Catch up on the latest product updates, best practices, and expert insights from the Checkmk Conference #12 – Watch the livestream recordings now

Werk #18604: Agent bakery: Changed passwords now always trigger a rebake

Component Setup
Title Agent bakery: Changed passwords now always trigger a rebake
Date Jun 12, 2026
Level Trivial Change
Class Bug Fix
Compatibility Compatible - no manual interaction needed
Checkmk versions & editions
3.0.0b1
Not yet released
Checkmk Pro, Checkmk Ultimate, Checkmk Cloud, Checkmk Ultimate MT
2.5.0p8
Not yet released
Checkmk Pro, Checkmk Ultimate, Checkmk Cloud, Checkmk Ultimate MT
2.4.0p33 Checkmk Pro, Checkmk Ultimate, Checkmk Cloud, Checkmk Ultimate MT

Previously, changing a password in the password store did not always trigger a rebake of agents whose configuration referenced that password. Depending on the APIs used, the computed agent configuration only contained the reference to the password, not the password itself, so the configuration hash remained unchanged and the affected agents kept the old password until an unrelated configuration change happened to trigger a rebake.

The configuration hash now also reflects the content of the password store. Changing a referenced password therefore results in a new configuration hash, and the affected agents are baked anew as expected.

Note: Updating to this version changes the computed configuration hash for hosts whose configuration contains passwords, so these agents will be baked anew once after the update.

To the list of all Werks