Uploaded image for project: 'ZABBIX FEATURE REQUESTS'
  1. ZABBIX FEATURE REQUESTS
  2. ZBXNEXT-7941

Support different Vault secret backend (e.g. database, ad)

    XMLWordPrintable

Details

    • Change Request
    • Status: Open
    • Minor
    • Resolution: Unresolved
    • 6.2.2rc1
    • None
    • Server (S)
    • None

    Description

      It would be nice to be able to lookup secrets from the more robust secret engines in HashiCorp Vault, like the database and ad engines.  We allow HashiCorp Vault to rotate our database passwords and lazy rotation of Active Directory service account passwords.  I have a workaround to this, but it is not desirable because it adds complexity.

      One possible implementation would be to allow for looking up a raw path, instead of parsing the path into <mount-point>/data/<remaining-path>.

      Attachments

        Activity

          People

            wiper Andris Zeila
            jtarpley Jim Tarpley
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated: