ENV var XPACK_ENCRYPTEDSAVEDOBJECTS_ENCRYPTIONKEY is not picked up for docker

[simitt]

Kibana version: 7.6.0

Original install method (e.g. download page, yum, from source, etc.): docker

Description of the problem including expected versus actual behavior:

Steps to reproduce:

1. Start Elasticsearch with security enabled
2. Start Kibana via docker and try to set the xpack.encryptedSavedObjects.encryptionKey via environment variable.
   E.g. docker run -e ELASTICSEARCH_USERNAME=foo -e ELASTICSEARCH_PASSWORD=bar -e XPACK_ENCRYPTEDSAVEDOBJECTS_ENCRYPTIONKEY=fhjskloppd678ehkdfdlliverpoolfcr -p 5601:5601 docker.elastic.co/kibana/kibana:8.0.0-SNAPSHOT

The ENV var should be picked up and set the encryption key, but the log files show a message like "message":"APIs are disabled due to the Encrypted Saved Objects plugin using an ephemeral encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in kibana.yml."

cc @kobelb

[elasticmachine]

Pinging @elastic/kibana-security (Team:Security)

[shmelkin]

I have the same issue

EDIT: It can be resolved by setting

• XPACK_ENCRYPTEDSAVEDOBJECTS_ENCRYPTIONKEY=
• XPACK_SECURITY_ENCRYPTIONKEY=
• XPACK_REPORTING_ENCRYPTIONKEY=

not

• xpack.security.encryptionKey=
• xpack.reporting.encryptionKey=
• xpack.encryptedSavedObjects.encryptionKey=