. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 507 13 Storage of secrets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . monitoring. Kubernetes • Kubernetes nodes by HTTP • Kubernetes cluster state by HTTP • Kubernetes API server by HTTP • Kubernetes Controller manager by HTTP • Kubernetes Scheduler by HTTP • Kubernetes kubelet kubelet by HTTP To enable Kubernetes monitoring, you need to use the new tool Zabbix Helm Chart, which installs Zabbix proxy and Zabbix agents in the Kubernetes cluster. To learn more about configuring

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 453 13 Storage of secrets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . them manually into Zabbix. 22 Updated templates Integration with OpenShift has been added to Kubernetes cluster state by HTTP template. 15 What’s new in Zabbix 6.4.10 TimescaleDB 2.13 support Support list of proxy names If no target is specified, reload configuration for all proxies secrets_reload Reload secrets from Vault. service_cache_reloadReload the service manager cache. snmp_cache_reloadReload

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 468 13 Storage of secrets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . user group configuration. Storage of secrets It is now possible to store some sensitive information from Zabbix in CyberArk Vault CV2. Similarly to storing secrets in HashiCorp Vault, introduced in Zabbix • user macro values 8 • database access credentials Zabbix provides read-only access to the secrets in vault. See also: CyberArk configuration Secure password hashing In Zabbix 5.0 the password hashing

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 449 13 Storage of secrets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . list of proxy names If no target is specified, reload configuration for all proxies secrets_reload Reload secrets from Vault. service_cache_reloadReload the service manager cache. snmp_cache_reloadReload by HTTP • Kubernetes API server by HTTP • Kubernetes cluster state by HTTP • Kubernetes Controller manager by HTTP • Kubernetes kubelet by HTTP • Kubernetes nodes by HTTP • Kubernetes Scheduler by

新的官方模板可用于监控： Kubernetes • 基于 HTTP 的 Kubernetes 节点 • 基于 HTTP 的 Kubernetes 集群状态 • 通过 HTTP 的 Kubernetes API 服务器 • 通过 HTTP 的 Kubernetes 控制器管理器 • 基于 HTTP 的 Kubernetes 调度程序 • 基于 HTTP 的 Kubernetes kubelet 要启用 Kubernetes 监控，您需要使用新工具 Zabbix Helm Chart，它会在 Kubernetes 集群中安装 Zabbix proxy 和 Zabbix agent。 要了解有关配置模板的更多信息，请参阅HTTP 模板操作。 Mikrotik • MikroTik SNMP - 53 新型号特定模板，用于监控各种型号的 MikroTik 以太网路由器和交换机，请参阅 import them manually into Zabbix. Updated templates Integration with OpenShift has been added to Kubernetes cluster state by HTTP template. 30 What’s new in Zabbix 6.0.25 This minor version has no functional

proxy_config_cache_reload[=] 重新加载 proxy 配置缓存。 target - 逗号分隔的 proxy 名称的列表。 如果没有指定，则重新加载所有 proxy 的配置 secrets_reload 从 Vault 重新加载机密。 service_cache_reload重新加载服务管理器缓存。 snmp_cache_reload重新加载 SNMP 缓存，清除所有主机的 SNMP by HTTP • Kubernetes API server by HTTP • Kubernetes cluster state by HTTP • Kubernetes Controller manager by HTTP • Kubernetes kubelet by HTTP • Kubernetes nodes by HTTP • Kubernetes Scheduler by 示例，请参见： • HashiCorp • CyberArk 保险库秘密值在每次 Zabbix 服务器刷新配置数据时被检索，并存储在配置缓存中。 要手动触发从保险库刷新秘密值，请使用’secrets_reload’ 命令行选项（选项）。 Zabbix proxy 在每次配置同步时从 Zabbix server 接收保险库秘密宏的值，并将其存储在自己的配置缓存中。proxy 从不直接从保险库检

图形？触发器？ Kubernetes 架构 k8s node k8s pod k8s master 应用 Zabbix Agent HTTP Agent CPU/内存/磁盘/网络 服务/日志/... 状态/CPU/内存 Kubernetes 监控 Kubernetes Metrics Server 安装 https://github.com/kubernetes-sigs/metrics-server rics-server # Kubernetes 1.7 $ kubectl create -f deploy/1.7/ # Kubernetes > 1.8 $ kubectl create -f deploy/1.8+/ #edit metric-server deployment to add the flags # args: # - --kubelet-insecure-tls metrics-server ① ② ③ Token Pods https://K8S_API_SERVER:6443/apis/metrics.k8s.io/v1beta1/pods Kubernetes Metrics Server API Nodes https://K8S_API_SERVER:6443/apis/metrics.k8s.io/v1beta1/nodes Zabbix

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 543 12 Storage of secrets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . also: Time zones Storage of secrets It is now possible to store some sensitive information from Zabbix secretly in HashiCorp Vault KV Secrets Engine - Version 2. Secrets can be saved for: • user macro values • database access credentials Zabbix provides read-only access to the secrets in Vault. See also: Storage of secrets 9 User roles It is now possible to define user roles for granular control on

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 560 13 Storage of secrets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . alerting - alert manager statistics lld - LLD manager statistics locks - list of mutexes secrets_reload Reload secrets from Vault. snmp_cache_reload Reload SNMP cache, clear the SNMP properties (engine time explicitly ”denied”. 13 Storage of secrets Overview It is possible to store some sensitive information secretly in HashiCorp Vault KV Secrets Engine - Version 2. Secrets can be saved for: • user macro

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1081 13 Storage of secrets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . explicitly ”denied”. 13 Storage of secrets Overview It is possible to store some sensitive information secretly in HashiCorp Vault KV Secrets Engine - Version 2. Secrets can be saved for: • user macro macro values • database access credentials Zabbix provides read-only access to the secrets in Vault, assuming that secrets are managed by someone else. User macro values It is possible to store user macro