| Info |
|---|
| To register agents, both for agent updates and for TLS encryption, it might be desirable to have a dedicated user and role at hand. |
...
| This article outlines how that can be achieved. |
Table of Contents
The UI way
...
- Create a copy of the guest role and name it meaningfully.
- Ensure the role has the following permissions:
- "Use the GUI at all"
- "Register Host & download monitoring agents of your hosts",
- "Register all hosts & download all monitoring agents"
- Optionally you can disable all other permissions.
- Create a user with a meaningful name
- Configure the following things:
- Authentication: Automation Secret
- Assign the agent registration role created before
The config file way
| Note |
|---|
We always recommend using the GUI instead of modifying .mk files. For any issue or broken config, we do not provide any support. In exceptional circumstances, you might want to adjust configuration files with caution. Please do a backup before adjusting the files. |
- Pretty print the configuration for a better overview: Pretty-print the configuration files
Add the following section to the config file: ~/etc/check_mk/multisite.d/wato/roles.mk.
Code Block language bash theme RDark 'agent_updater': {'alias': 'agents registration and download', 'basedon': None, 'builtin': True, 'permissions': {'general.see_all': True, 'general.use': True, 'wato.download_all_agents': True}}In order to put it in the right place, please add a comma "," before the "})".
...