Icinga Director v1.11.1

⚠️ ⚠️ This is a security release. It is recommended to upgrade immediately. ⚠️ ⚠️

Please also see the release announcement on our blog: https://icinga.com/blog/2024/02/08/security-updates-for-icinga-director/

Security

• Configuration is susceptible to CSRF (GHSA-3mwp-5p5v-j6q3)

UI

• FIX: Data fields are now suggested for service templates without a check command (#2815, #2826)
• FIX: Unsetting a parent host or service of a dependency is now correctly stored (no issue)
• FIX: The activity log now avoids a bug in PHP introduced with version 8.1.25 (#2828)

Internals

• FIX: UserGroup creation failed since v1.10.0 (#2784)
• FIX: Hostgroup names consisting only of digits are now correctly handled (#2821)
• FIX: Improved compatibility with PHP 8.1 and 8.2 (#2819, #2827)
• FIX: The parent host or service of a dependency can now be reliably referenced by custom variable (#2289)
• FIX: Services in service sets are now fully restored once a removed set is restored (#1065)

Integrations

• FIX: Icinga DB integration now works even if the monitoring module is not available (#2635)
• FIX: Conformity with the content security policy introduced with Icinga Web v2.12 (#2845)

Fixed issues

• You can find issues and feature requests related to this release on our roadmap

Icinga Director v1.10.3

⚠️ ⚠️ This is a security release. It is recommended to upgrade immediately. ⚠️ ⚠️

Fixes

• Configuration is susceptible to CSRF (GHSA-3mwp-5p5v-j6q3)
• FIX: The activity log now avoids a bug in PHP introduced with version 8.1.25 (#2828)

Icinga Director v1.9.2

⚠️ ⚠️ This is a security release. It is recommended to upgrade immediately. ⚠️ ⚠️

Fixes

• Configuration is susceptible to CSRF (GHSA-3mwp-5p5v-j6q3)
• FIX: The activity log now avoids a bug in PHP introduced with version 8.1.25 (#2828)

Icinga Director v1.8.2

⚠️ ⚠️ This is a security release. It is recommended to upgrade immediately. ⚠️ ⚠️

Fixes

• Configuration is susceptible to CSRF (GHSA-3mwp-5p5v-j6q3)
• FIX: The activity log now avoids a bug in PHP introduced with version 8.1.25 (#2828)

Icinga Director v1.11.0

Icinga Director v1.11 ships a nice new feature, which has been requested by
many users: it is now possible to let Notification rules pick User and/or User
Groups from Host and Service custom variables.

Behind the scenes, some Icinga DSL assures that Icinga behaves as expected:

The IcingaDB module is now supported. This release also ships a fallback template
for Icinga for Windows 1.11 (and Icinga 2.14). To improve security for those
relying on default settings, all Host templates are per default rendered to all
non-global zones in a redundant way, instead of being rendered to the main global
zone.

For those who want to store Secrets in their Host template definitions, this now
hinders them from reaching your Agent Endpoints. In addition to this, with this
release you now have more control over target Zones for services belonging to
Service Sets. Also, some issues related to permissions and restrictions have been
addressed.

Various little Import and Sync issues have been addressed, automated Service
Template import has been fixed. In addition to some minor Property modifier
improvements, they can now be applied in a conditional way. Such filter rules
also support CIDR notation. Most prominent use-case: as vSphereDB now ships ALL
guest IP addresses, you can pick specific addresses for specific use-cases /
host properties based on their network range:

This release now officially supports PHP 8.2, addresses issues when integrating
with the IcingaDB web module, and some dark-mode glitches. Search functionality
has been improved, Preview Diff shows more details, editing multiple single
Services with the very same name has been fixed, and the interactive Startup log
renderer now wraps log lines in a nice way:

Performance has greatly been improved for those, who trigger a lot of single API
requests, instead of relying on Import/Sync mechanism. Our template usage overview
now also summarizes and links objects used in Services belonging to Service Sets:

Commands can now be cloned with their field definitions, and custom variables
from set_if flags make now part of the "suggested fields" list.

In addition to major refactoring and technical improvements related to our
configuration baskets, it's now also possible to upload additional snapshots for
existing baskets:

Speaking of baskets, they have been reworked in a way giving especially Icinga
Partners and Plugin authors more control over related objects. As UUIDs are now
supported in Baskets too, it is for example possible to rename an object with a
new Basket Snapshot.

Breaking Changes

• Module and system dependencies have been raised, Upgrading
  and Installation documentations contain related details

UI

• FEATURE: allow to clone commands with fields (#2264)
• FEATURE: Data Fields are now sorted in a case-insensitive way (#2358)
• FEATURE: Data Field search is now case-insensitive (#2359)
• FEATURE: Deployment Log now breaks lines (#2677)
• FEATURE: Sort Template trees by name (#2691)
• FEATURE: Branch and Sync diff/preview now shows related host for services (#2736)
• FEATURE: Show more details for assign filter parsing errors (#2667)
• FEATURE: Fields from set_if are now being proposed (#514)
• FEATURE: Template usage table now shows Set members (#2378)
• FIX: do not fail for (some) Service Dependencies (#2669, #1142)
• FIX: Service Sets can now be searched by Service name in branches too (#2738)
• FIX: Template usage table had no header (#2780)
• FIX: Strikethrough for deactivated services in applied Service Set (#2746, #2766)
• FIX: editing multi-selected services with the same name has been fixed (#2798, 2801, #2599)
• FIX: Service Sets table with PostgreSQL (#2799)
• FIX: Dark mode for some clone forms (#2670)

Icinga Configuration

• FEATURE: render fallback template for IfW 1.11 for Icinga < 2.14 (#2776)
• FEATURE: render host templates to all non-global zones per default (#2410)
• FEATURE: notifications can pick user(groups) from host/service vars (#462)
• FIX: render Set Services to individual zones where required (#1589, #2356)
• FIX: special characters like & and | caused trouble in filters (#2667)

Import and Sync

• FEATURE: regular expression based modifier allows explicit NULL on no match (#2705)
• FEATURE: property modifiers can now be applied based on filters (#2756)
• FEATURE: CIDR notation (network ranges) is supported in such filters (#2757)
• FEATURE: trigger group membership resolution on group sync conditionally (#2812)
• FIX: synchronizing Service (and -Set) Templates has been fixed (#2745, #2217)
• FIX: null properties with Sync policy "ignore" are now being ignored (#2657)
• FIX: Import Source shows available columns for Core API Import (#2763)
• FIX: JSON-decode now explicitly fails for non-string inputs (#2810)

Integrations

• FIX: don't throw an error, when editing a Service via IcingaDB link (#2533, #2563)

Configuration Baskets

• FEATURE: it's now possible to upload snapshots for existing baskets (#1952)
• FIX: basket now shows where to expect changes for lists from snapshots (#2791)
• FIX: Icinga DSL parts for Commands are now restored from Baskets (#2811)

REST API

• FIX: Commands give 204 w/o ghost changes for same properties (#2660)

Permissions and Restrictions

• FIX: monitoring-related permission checks have been refactored (#2712)
• FIX: Hostgroup-Filters have not been applied to Overview tables (#2775)
• FIX: error editing Hosts with hostgroup restriction in place (#2164, #2809)

Configuration Branches

• FEATURE: with this release, directorbranches v1.3 supports a "default branch" (#2688)
• FEATURE: users with default branches get warnings in the main branch (#2689)
• FIX: create a branched set, add services, modify them (#2710)

Health Check

• FIX: complaint about overdue jobs was not correct (#2680, #2681)

Internals

• FEATURE: support PHP 8.2 (#2777, #2792)
• FEATURE: Unit Tests are now being triggered as GitHub workflows (no issue)
• FIX: group membership is no longer resolved when not needed (#2048)
• FIX: require Auth object for all object tables (#2808)
• FIX: group membership is no longer resolved when not needed (#2048)

Fixed issues

• You can find issues and feature requests related to this release on our
  roadmap

Icinga Director v1.10.2

This is a minor bugfix release, addressing some Sync-related issues: purge for
objects with uppercase characters now works as expected, automated Sync jobs run
again, and manually triggered Sync has been fixed on PostgreSQL.

Some UI glitches have been addressed, and a few problems appearing only in
certain conditions - related to Configuration Baskets, our Self Service REST API
and the Activity Log.

Fixed issues

• You can find issues and feature requests related to this release on our
  roadmap

UI

• FEATURE: improve Service Set table layout (#2648)
• FIX: modifying single time-period ranges had no effect (#2525)
• FIX: activity log pagination is now on a single line (#2649)

Import and Sync

• FIX: triggering Sync manually produced an error on PostgreSQL (#2636)
• FIX: purge stopped working for objects with uppercase characters (#2627)
• FIX: Notification Apply rule is now possible (wasn't since v1.8) (#2142, #2634)
• FIX: nested property access with intermediate NULL values now gives NULL (#2474, #2584)
• FIX: automated Sync jobs stopped working (#2633)

Configuration Baskets

• FEATURE: more details shown in error messages related to invalid characters (#2646)
• FIX: snapshots for Baskets containing Baskets failed since v1.10 (#2644)

REST API

• FIX: Self Service API returned invalid JSON on PHP 8.1 (#2614)

Internals

• FIX: issue with empty activity log, deprecate outdated method (#2630)

Icinga Director v1.10.1

This is a minor bugfix release, addressing issues with modifying services via
the monitoring module, Sync problems and a copy and paste error in the DB schema,
which caused problems for fresh installations since v1.10.

Please note that a long-standing issue for our Sync Rules has been fixed: with
"merge" policy, NULL properties have been ignored for quite some time. This has
now been fixed. If in doubt, please preview your Sync Rules to make sure,
that they behave as expected.

This release brings a small schema migration, cleaning up invalid Sync history
entries. If in doubt, please create a database backup first.

Fixed issues

• You can find issues and feature requests related to this release on our
  roadmap

Import and Sync

• FIX: sync lower-cased all object names since v1.10 (#2608)
• FIX: sync for Datalist entries has been fixed (#2618)
• FIX: Sync now applied NULL values with merge policy (#2623)
• FIX: Sync created Sync History entries for every preview (#2632)
• FIX: "Purge" stopped working for Sync (#2627)

UI

• FIX: "Modify" Services via the monitoring module (#2615, #2619)

Configuration Baskets

• FIX: restore Import/Sync/Job when exported with v1.10 (#2620)
• FIX: restoring Job with ImportSource or SyncRule (#2528)

Database Schema

• FIX: new DB schema failed due to duplicate line in SQL statement (#2609)

Icinga Director v1.10.0

An advanced Sync Preview is one of the features I'd love to highlight in v1.10.0. We have been able to leverage our Configuration Branch support as an underlying technology for this:

In case you have lots of changes, you can browse all of them - formerly this hasn't been possible. Also, this now allows you to inspect every single upcoming change before applying the Sync:

This has been possible based on the code we implemented to support the Director Branches module. In case you never heard about it, here you can find the related announcement.

This release also contains a lot of related fixes and new Features. It is now possible to deal with Service Sets in Configuration Branches, the commit remark can be proposed with a merge request, and the Activity Log shows not only who has merged the change, but also the original author.

Powerful new features have been implemented for those who love to orchestrate the Director from the outside. Please check our
CLI and REST API documentation for related details, especially look for --with-services (withServices)
and --allow-overrides (allowOverrides).

CLI now supports JSON on STDIN, REST API can request detailed stack traces in case an error occurs.

Breaking Changes

• Module and system dependencies have been raised, Upgrading
  and Installation documentations contain related details

Fixed issues

• You can find issues and feature requests related to this release on our
  roadmap

User Interface

• FIX: links from Service Previews (Icinga DSL) to templates (#2554)
• FIX: daemon health visualization on systems w/o /proc filesystem (#2544)

Import and Sync

• FIX: Sync now compares keys in a case-insensitive way (#2598, #2419, #1140)
• FIX: Sync now preserves Self Service API keys in override mode (#2590)
• FEATURE: clone a row for nested Dictionary/Hash entries (#2555)
• FEATURE: Sync in "override" mode now preserves Self Service API keys (#2590)
• FEATURE: split a row in multiple ones, based on a Dictionary (#2555)
• FEATURE: it's now possible to sync to a configuration branch (#2552)
• FEATURE: Sync preview now allows to navigate single changes (#2607)

Configuration Baskets

• BREAKING: configuration baskets no longer contain originalId (#2549)
• FEATURE: exporting/snapshot-logic has been centralized (#2549)

Configuration Branches

• FIX: PostgreSQL now allows for the same object in multiple branches (#2605)
• FEATURE: merge comments can now be proposed (#2604)
• FEATURE: activity log now shows author and committer (#2606)

Integrations

• FIX: Monitoring Hooks are no longer provided with disable Director UI (#2597)
• FIX: cleanup for IcingaDbCube (#2484)

Kickstart

• FIX: breaking change in ipl/html, affected setups with ro INI files (#2595)
• FEATURE: better explanation for missing DSL bodies fetched from core (#2557)

REST API

• FIX: addressing service templates by name has been fixed (#2487)
• FIX: allow for object_name in body only (#2576)
• FIX: notice on PHP 8.1 (#2575)
• FEATURE: Stack traces can now be requested (#2570)
• FEATURE: Hosts can now be exported with their services (#2568)
• FEATURE: "magic" variable overrides are now supported (#2569)

CLI

• FIX: config deploy doesn't try to wait in case of no deployment (#2522)
• FIX: renderer now shows full service sets (#2550)
• FEATURE: improved wording for deployment error messages (#2523)
• FEATURE: JSON can now be shipped via STDIN (#1570)
• FEATURE: improved readability for some error messages (#2567)
• FEATURE: allows showing hosts with their services (#2565)
• FEATURE: allow showing resolved Host services (#2571)
• FEATURE: "magic" variable overrides are now supported (#2560)
• FEATURE: error messages are now friendlier (#2567)
• FEATURE: STDIN support for --json is now available (#1570)

Activity Log

• FIX: deleted objects might have been missing related properties (#2559)

Deployment Log

• FEATURE: visualization performance has been improved (#2551)

Internals

• FEATURE: there is now a centralized Exporter implementation (#2549)

Icinga Director v1.9.1

Fixed issues

• You can find issues and feature requests related to this release on our
  roadmap

User Interface

• FIX: DataList-backed fields failed to validate (#2475)
• FIX: No Host list limit when adding a single service globally (#2481)
• FIX: Cleared activity log caused exception (#2505, #2506)
• FEATURE: Icinga Web 2.10 dark mode support (#2433)

Configuration Baskets

• FIX: failed to export Baskets with Service Sets (#2488)
• FIX: Sync Rule restore from snapshot on name change (#2467)
• FIX: Do not export UUIDs with Service Sets (#2488)

CLI

• FEATURE: Allow to define deployment grace period on CLI (#2499)

Integrations

• FIX: Cleanup IcingaDbCubeLinks (#2484)

DB Schema

• FIX: applying DB Schema migrations failed on PostgreSQL (#2482)

Icinga Director v1.9.0

Breaking Changes

• Module dependencies have been raised, Upgrading and
  Installation documentations contain related details

Fixed issues

• You can find issues and feature requests related to this release on our
  roadmap

Import and Sync

• FIX: string property modifiers now preserve NULL values (#2371)
• FIX: "to int" property modifiers now fails for non-string values (#2372)
• FEATURE: introduce 'disable' as your purge action on Sync (#2285)
• FEATURE: there is now a simple "group by" Property Modifier (#2317)

Configuration Baskets

• FIX: Notification Apply Rules have not been exported (#2335)
• FIX: Restore now supports the set_if_format switch (#2291)
• FEATURE: it's now possible to purge objects of specific types (#2201)
• FEATURE: exporting Users, User-Templates and -Groups is now possible (#2328)
• FEATURE: Data Field Categories are now supported (#2256)

Permissions and Restrictions

• FEATURE: allow using monitoring module permissions (#2304)
• FEATURE: it's now possible to grant (global) access to scheduled downtimes (#2086)

Configuration / Templating

• FEATURE: offering choices based on a specific imports is now possible (#1178)

User Interface

• FIX: allow switching DB config while connection is failing (#2300)
• FIX: Links to duplicate services in Sets didn't check for deactivation (#2323)
• FIX: SQL error for Data Fields table on PostgreSQL (#2310)
• FIX: SQL error when searching for Data Field Categories (#2367)
• FIX: Icon used for Notifications has been changed (#2455)
• FEATURE: show "deprecated" flag on object attribute inspection (#2312)
• FEATURE: Service Template for single Host services provides auto-completion (#1974)

CLI

• FEATURE: config deployment now allows to --wait for an Icinga restart (#2314)

Activity log

• FEATURE: Activity log now allows for remarks (addon module required, #2471)

Documentation

• FIX: configure the daemon with main setup instructions (#2296, #2320)

Internals

• FEATURE: PHP 8.1 is now supported, works once available in Icinga Web (#2435)
• FEATURE: Config Branches have been implemented, leveraged via Hook/Addon (#2376)
• FEATURE: UUIDs have been implemented for most Icinga objects, more to come
• FEATURE: new Deployment Hook, triggers onCollect(ing) Icinga startup info (#2315)