Secret Variables for Checks

Icinga 2
1

I am currently using icinga 2.14.5 with icingadb 1.3 and icinga web 2.12.4.

I am looking into a way to store a secret variable (like a password) for a host, so it can be used in a service check.

Does icinga have a good solution for this?

2

Hi @nicolasberens,
That depends on what your requirements are. Just the storage of such a thing in general or would you like to handle that different than other variables?

3

i would like to handle it different to other variables, mainly because every var is shown to every user in the webinterface. (and the check command too).

A way to mask these would be a good start

4

@nicolasberens be careful, where in your config you put the password as it could easily end up on every host with an Icinga2 agent!

In icingaweb2 i advice you to restrict the Users who can see Custom Variables and you also should check in the roles icingadb /​protect/​variables.