strategy for Zabbix items that require authentication?

[bboles]

Hi friends,

I want to see what best practice anyone has used for credentials needed for an item. For example, logging in to a database every few minutes to check something. Here are the criteria I am trying to meet:

• I really don't want to store unencrypted credentials on disk if at all possible.
• Entering credentials once on a restart of an app or reboot is acceptable.
• This whole exercise not becoming a convoluted mess.

Does anyone have any experience in using Hashicorp's Vault to grab credentials for use in an item? I found https://github.com/channable/vaultenv that I think I can leverage but I wanted to get feedback from anyone that might have done something better. This will be on Zabbix 3.4.7. Cheers!