Using environment variables and bcrypt

Search Guard
1

I’m trying to use feature that can generate bcrypt of env variable to store password as described here:

https://docs.search-guard.com/latest/configuration-password-handling

Here’s my sg_internal_users.yml:

---
_sg_meta:
  type: internalusers
  config_version: 2

kibanaserver:
  hash: ${envbc.PASSWORD:-kibana}

And here’s the command I’m running:

PASSWORD=test sgadmin.sh -key "/etc/elasticsearch/Admin.key" -cert "/etc/elasticsearch/Admin.crt" -c
acert /etc/elasticsearch/ca.crt -cd sgconfig -cn foo -ff

This doesn’t seem to work, as the stored password seems to be “kibana” instead of “test”