Zabbix Agent2 with native Ceph Plugin does not yet support aes256k
Dear Zabbix team,
the new native ceph client in the beta version of 8 does not yet support the new CephX aes256k authentication/keys.
When rotating the key of client.zabbix, the client immediately returns error -22:
Workaround is to rotate back to default "aes" but this is strongly discouraged since it blocks cluster upgrade (old variant has security flaws and upgrade to aes256k is mandatory),
Following packages are installed on the proxmox host:
Maybe the go client can't yet process the new key format?
Best regards,
Bernhard
the new native ceph client in the beta version of 8 does not yet support the new CephX aes256k authentication/keys.
When rotating the key of client.zabbix, the client immediately returns error -22:
2026/09/17 04:54:24.226185 failed to execute direct exporter task for key 'ceph.df.details[[10.1.xx.xx:3300 zabbix AgAFVqtqecmLKiAAhU9ivFNRzsgNknYnSW6WMrre6kCOJJ5Tgo HJAchSm5Y= native]]' error: 'Failed to get connection: cannot get connection: cannot create connection 10.1.xx.xx:3300: failed to connect: rados: ret=-22, Invalid argument.'
Following packages are installed on the proxmox host:
ii zabbix-agent2 2:8.0.0~beta2-1+debian13 amd64 Zabbix network monitoring solution - agent
ii zabbix-agent2-plugin-ceph 1:8.0.0~beta2-1+debian13 amd64 Zabbix Agent2 plugin for monitoring MongoDB installations
ii zabbix-release 2:8.0-0.3+debian13 all Zabbix official repository configuration
ii zabbix-agent2-plugin-ceph 1:8.0.0~beta2-1+debian13 amd64 Zabbix Agent2 plugin for monitoring MongoDB installations
ii zabbix-release 2:8.0-0.3+debian13 all Zabbix official repository configuration
Best regards,
Bernhard