Api-users.conf vs. disabling conf.d


I’m currently doing a lot of fine-tuning and taking notes, and I noticed one thing that puzzles me. Here goes.

Running the icinga2 api setup command generates a basic configuration in /etc/icinga2/conf.d/api-setup.conf. Once this is OK, I edit the file so it looks something like this.

// /etc/icinga2/conf.d/api-users.conf

object ApiUser "icingaweb2" {
  password = "40bb35b39bc53194"
  permissions = [ "status/query", "actions/*", "objects/modify/*",
    "objects/query/*" ]

But here’s the thing. Later in the setup, I’m running the node wizard on the server, and while doing this, I disable the inclusion of the conf.d directory, following the suggestions made in this forum.

As I understand, this also makes Icinga ignore my api-users.conf file, since it’s located in /etc/icinga2/conf.d. Please correct me if I’m wrong.

Do I have to copy (or move) this file to some other location? For example /etc/icinga2/zones.d/master once I have created it?

I’m a bit confused here. Any suggestions?



icinga2 node wizard includes /etc/icinga2/conf.d/api-users.conf in /etc/icinga2/icinga2.conf.

1 Like