Credentials Directory
Credentials for the Splunk Http Event Collector and/or the z/OSMF REST API can be specified in a Credentials Directory.
If the CREDENTIALS_DIRECTORY environment variable is set, EasySMF will read credentials from the following files:
| File | Contents |
|---|---|
CREDENTIALS_DIRECTORY/splunk_hec_token | HEC token |
CREDENTIALS_DIRECTORY/zosmf_userid | Userid for z/OSMF |
CREDENTIALS_DIRECTORY/zosmf_password | Password for z/OSMF |
These can be regular files. Make sure to set the appropriate permissions e.g. 600 or 400.
The CREDENTIALS_DIRECTORY can also be set up using systemd credentials or Docker secrets. This can provide additional protection over and above plain text files, e.g. systemd credential files can be protected by hardware locked keys.
Systemd credentials are defined in the systemd service, and the CREDENTIALS_DIRECTORY
environment variable is set when the service is started.
Docker secrets are provided in the /run/secrets directory.
Set CREDENTIALS_DIRECTORY=/run/secrets for the docker container.
See Docker or Systemd documentation for implementation details.