PMM2-Agent Keeping PMM2-Server Config username & password in Plain Text

Hi Team,
Recently I’ve configured PMM2-Agent on one of my DB server to monitor it from PMM2-Server Dash board. During configuring my pmm2-agent I need to provide admin username & password of pmm2-server dashboard to register pmm2-agent. But PMM2-Agent keeping this username, password & server info in plain text. How can I get rid of pmm2-agent saving password in plain text ?

Is there any way to encrypt password in agent configuration file ?

This my Agent Config File:

[root@ config]# cat pmm-agent.yaml
# Updated by `pmm-agent setup`.
id: /agent_id/b..
listen-port: 7777
    address: IP:443
    username: testuser
    password: TestPass245
    insecure-tls: true
    paths_base: /usr/local/percona/pmm2
    exporters_base: /usr/local/percona/pmm2/exporters
    node_exporter: /usr/local/percona/pmm2/exporters/node_exporter
    mysqld_exporter: /usr/local/percona/pmm2/exporters/mysqld_exporter
    mongodb_exporter: /usr/local/percona/pmm2/exporters/mongodb_exporter
    postgres_exporter: /usr/local/percona/pmm2/exporters/postgres_exporter
    proxysql_exporter: /usr/local/percona/pmm2/exporters/proxysql_exporter
    rds_exporter: /usr/local/percona/pmm2/exporters/rds_exporter
    azure_exporter: /usr/local/percona/pmm2/exporters/azure_exporter
    vmagent: /usr/local/percona/pmm2/exporters/vmagent
    tempdir: /tmp
    pt_summary: /usr/local/percona/pmm2/tools/pt-summary
    pt_pg_summary: /usr/local/percona/pmm2/tools/pt-pg-summary
    pt_mysql_summary: /usr/local/percona/pmm2/tools/pt-mysql-summary
    pt_mongodb_summary: /usr/local/percona/pmm2/tools/pt-mongodb-summary
    min: 42000
    max: 51999
debug: false
trace: false

Hello Ferdous,
In the web documentation, there is a section on enabling both HTTP password protection and SSL encryption, which may help:

“Combining Security Features…You can enable both HTTP password protection and SSL encryption by combining the corresponding options” .It may be an alternative solution to the problem


What you have shared is the documentation of Percona v1. What about v2? Also, why is pmm-agent.yaml showing password in the first place? Is there any way around to avoid it?

1 Like

Hello Tayeen,
The link above is for both PMM1 & 2 (dropdown box) - this link takes you directly to PMM 2: Percona Monitoring and Management - sorry for any confusion…I believe it still works the same way in PMM2.x…can anyone confirm this?

1 Like

Thanks. I apologize for the delayed response btw.

1 Like