Helm/Zabbix

helm repo add zabbix-community https://zabbix-community.github.io/helm-zabbix
helm repo update && helm repo list
kubectl config get-contexts

Diagram

Data

Data » HostPath

# ssh -qt shahed@shahed-ab.local.or.tunnel.ip bash

cat <<'EXE'| sudo bash
mkdir -p           /var/minikube/pvc/zabbix/data-postgresql-0/
chown -R 1001:1001 /var/minikube/pvc/zabbix/data-postgresql-0/
sh    -c  'ls -alh /var/minikube/pvc/zabbix/'
EXE

# ssh -qt shahed@shahed-ab.local.or.tunnel.ip bash

cat <<'EXE'| sudo bash
mkdir -p           /var/minikube/pvc/zabbix/data-zabbix-server-0/
chown -R 1997:1995 /var/minikube/pvc/zabbix/data-zabbix-server-0/
sh    -c  'ls -alh /var/minikube/pvc/zabbix/'
EXE

Data » PostgreSQL

PostgreSQL » Create

# ssh -qt shahed@shahed-ab.local.or.tunnel.ip bash
echo -n 'Password: ';read -s ZABBIX_PASSWORD;export ZABBIX_PASSWORD;echo
echo "${ZABBIX_PASSWORD}"
# Password: sadaqah!

cat <<'SQL'| sudo -i -u postgres psql
SELECT usename AS "user"     FROM pg_catalog.pg_user WHERE usename LIKE '%zabbix%' ORDER BY 1 ASC; -- \du+
SELECT datname as "database" FROM pg_database        WHERE datname LIKE '%zabbix%' ORDER BY 1 ASC; -- \l+
SQL

cat << DDL | sudo -i -u postgres psql
\! printf '\n'
SELECT 'CREATE DATABASE shahed_tool_zabbix' 
WHERE NOT EXISTS (SELECT FROM pg_database WHERE datname = 'shahed_tool_zabbix')\gexec
CREATE USER shahed_tool_zabbix WITH ENCRYPTED PASSWORD '${ZABBIX_PASSWORD}';
GRANT ALL PRIVILEGES ON DATABASE shahed_tool_zabbix TO shahed_tool_zabbix;
ALTER DATABASE             shahed_tool_zabbix OWNER TO shahed_tool_zabbix;
DDL

PostgreSQL » Debug

echo -n 'Password: ';read -s PGPASSWORD; export PGPASSWORD; echo
echo  "${PGPASSWORD}"
# Password: sadaqah!

sudo -i -u postgres \
psql -d shahed_tool_zabbix
psql -d shahed_tool_zabbix -U shahed_tool_zabbix
psql -d shahed_tool_zabbix -U shahed_tool_zabbix -p 5432 -h 10.20.0.1
psql -d shahed_tool_zabbix -U shahed_tool_zabbix -p 5432 -h 10.20.13.1
psql -d shahed_tool_zabbix -U shahed_tool_zabbix -p 5432 -h 192.168.49.1

PostgreSQL » Backup

# ssh -qt shahed@shahed-ab.local.or.tunnel.ip bash
# cd ~/Downloads

function quarter() {
 local month this_quarter
 month=$(date +%m)

 case $month in
   01|02|03) this_quarter="$(date +'%Y-01-01')" ;;
   04|05|06) this_quarter="$(date +'%Y-04-01')" ;;
   07|08|09) this_quarter="$(date +'%Y-07-01')" ;;
   10|11|12) this_quarter="$(date +'%Y-10-01')" ;;
 esac

 echo -n "${this_quarter}"
}

echo -n 'Password: ';read -s PGPASSWORD; export PGPASSWORD; echo
echo  "${PGPASSWORD}"
# Password: sadaqah!

BKP_DATE_N_TIME="$(date +'%Y-%m-%dT%H%M')";\
pg_dump -p5432 -h10.20.13.1 -U shahed_tool_zabbix shahed_tool_zabbix | gzip > shahed_tool_zabbix.data.${BKP_DATE_N_TIME}.sql.gz
gunzip -c shahed_tool_zabbix.data.${BKP_DATE_N_TIME}.sql.gz | more

PostgreSQL » Restore

# ssh -qt shahed@shahed-ab.local.or.tunnel.ip bash
# mc cp s3_minio_shahed_shahed_biz_admin/shahed-bkp/tool/zabbix/daily/2026/M01/2026-01-27/data/shahed_tool_zabbix.data.2026-01-27T1704.sql.gz ${HOME}/Downloads/

echo -n 'Password: ';read -s PGPASSWORD; export PGPASSWORD; echo
echo  "${PGPASSWORD}"
# Password: sadaqah!

psql -p5432 -h10.20.13.1 -U shahed_tool_zabbix -d shahed_tool_zabbix
gunzip -c shahed_tool_zabbix.data.2026-01-27T1704.sql.gz | psql -p5432 -h10.20.13.1 -U shahed_tool_zabbix -d shahed_tool_zabbix
# gunzip -c ${HOME}/Downloads/shahed_tool_zabbix.data.2026-01-27T1704.sql.gz | psql -p5432 -h10.20.13.1 -U shahed_tool_zabbix -d shahed_tool_zabbix

PostgreSQL » Destroy

# ssh -qt shahed@shahed-ab.local.or.tunnel.ip bash
cat <<'DDL'| sudo -i -u postgres psql
\! printf '\n'
REVOKE ALL PRIVILEGES ON DATABASE shahed_tool_zabbix FROM shahed_tool_zabbix;
DROP OWNED    BY        shahed_tool_zabbix;
DROP DATABASE IF EXISTS shahed_tool_zabbix;
DROP USER     IF EXISTS shahed_tool_zabbix;
DDL

Config

Config » Context

export KUBECONFIG="${HOME}/.kube/aws-kubeconfig.yaml"
export KUBECONFIG="${HOME}/.kube/gcp-kubeconfig.yaml"
export KUBECONFIG="${HOME}/.kube/lke-kubeconfig.yaml"
export KUBECONFIG="${HOME}/.kube/config"

export KUBECONFIG=${HOME}/.kube/shahed-ab-kubeconfig.yaml
kubectl config get-contexts
kubectl config view

kubectl config view -o=yaml|yq '.contexts[0].name'
kubectl create ns   zabbix-monitoring-system || true
kubectl get ns|grep zabbix-monitoring-system

Config » Zabbix

Zabbix » Certificate

cat <<'YML' | \
kubectl -n zabbix-monitoring-system apply -f -
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: zabbix-cert
  namespace: zabbix-monitoring-system
spec:
  secretName: zabbix-cert
  commonName: zabbix.shahed.biz.ops
  dnsNames:
    - zabbix.shahed.biz.ops
  duration: 8760h
  renewBefore: 720h
  privateKey:
    size: 256
    encoding: PKCS8
    algorithm: ECDSA
    rotationPolicy: Always
  usages:
    - digital signature
    - key encipherment
    - server auth
    - client auth
  subject:
    countries: ["BD"]
    provinces: ["Dhaka"]
    postalCodes: ["1500"]
    localities: ["Munshiganj"]
    organizations: ["Shahed, Inc."]
    organizationalUnits: ["zabbix.shahed.biz.ops"]
    streetAddresses: ["256 Khal East, Passport Office"]
  issuerRef:
    name: shahed-ecc-sub-ca-2025-k8s
    kind: ClusterIssuer
YML

cat <<'CRT' | \
sudo tee /usr/local/share/ca-certificates/Shahed_ECC_Root_CA_2025.crt >/dev/null
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
CRT

sudo update-ca-certificates --fresh
sudo update-ca-certificates

Shahed_ECC_Root_CA_2025 » Firefox » Settings » Certificates » View Certificates » Import

kubectl -n  cert-manager rollout restart deployment cert-manager-webhook
kubectl get ValidatingWebhookConfiguration          cert-manager-webhook

Skipped » Find More 👉 Webhook » Fixes

kubectl -n zabbix-monitoring-system get    Secret      zabbix-cert -o=yaml
kubectl -n zabbix-monitoring-system get    Certificate zabbix-cert -o=yaml

kubectl -n zabbix-monitoring-system delete Secret      zabbix-cert -o=yaml
kubectl -n zabbix-monitoring-system delete Certificate zabbix-cert -o=yaml

Zabbix » Secrect

Secrect » PostgreSQL

cat <<'ENV' | \
kubectl -n zabbix-monitoring-system create secret generic postgres \
 --from-env-file=/dev/stdin --dry-run=client -o=yaml | kubectl apply -f -
host=zabbix-postgresql.zabbix-monitoring-system
dbname=shahed_tool_zabbix
user=shahed_tool_zabbix
password=sadaqah!
port=5432
ENV

Zabbix » Volume

Skipped » Find More 👉 Storage » Mount Skipped » Find More 👉 Storage » Class » Hostpath Skipped » Find More 👉 Storage » Persistent Volume

zabbix-data-postgresql-0

data-postgresql-0

cat <<'YML'| \
kubectl apply -f -

---
apiVersion: v1
kind: PersistentVolume
metadata:
  name: zabbix-data-postgresql-0
spec:
  capacity:
    storage: 1Gi
  accessModes:
    - ReadWriteOnce
  persistentVolumeReclaimPolicy: Retain
  storageClassName: hostpath
  hostPath:
    path: /var/hostpath_pv/zabbix/data-postgresql-0
    type: DirectoryOrCreate
YML

cat << YML | \
kubectl apply -f -
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  labels:
    app.kubernetes.io/name: zabbix
  name: data-postgresql-0
  namespace: zabbix-monitoring-system
spec:
  accessModes:
  - ReadWriteOnce
  resources:
    requests:
      storage: 1Gi
  storageClassName: hostpath
  volumeName: zabbix-data-postgresql-0
YML

zabbix-data-zabbix-server-0

data-zabbix-server-0

cat <<'YML'| \
kubectl apply -f -

---
apiVersion: v1
kind: PersistentVolume
metadata:
  name: zabbix-data-zabbix-server-0
spec:
  capacity:
    storage: 1Gi
  accessModes:
    - ReadWriteOnce
  persistentVolumeReclaimPolicy: Retain
  storageClassName: hostpath
  hostPath:
    path: /var/hostpath_pv/zabbix/data-zabbix-server-0
    type: DirectoryOrCreate
YML

cat << YML | \
kubectl apply -f -
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  labels:
    app.kubernetes.io/name: zabbix
  name: data-zabbix-server-0
  namespace: zabbix-monitoring-system
spec:
  accessModes:
  - ReadWriteOnce
  resources:
    requests:
      storage: 1Gi
  storageClassName: hostpath
  volumeName: zabbix-data-zabbix-server-0
YML

Helm » Upgrade

Helm » Install
helm show values zabbix-community/zabbix --version=7.0.11\|less helm show values zabbix-community/zabbix --version=7.0.12\|less	export KUBECONFIG="${HOME}/.kube/shahed-ab-kubeconfig.yaml" kubectl create ns zabbix-monitoring-system \|\| true
Install	Notes
cat <<'YML' \| \ helm -n=zabbix-monitoring-system upgrade \ -i zabbix zabbix-community/zabbix --version=7.0.12 -f - --- nameOverride: zabbix fullnameOverride: zabbix zabbixImageTag: ubuntu-7.0.16 postgresAccess: existingSecretName: postgres zabbixServer: enabled: true zabbixServerHA: enabled: false dbCreateUpgradeJob: image: repository: ghcr.io/zabbix-community/zabbix-server-create-upgrade-db replicaCount: 1 image: repository: zabbix/zabbix-server-pgsql ingress: enabled: true annotations: kubernetes.io/ingress.class: nginx hosts: - host: zabbix.shahed.biz.ops paths: - path: / pathType: ImplementationSpecific YML
Status	Verify
helm -n=zabbix-monitoring-system status zabbix helm -n=zabbix-monitoring-system get manifest zabbix	telnet zabbix.shahed.biz.ops 80 setsid open http://zabbix.shahed.biz.ops >/dev/null 2>&1 &

Helm » Ingress

cat <<'YML' | \
kubectl -n zabbix-monitoring-system patch ingress/zabbix --patch-file=/dev/stdin
---
metadata:
  annotations:
    cert-manager.io/cluster-issuer: shahed-ecc-sub-ca-2025-k8s
spec:
  tls:
    - hosts:
        - zabbix.shahed.biz.ops
      secretName: zabbix-cert
YML

cat <<'YML' | \
kubectl -n zabbix-monitoring-system patch ingress/zabbix --patch-file=/dev/stdin
---
metadata:
  annotations:
    cert-manager.io/cluster-issuer: null
spec:
  tls: null



YML

Telnet

Browse

telnet zabbix.shahed.biz.ops  80
telnet zabbix.shahed.biz.ops 443

setsid open  http://zabbix.shahed.biz.ops >/dev/null 2>&1 &
setsid open https://zabbix.shahed.biz.ops >/dev/null 2>&1 &

Helm » Scaling

Helm » Scaling
Scale » Down	Scale » Up
kubectl -n=zabbix-monitoring-system \ scale deploy/zabbix-zabbix-webservice --replicas=0	kubectl -n=zabbix-monitoring-system \ scale deploy/zabbix-zabbix-webservice --replicas=1
kubectl -n=zabbix-monitoring-system \ scale deploy/zabbix-zabbix-server --replicas=0	kubectl -n=zabbix-monitoring-system \ scale deploy/zabbix-zabbix-server --replicas=1
kubectl -n=zabbix-monitoring-system \ scale deploy/zabbix-zabbix-web --replicas=0	kubectl -n=zabbix-monitoring-system \ scale deploy/zabbix-zabbix-web --replicas=1
kubectl -n=zabbix-monitoring-system \ scale sts/zabbix-postgresql --replicas=0	kubectl -n=zabbix-monitoring-system \ scale sts/zabbix-postgresql --replicas=1

Helm » Debug

Helm » Debug
kubectl -n=zabbix-monitoring-system exec -it svc/zabbix-postgresql -- psql -p5432 -U shahed_tool_zabbix -d shahed_tool_zabbix kubectl -n=zabbix-monitoring-system exec -it svc/zabbix-postgresql -- bash -c 'printenv\|grep -i postgres_' kubectl -n=zabbix-monitoring-system exec -it svc/zabbix-postgresql -- bash -c 'cat /etc/hosts' kubectl -n=zabbix-monitoring-system exec -it svc/zabbix-postgresql -- bash psql -hzabbix-postgresql-0 -p5432 -U shahed_tool_zabbix
kubectl -n=zabbix-monitoring-system exec -it svc/zabbix-zabbix-webservice -c zabbix-webservice -- bash kubectl -n=zabbix-monitoring-system logs -f svc/zabbix-zabbix-webservice -c zabbix-webservice kubectl -n=zabbix-monitoring-system exec -it svc/zabbix-zabbix-server -c zabbix-server -- bash kubectl -n=zabbix-monitoring-system logs -f svc/zabbix-zabbix-server -c zabbix-server kubectl -n=zabbix-monitoring-system exec -it svc/zabbix-postgresql -c postgresql -- bash kubectl -n=zabbix-monitoring-system logs -f svc/zabbix-postgresql -c postgresql kubectl -n=zabbix-monitoring-system exec -it svc/zabbix-zabbix-web -c zabbix-web -- bash kubectl -n=zabbix-monitoring-system logs -f svc/zabbix-zabbix-web -c zabbix-web
kubectl -n=zabbix-monitoring-system get Pod -o=yaml\|yq -P '.items[].spec.containers[].name' kubectl -n=zabbix-monitoring-system get Pod -o=yaml\|yq -P '.items[].metadata.labels' kubectl -n=zabbix-monitoring-system get Ingress -o=yaml\|yq -P '.items[].metadata.name' kubectl -n=zabbix-monitoring-system get Service -o=yaml\|yq -P '.items[].metadata.name' kubectl -n=zabbix-monitoring-system get deploy -o=yaml\|yq -P '.items[].metadata.name' kubectl -n=zabbix-monitoring-system get sts -o=yaml\|yq -P '.items[].metadata.name' kubectl -n=zabbix-monitoring-system get Pod --show-labels kubectl -n=zabbix-monitoring-system get Service
kubectl -n=zabbix-monitoring-system logs -f svc/zabbix-zabbix-webservice kubectl -n=zabbix-monitoring-system logs -f svc/zabbix-zabbix-server kubectl -n=zabbix-monitoring-system logs -f svc/zabbix-postgresql kubectl -n=zabbix-monitoring-system logs -f svc/zabbix-zabbix-web

Helm » Uninstall

helm -n=zabbix-monitoring-system status    zabbix
helm -n=zabbix-monitoring-system get all   zabbix
helm -n=zabbix-monitoring-system uninstall zabbix

kubectl -n=zabbix-monitoring-system delete pvc --all
kubectl                             delete ns  zabbix-monitoring-system
kubectl                             delete pv  zabbix-data-postgresql-0

Playground

Playground
helm -n=zabbix-monitoring-system install zabbix zabbix-community/zabbix --version=7.0.12 helm -n=zabbix-monitoring-system upgrade -i zabbix zabbix-community/zabbix --version=7.0.12 helm show values zabbix-community/zabbix --version=7.0.12\|less
kubectl -n=zabbix-monitoring-system delete all --all kubectl -n=zabbix-monitoring-system delete ing --all kubectl -n=zabbix-monitoring-system delete sts --all	kubectl delete pv zabbix-data-postgresql-0 kubectl -n=zabbix-monitoring-system delete svc --all kubectl -n=zabbix-monitoring-system delete pvc --all
kubectl -n=zabbix-monitoring-system rollout history deploy/zabbix-zabbix-web kubectl -n=zabbix-monitoring-system rollout restart deploy/zabbix-zabbix-web kubectl -n=zabbix-monitoring-system rollout status deploy/zabbix-zabbix-web
kubectl -n=zabbix-monitoring-system exec -it svc/zabbix-postgresql -- psql -p5432 -U shahed_tool_zabbix kubectl -n=zabbix-monitoring-system logs -f svc/zabbix-postgresql kubectl -n=zabbix-monitoring-system logs -f svc/zabbix-zabbix-web
git clone --depth=1 --single-branch --branch 'release/7.4' \ https://git.zabbix.com/scm/zt/kubernetes-helm.git 2>/dev/null \|\| \ git -C kubernetes-helm pull cd ./kubernetes-helm kubectl get namespaces kubectl create namespace monitoring \|\| true

References

References
Helm » External Secrets Operator Helm » Prometheus Stack Helm » Cert Manager Helm » Prometheus Helm » Nexus HA Helm » Grafana Helm » Harbor Helm » Pi-Hole Helm » Zabbix Helm	Helm » Zabbix » Official
K8s » Configure Service Accounts for Pods K8s » Restart Pods With Kubectl K8s » Interactive Pod K8s » Restart Pods Docker » Makefile Kubernetes Minikube Kubectl CURL K8s	K8s » `kubectl rollout` K8s » CSI Hostpath Driver Security » Password K8s » Storage K8s » Ingress K8s » Service K8s » Run MinIO CIDR UFW	Bind9 » Authoritative DNS Server Bind9 » Secondary DNS Server Minikube » Ingress DNS Minikube » Systemd Minikube » MetalLB Minikube » Registry Minikube » Tunnel Localtunnel ZA Proxy

Helm/Zabbix

Contents

Data

Config

Helm » Upgrade

Helm » Ingress

Helm » Scaling

Helm » Debug

Helm » Uninstall

Playground

References

Navigation menu

Helm/Zabbix

Data

Config

Helm » Upgrade

Helm » Ingress

Helm » Scaling

Helm » Debug

Helm » Uninstall

Playground

References

Navigation menu

Search