Improve security, make SPLUNK_PASSWORD not required about docker-splunk HOT 3 CLOSED

The default.yml exposes the ability to set the password without it being in an env var. The process to create a default.yml will also auto generate a large random ascii password for you. This method will not expose the password as env. The k8 example from @matthewmodestino does a great job of exposing this file with a stand alone nginx server and pulling from it. As always with any default setup, I'd strongly recommend you change your password once the instance is up and running.

I'd like more feedback from other people, is it desired for us to start the container in a state with no password? Is it understand if you do it this way you can't setup clustering? Would you rather us just randomly generate a default file?

from docker-splunk.

Just to clarify the issue, this page says that SPLUNK_PASSWORD is required https://github.com/splunk/docker-splunk/blob/master/documentation/ADVANCED.md#valid-enterprise-environment-variables

from docker-splunk.

Gotcha; we should make it more clear the field is required, but can be set via env or via a default file.

from docker-splunk.