Icinga Director v1.11.4

⚠️ ⚠️ This is a security release. It is recommended to upgrade immediately. ⚠️ ⚠️

Security

• Rest API endpoints accessible to restricted users (GHSA-3233-ggc5-m3qg)

UI

• Fix editing of custom variables for multi-selected objects #2950
• Fix: Check for the existence of service templates to add services #1249

Import and Sync

• Fix erratic job behavior during summer and winter time change (no issue)

Integration

• Fix custom variable renderer for service apply for rules (no issue)
• Fix custom variable renderer for array type data lists #2960

Database Schema

• Fix MySQL 8.4 nonstandard foreign keys deprecation #2885

Fixed Issues

You can find issues related to this release on our roadmap

Icinga Director v1.10.4

⚠️ ⚠️ This is a security release. It is recommended to upgrade immediately. ⚠️ ⚠️

Security

• Rest API endpoints accessible to restricted users (GHSA-3233-ggc5-m3qg)

Import and Sync

• Fix erratic job behavior during summer and winter time change (no issue)

Database Schema

• Fix MySQL 8.4 nonstandard foreign keys deprecation #2885

Icinga Director v1.11.3

UI

• FIX: Property sort tables does not cause CSRF token validation anymore (#2937)
• FIX: No error when clicking modify action link for services belonging to service set in Icinga DB (#2938)
• FIX: No crashing of Host template form when invalid check command is entered (#2941)

Internals

• FIX: Filter can be now removed in import source modifiers (#2939)

Fixed Issues

You can find issues related to this release on our roadmap

Icinga Director v1.11.2

UI

• FIX: No more errors when changing import source modifier priorities (#2270)
• FIX: Choosing HTTP proxy in import source type REST API no longer causes deprecation notice (#2889)
• FIX: Deleting data lists when using PostgreSQL as backend no longer yields errors (#2913)
• FIX: Previewing sync rules with boolean properties now functions without errors (#2905)
• FIX: Basket snapshots correctly display content if present (#2901)
• FIX: Time periods now include Add to basket functionality (#2542)

API

• FIX: API updates for notifications return 304 instead of 200 when unchanged (#2882)

Internals

• FIX: The apply_changes setting from sync jobs restored from a basket is applied properly (#2904)
• FIX: The Get host by name (DNS lookup) modifier handles failed lookups without errors (#2877)

Director Branches

• FIX: Cloning a host retains its services and service sets (#2897)
• FIX: Service sets are now clonable (#2890)

Integrations

• Show Director labels in monitoring module and Icinga DB custom vars section (#2239)

Fixed issues

• You can find issues and feature requests related to this release on our
  roadmap

Icinga Director v1.11.1

⚠️ ⚠️ This is a security release. It is recommended to upgrade immediately. ⚠️ ⚠️

Please also see the release announcement on our blog: https://icinga.com/blog/2024/02/08/security-updates-for-icinga-director/

Security

• Configuration is susceptible to CSRF (GHSA-3mwp-5p5v-j6q3)

UI

• FIX: Data fields are now suggested for service templates without a check command (#2815, #2826)
• FIX: Unsetting a parent host or service of a dependency is now correctly stored (no issue)
• FIX: The activity log now avoids a bug in PHP introduced with version 8.1.25 (#2828)

Internals

• FIX: UserGroup creation failed since v1.10.0 (#2784)
• FIX: Hostgroup names consisting only of digits are now correctly handled (#2821)
• FIX: Improved compatibility with PHP 8.1 and 8.2 (#2819, #2827)
• FIX: The parent host or service of a dependency can now be reliably referenced by custom variable (#2289)
• FIX: Services in service sets are now fully restored once a removed set is restored (#1065)

Integrations

• FIX: Icinga DB integration now works even if the monitoring module is not available (#2635)
• FIX: Conformity with the content security policy introduced with Icinga Web v2.12 (#2845)

Fixed issues

• You can find issues and feature requests related to this release on our roadmap

Icinga Director v1.10.3

⚠️ ⚠️ This is a security release. It is recommended to upgrade immediately. ⚠️ ⚠️

Fixes

• Configuration is susceptible to CSRF (GHSA-3mwp-5p5v-j6q3)
• FIX: The activity log now avoids a bug in PHP introduced with version 8.1.25 (#2828)

Icinga Director v1.9.2

⚠️ ⚠️ This is a security release. It is recommended to upgrade immediately. ⚠️ ⚠️

Fixes

• Configuration is susceptible to CSRF (GHSA-3mwp-5p5v-j6q3)
• FIX: The activity log now avoids a bug in PHP introduced with version 8.1.25 (#2828)

Icinga Director v1.8.2

⚠️ ⚠️ This is a security release. It is recommended to upgrade immediately. ⚠️ ⚠️

Fixes

• Configuration is susceptible to CSRF (GHSA-3mwp-5p5v-j6q3)
• FIX: The activity log now avoids a bug in PHP introduced with version 8.1.25 (#2828)

Icinga Director v1.11.0

Icinga Director v1.11 ships a nice new feature, which has been requested by
many users: it is now possible to let Notification rules pick User and/or User
Groups from Host and Service custom variables.

Behind the scenes, some Icinga DSL assures that Icinga behaves as expected:

The IcingaDB module is now supported. This release also ships a fallback template
for Icinga for Windows 1.11 (and Icinga 2.14). To improve security for those
relying on default settings, all Host templates are per default rendered to all
non-global zones in a redundant way, instead of being rendered to the main global
zone.

For those who want to store Secrets in their Host template definitions, this now
hinders them from reaching your Agent Endpoints. In addition to this, with this
release you now have more control over target Zones for services belonging to
Service Sets. Also, some issues related to permissions and restrictions have been
addressed.

Various little Import and Sync issues have been addressed, automated Service
Template import has been fixed. In addition to some minor Property modifier
improvements, they can now be applied in a conditional way. Such filter rules
also support CIDR notation. Most prominent use-case: as vSphereDB now ships ALL
guest IP addresses, you can pick specific addresses for specific use-cases /
host properties based on their network range:

This release now officially supports PHP 8.2, addresses issues when integrating
with the IcingaDB web module, and some dark-mode glitches. Search functionality
has been improved, Preview Diff shows more details, editing multiple single
Services with the very same name has been fixed, and the interactive Startup log
renderer now wraps log lines in a nice way:

Performance has greatly been improved for those, who trigger a lot of single API
requests, instead of relying on Import/Sync mechanism. Our template usage overview
now also summarizes and links objects used in Services belonging to Service Sets:

Commands can now be cloned with their field definitions, and custom variables
from set_if flags make now part of the "suggested fields" list.

In addition to major refactoring and technical improvements related to our
configuration baskets, it's now also possible to upload additional snapshots for
existing baskets:

Speaking of baskets, they have been reworked in a way giving especially Icinga
Partners and Plugin authors more control over related objects. As UUIDs are now
supported in Baskets too, it is for example possible to rename an object with a
new Basket Snapshot.

Breaking Changes

• Module and system dependencies have been raised, Upgrading
  and Installation documentations contain related details

UI

• FEATURE: allow to clone commands with fields (#2264)
• FEATURE: Data Fields are now sorted in a case-insensitive way (#2358)
• FEATURE: Data Field search is now case-insensitive (#2359)
• FEATURE: Deployment Log now breaks lines (#2677)
• FEATURE: Sort Template trees by name (#2691)
• FEATURE: Branch and Sync diff/preview now shows related host for services (#2736)
• FEATURE: Show more details for assign filter parsing errors (#2667)
• FEATURE: Fields from set_if are now being proposed (#514)
• FEATURE: Template usage table now shows Set members (#2378)
• FIX: do not fail for (some) Service Dependencies (#2669, #1142)
• FIX: Service Sets can now be searched by Service name in branches too (#2738)
• FIX: Template usage table had no header (#2780)
• FIX: Strikethrough for deactivated services in applied Service Set (#2746, #2766)
• FIX: editing multi-selected services with the same name has been fixed (#2798, 2801, #2599)
• FIX: Service Sets table with PostgreSQL (#2799)
• FIX: Dark mode for some clone forms (#2670)

Icinga Configuration

• FEATURE: render fallback template for IfW 1.11 for Icinga < 2.14 (#2776)
• FEATURE: render host templates to all non-global zones per default (#2410)
• FEATURE: notifications can pick user(groups) from host/service vars (#462)
• FIX: render Set Services to individual zones where required (#1589, #2356)
• FIX: special characters like & and | caused trouble in filters (#2667)

Import and Sync

• FEATURE: regular expression based modifier allows explicit NULL on no match (#2705)
• FEATURE: property modifiers can now be applied based on filters (#2756)
• FEATURE: CIDR notation (network ranges) is supported in such filters (#2757)
• FEATURE: trigger group membership resolution on group sync conditionally (#2812)
• FIX: synchronizing Service (and -Set) Templates has been fixed (#2745, #2217)
• FIX: null properties with Sync policy "ignore" are now being ignored (#2657)
• FIX: Import Source shows available columns for Core API Import (#2763)
• FIX: JSON-decode now explicitly fails for non-string inputs (#2810)

Integrations

• FIX: don't throw an error, when editing a Service via IcingaDB link (#2533, #2563)

Configuration Baskets

• FEATURE: it's now possible to upload snapshots for existing baskets (#1952)
• FIX: basket now shows where to expect changes for lists from snapshots (#2791)
• FIX: Icinga DSL parts for Commands are now restored from Baskets (#2811)

REST API

• FIX: Commands give 204 w/o ghost changes for same properties (#2660)

Permissions and Restrictions

• FIX: monitoring-related permission checks have been refactored (#2712)
• FIX: Hostgroup-Filters have not been applied to Overview tables (#2775)
• FIX: error editing Hosts with hostgroup restriction in place (#2164, #2809)

Configuration Branches

• FEATURE: with this release, directorbranches v1.3 supports a "default branch" (#2688)
• FEATURE: users with default branches get warnings in the main branch (#2689)
• FIX: create a branched set, add services, modify them (#2710)

Health Check

• FIX: complaint about overdue jobs was not correct (#2680, #2681)

Internals

• FEATURE: support PHP 8.2 (#2777, #2792)
• FEATURE: Unit Tests are now being triggered as GitHub workflows (no issue)
• FIX: group membership is no longer resolved when not needed (#2048)
• FIX: require Auth object for all object tables (#2808)
• FIX: group membership is no longer resolved when not needed (#2048)

Fixed issues

• You can find issues and feature requests related to this release on our
  roadmap

Icinga Director v1.10.2

This is a minor bugfix release, addressing some Sync-related issues: purge for
objects with uppercase characters now works as expected, automated Sync jobs run
again, and manually triggered Sync has been fixed on PostgreSQL.

Some UI glitches have been addressed, and a few problems appearing only in
certain conditions - related to Configuration Baskets, our Self Service REST API
and the Activity Log.

Fixed issues

• You can find issues and feature requests related to this release on our
  roadmap

UI

• FEATURE: improve Service Set table layout (#2648)
• FIX: modifying single time-period ranges had no effect (#2525)
• FIX: activity log pagination is now on a single line (#2649)

Import and Sync

• FIX: triggering Sync manually produced an error on PostgreSQL (#2636)
• FIX: purge stopped working for objects with uppercase characters (#2627)
• FIX: Notification Apply rule is now possible (wasn't since v1.8) (#2142, #2634)
• FIX: nested property access with intermediate NULL values now gives NULL (#2474, #2584)
• FIX: automated Sync jobs stopped working (#2633)

Configuration Baskets

• FEATURE: more details shown in error messages related to invalid characters (#2646)
• FIX: snapshots for Baskets containing Baskets failed since v1.10 (#2644)

REST API

• FIX: Self Service API returned invalid JSON on PHP 8.1 (#2614)

Internals

• FIX: issue with empty activity log, deprecate outdated method (#2630)