Credentials Directory
Credentials for the Splunk Http Event Collector and/or the z/OSMF REST API can be specified in a Credentials Directory.
If the CREDENTIALS_DIRECTORY environment variable is set, EasySMF will read credentials from the following files:
| File | Contents |
|---|---|
CREDENTIALS_DIRECTORY/splunk_hec_token | HEC token |
CREDENTIALS_DIRECTORY/zosmf_userid | Userid for z/OSMF |
CREDENTIALS_DIRECTORY/zosmf_password | Password for z/OSMF |
splunk_hec_token is only read from CREDENTIALS_DIRECTORY when splunk-hec-token is not set in the
configuration file. If the configuration file includes splunk-hec-token, that value is used
and CREDENTIALS_DIRECTORY is not consulted for the HEC token.
These can be regular files. Make sure to set the appropriate permissions e.g. 600 or 400.
The CREDENTIALS_DIRECTORY can also be set up using systemd credentials or Docker secrets. This can provide additional protection over and above plain text files, e.g. systemd credential files can be protected by hardware locked keys.
Systemd credentials are defined in the systemd service, and the CREDENTIALS_DIRECTORY
environment variable is set when the service is started.
Docker secrets are provided in the /run/secrets directory.
Set CREDENTIALS_DIRECTORY=/run/secrets for the docker container.
See Docker or Systemd documentation for implementation details.