Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. Pretty print the configuration for a better overview: Pretty-print the configuration files
  2. Add the following section to the config file: ~/etc/check_mk/multisite.d/wato/roles.mk

    Code Block
    languagepy
    themeRDark
    collapsetrue
    'agent': {'alias': 'agents registration and download',
    'basedon': None,
    'builtin': True,
    'permissions': {'general.use': True,
    'wato.download_all_agents': True, general.see_all': True}}})
    
    


  3. Now we build a new role, only to register the Checkmk Agent with two roles! The whole config file should look like this:

    Code Block
    languagepy
    themeRDark
    collapsetrue
    # Written by Checkmk store
    
    roles.update({'admin': {'alias': 'Administrator', 'builtin': True, 'permissions': {}},
     'admin': {'alias': 'Administrator',
                'basedon': 'admin',
                'builtin': False,
                'permissions': {}},
     'guest': {'alias': 'Guest user', 'builtin': True, 'permissions': {}},
     'user': {'alias': 'Normal monitoring user',
              'builtin': True,
              'permissions': {}},
    'agent': {'alias': 'agents registration and download',
              'basedon': None,
              'builtin': True,
              'permissions': {'general.see_all': True,
                              'general.use': True,
                              'wato.download_all_agents': True}}})
    ~                                                                    


Agent Pairing for TLS Encryption

For a user to be able to do the "cmk-agent-ctl register", which is needed to enable the TLS encryption (available from 2.1.0 onwards), you have to add the right "Agent pairing" (internal name "general.agent_pairing") to his/her role.

Content by Label
showLabelsfalse
max5
spacesKB
showSpacefalse
sortmodified
reversetrue
typepage
cqllabel in ("agent_bakery","roles") and type = "page" and space = "KB"
labelsagent_bakery roles

...