Grafana configuration has few parameters which are considered as sensitive data. Follwoing are few examples:
database password
security admin_password, secret_key
Based on grafana documentation, Configurations including credentials can be passed to grafana in following ways:
- Plaintext in grafana.ini
- via env variable
- via file provider
- via vault.
As vault provider is only available in Grafana Enterprise, we are left with first 3 options. Option 3 might be more secured way in OSS grafana by controlling file ownership & file permission.
Could you please let us know if there is any better way to handle sensitive data in OSS grafana.