PMM2-Agent Keeping PMM2-Server Config username & password in Plain Text

Percona Monitoring and Management (PMM) PMM 2.x
1

Hi Team,
Recently I’ve configured PMM2-Agent on one of my DB server to monitor it from PMM2-Server Dash board. During configuring my pmm2-agent I need to provide admin username & password of pmm2-server dashboard to register pmm2-agent. But PMM2-Agent keeping this username, password & server info in plain text. How can I get rid of pmm2-agent saving password in plain text ?

Is there any way to encrypt password in agent configuration file ?

This my Agent Config File:

[root@ config]# cat pmm-agent.yaml
# Updated by `pmm-agent setup`.
---
id: /agent_id/b..
listen-address: 127.0.0.1
listen-port: 7777
server:
    address: IP:443
    username: testuser
    password: TestPass245
    insecure-tls: true
paths:
    paths_base: /usr/local/percona/pmm2
    exporters_base: /usr/local/percona/pmm2/exporters
    node_exporter: /usr/local/percona/pmm2/exporters/node_exporter
    mysqld_exporter: /usr/local/percona/pmm2/exporters/mysqld_exporter
    mongodb_exporter: /usr/local/percona/pmm2/exporters/mongodb_exporter
    postgres_exporter: /usr/local/percona/pmm2/exporters/postgres_exporter
    proxysql_exporter: /usr/local/percona/pmm2/exporters/proxysql_exporter
    rds_exporter: /usr/local/percona/pmm2/exporters/rds_exporter
    azure_exporter: /usr/local/percona/pmm2/exporters/azure_exporter
    vmagent: /usr/local/percona/pmm2/exporters/vmagent
    tempdir: /tmp
    pt_summary: /usr/local/percona/pmm2/tools/pt-summary
    pt_pg_summary: /usr/local/percona/pmm2/tools/pt-pg-summary
    pt_mysql_summary: /usr/local/percona/pmm2/tools/pt-mysql-summary
    pt_mongodb_summary: /usr/local/percona/pmm2/tools/pt-mongodb-summary
ports:
    min: 42000
    max: 51999
debug: false
trace: false
2

Hello Ferdous,
In the web documentation, there is a section on enabling both HTTP password protection and SSL encryption, which may help:

“Combining Security Features…You can enable both HTTP password protection and SSL encryption by combining the corresponding options” .It may be an alternative solution to the problem
Harry

2 Likes
3

Hello,
What you have shared is the documentation of Percona v1. What about v2? Also, why is pmm-agent.yaml showing password in the first place? Is there any way around to avoid it?

1 Like
4

Hello Tayeen,
The link above is for both PMM1 & 2 (dropdown box) - this link takes you directly to PMM 2: Percona Monitoring and Management - sorry for any confusion…I believe it still works the same way in PMM2.x…can anyone confirm this?

1 Like
5

Thanks. I apologize for the delayed response btw.

1 Like