey: "<encrypted-value>"

    # -------------- if secretType is text ------------------ 
    value: "<encrypted-value>"

    # -------------- if secretType is credentials ----------- 
    username: "<encrypted-value>"
    password: "<encrypted-value>"