Add preshared keys for zabbix-agent monitoring service
In progress, NormalPublicFEATURE REQUEST
Actions

Assigned To

Authored By

	Viacheslav
	Dec 3 2024, 3:49 PM

Description

Add the ability to configure preshared keys for the zabbix-agent monitoring service

https://www.zabbix.com/documentation/6.4/en/manual/encryption/using_pre_shared_keys
https://github.com/zabbix/zabbix/blob/master/src/go/conf/zabbix_agent2.conf

generating PSK

Generating PSK

For example, a 256-bit (32 bytes) PSK can be generated using the following commands:

with OpenSSL:
  $ openssl rand -hex 32
  af8ced32dfe8714e548694e2d29e1a14ba6fa13f216cb35c19d0feb1084b0429

zabbix-agent2 configuration:

TLSConnect=psk
TLSAccept=psk
TLSPSKFile=/home/zabbix/zabbix_agentd.psk
TLSPSKIdentity=PSK 001

Proposed CLI:

set service monitoring zabbix-agent authentication mode pre-shared-secret
set service monitoring zabbix-agent psk id 'PSK_001'
set service monitoring zabbix-agent psk secret 'xxx'