These docs are for Cribl Stream 4.11 and are no longer actively maintained.

See the latest version (4.14).

secrets.yml

secrets.yml stores secrets for Cribl Stream.

The secrets are decrypted and encrypted using a cribl.secret file. cribl.secret is unique per Worker Group and resides in the $CRIBL_HOME/groups/<group-name>/local/cribl/auth directory on Leader nodes, or in $CRIBL_HOME/local/cribl/auth for Workers or single-instance deployments.

Cribl automatically decrypts plaintext secrets from secrets.yml on startup and stores them in memory, keeping your data secure.

<secret-id>:
  secretType: # [string] One of: keypair | text | credentials
  secrets:
    # -------------- if secretType is keypair ---------------
    apiKey: "<encrypted-value>"
    secretKey: "<encrypted-value>"

    # -------------- if secretType is text ------------------ 
    value: "<encrypted-value>"

    # -------------- if secretType is credentials ----------- 
    username: "<encrypted-value>"
    password: "<encrypted-value>"