jcline/ansible
1
0
Fork 0
forked from infra/ansible
Code Pull requests Activity

zabbix: enabling ZBX_TLSCONNECT on proxy

Browse source 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
This commit is contained in:
David Kirwan 2026-05-11 16:30:17 +01:00
commit eef6c7bc89
Signed by untrusted user: dkirwan
GPG key ID: A5893AB6474AC37D
1 changed files with 4 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

7
roles/zabbix/zabbix_openshift_proxy/templates/zabbix-values.yaml.j2
View file

@ -75,9 +75,10 @@ zabbixProxy:
## Identity: zabbix_tls_psk_identity (see inventory group_vars/all). PSK value: prefer
## zabbix_tls_psk (set per-environment, e.g. staging -> zabbix_tls_stg_psk), else zabbix_tls_stg_psk,
## matching zabbix_agent role private vars.
## ZBX_TLSPSK requires zabbix-docker images that support passing the raw key via env (7.x proxy-sqlite3).
#- name: ZBX_TLSCONNECT
# value: "psk"
## zabbix-docker creates TLSPSKFile from ZBX_TLSPSK; Zabbix then requires TLSConnect for
## proxy -> server (active) traffic. Use psk when the server expects the same PSK as agents.
- name: ZBX_TLSCONNECT
value: "psk"
- name: ZBX_TLSACCEPT
value: "unencrypted,psk"
- name: ZBX_TLSPSKIDENTITY