On Thursday, 12 March 2020 10:14:56 UTC, mohd wrote:
>
> The one who has direct access to the filesystem of the docker container.
>

You can't. You can have an encrypted filesystem, but your Ubuntu user will 
be able to read it as well.

You could:
- keep the config encrypted in a gpg file
- unpack it into a RAM disk (tmpfs)
- start alertmanager
- delete the tmpfs

You would have to go through these steps every time you (re)start 
alertmanager.

You could build your own separate SMTP relay, which doesn't need 
authentication, which then relays to your final SMTP server.  But obviously 
the password will be exposed in that SMTP relay's configuration.

-- 
You received this message because you are subscribed to the Google Groups 
"Prometheus Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/prometheus-users/48836802-833c-4751-8272-4eda9c262284%40googlegroups.com.

Reply via email to