Security of data source secrets

Hello,

We use grafana inside a kubernetes cluster. We have added multiple data sources.
One of those is the microsoft sql server and the configuration has been done via the UI.

The questions now is: How the username and password are stored and where? Are they encrypted?
If so, the AES-256 algorith is used? What about the secret key? If we don’t provide any secret_key via a yaml file for example, is the key generated upon installation? Where this key can be found?

1 Like

There is default encryption key:

Username is not secret, only fields in securejsondata are secrets: