hi, will this come in 6.2 or later ? really. looking forward as now we need to use root tokens to keep the connection longer then 1 day

really not secure and thats a pitty 

Please add this feature!

An alternative/easier approach may be to integrate with vault agent.  Vault agent (with an approle authenticator) can auto-renew and auto-auth tokens and write them to a sink file.

This would then only require the following Zabbix changes:

VaultToken configuration modified to enable reading from a file:

VaultToken=file:/path/to/sinkfile

and a new option: VaultTokenFrequency with a value set to how frequently the zabbix server should refresh the token used from the sink file.

VaultTokenFrequency=3600

Also will be nice to use approle and add to config few new params, like role-id and secret_id instead VaultToken with them Zabbix can automatically renew token after its expiration.

We definitely need this functionality. It is not possible to manually renew the token every month.

+ !!!

not ideal but for frontend i use the vault agent as workaround 

it will read token and write it into a file that frontend can read as was mentioned above

a permanent fix (integration between zabbix and vault )would be welcome

Can we renew each time when new values are requests from vault ?

imho that would be a bit much 

i think it should be a configurable option so that the end user can choose how many times zabbix will do a toke update

so that the refresh time is lower then the max token time 

Alternatively Zabbix could request the token lifetime and refresh some period before expiry.

https://developer.hashicorp.com/vault/api-docs/auth/token#lookup-a-token-self

nice indeed the better solution

Another issue that needs to be considered is that there is also a time limit on how long a token can be refreshed. After that period has passed, a new token must be obtained. That means, depending on the specific auth method in use, either Zabbix itself would obtain a new token, or a new token should be able to be provided to Zabbix.

Available in versions:

• 7.2.0alpha1 (master) 3e331002294, 19df46f6bfa
• 7.0.5rc1 5102ca3b128M, fce782bd5cf

Documentation updated:

• What's new in Zabbix 7.0.5
• Storage of secrets -> HashiCorp