Uploaded image for project: 'ZABBIX FEATURE REQUESTS'
  1. ZABBIX FEATURE REQUESTS
  2. ZBXNEXT-7941

Support different Vault secret backend (e.g. database, ad)

XMLWordPrintable

    • Icon: Change Request Change Request
    • Resolution: Unresolved
    • Icon: Minor Minor
    • None
    • 6.2.2rc1
    • Server (S)
    • None

      It would be nice to be able to lookup secrets from the more robust secret engines in HashiCorp Vault, like the database and ad engines.  We allow HashiCorp Vault to rotate our database passwords and lazy rotation of Active Directory service account passwords.  I have a workaround to this, but it is not desirable because it adds complexity.

      One possible implementation would be to allow for looking up a raw path, instead of parsing the path into <mount-point>/data/<remaining-path>.

            wiper Andris Zeila
            jtarpley Jim Tarpley
            Votes:
            1 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated: