Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-25499

Zabbix Proxy - Issues Retrieving Secrets from Vault

XMLWordPrintable

    • Icon: Problem report Problem report
    • Resolution: Unresolved
    • Icon: Trivial Trivial
    • None
    • 7.0.5
    • Proxy (P)
    • None

      Occasionally, I'm seeing the following entries in the Zabbix proxy logs:

       19799:20241104:070252.480 cannot get secrets for path "XXX/f290.example.com": no data 

      I've explored several potential causes but have ruled out issues with HashiCorp Vault itself.
      I set up a custom monitoring script that performs a curl request to retrieve secrets every second. During the times when these log entries appear, Vault is responding correctly, suggesting the problem lies elsewhere.

      This issue appears sporadically, roughly every few hours. Restarting the Zabbix proxy temporarily resolves the issue, but the errors start reappearing after some time.
      With debuglevel=4, I managed to isolate the problematic area in the logs

      zbx_db_sync_kvs_paths()

      Additional Context:
      I store around 400 entries in Vault, primarily IPMI host configurations.IPMI connections work as expected, with proxies connecting successfully to the IPMI hosts.
      The errors are bothersome as they imply the proxy might be struggling to refresh its configuration from Vault.

      Note:
      Another user is experiencing the same issue. See discussion here:
      Zabbix Forum

            tgrzechulski Tomasz Grzechulski
            GChmurka GChmurka
            Votes:
            2 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated: