Icinga Director v1.11.3

UI

• FIX: Property sort tables does not cause CSRF token validation anymore (#2937)
• FIX: No error when clicking modify action link for services belonging to service set in Icinga DB (#2938)
• FIX: No crashing of Host template form when invalid check command is entered (#2941)

Internals

• FIX: Filter can be now removed in import source modifiers (#2939)

Fixed Issues

You can find issues related to this release on our roadmap

Icinga Director v1.11.2

UI

• FIX: No more errors when changing import source modifier priorities (#2270)
• FIX: Choosing HTTP proxy in import source type REST API no longer causes deprecation notice (#2889)
• FIX: Deleting data lists when using PostgreSQL as backend no longer yields errors (#2913)
• FIX: Previewing sync rules with boolean properties now functions without errors (#2905)
• FIX: Basket snapshots correctly display content if present (#2901)
• FIX: Time periods now include Add to basket functionality (#2542)

API

• FIX: API updates for notifications return 304 instead of 200 when unchanged (#2882)

Internals

• FIX: The apply_changes setting from sync jobs restored from a basket is applied properly (#2904)
• FIX: The Get host by name (DNS lookup) modifier handles failed lookups without errors (#2877)

Director Branches

• FIX: Cloning a host retains its services and service sets (#2897)
• FIX: Service sets are now clonable (#2890)

Integrations

• Show Director labels in monitoring module and Icinga DB custom vars section (#2239)

Fixed issues

• You can find issues and feature requests related to this release on our
  roadmap

Icinga Director v1.11.1

⚠️ ⚠️ This is a security release. It is recommended to upgrade immediately. ⚠️ ⚠️

Please also see the release announcement on our blog: https://icinga.com/blog/2024/02/08/security-updates-for-icinga-director/

Security

• Configuration is susceptible to CSRF (GHSA-3mwp-5p5v-j6q3)

UI

• FIX: Data fields are now suggested for service templates without a check command (#2815, #2826)
• FIX: Unsetting a parent host or service of a dependency is now correctly stored (no issue)
• FIX: The activity log now avoids a bug in PHP introduced with version 8.1.25 (#2828)

Internals

• FIX: UserGroup creation failed since v1.10.0 (#2784)
• FIX: Hostgroup names consisting only of digits are now correctly handled (#2821)
• FIX: Improved compatibility with PHP 8.1 and 8.2 (#2819, #2827)
• FIX: The parent host or service of a dependency can now be reliably referenced by custom variable (#2289)
• FIX: Services in service sets are now fully restored once a removed set is restored (#1065)

Integrations

• FIX: Icinga DB integration now works even if the monitoring module is not available (#2635)
• FIX: Conformity with the content security policy introduced with Icinga Web v2.12 (#2845)

Fixed issues

• You can find issues and feature requests related to this release on our roadmap

Icinga Director v1.10.3

⚠️ ⚠️ This is a security release. It is recommended to upgrade immediately. ⚠️ ⚠️

Fixes

• Configuration is susceptible to CSRF (GHSA-3mwp-5p5v-j6q3)
• FIX: The activity log now avoids a bug in PHP introduced with version 8.1.25 (#2828)

Icinga Director v1.9.2

⚠️ ⚠️ This is a security release. It is recommended to upgrade immediately. ⚠️ ⚠️

Fixes

• Configuration is susceptible to CSRF (GHSA-3mwp-5p5v-j6q3)
• FIX: The activity log now avoids a bug in PHP introduced with version 8.1.25 (#2828)

Icinga Director v1.8.2

⚠️ ⚠️ This is a security release. It is recommended to upgrade immediately. ⚠️ ⚠️

Fixes

• Configuration is susceptible to CSRF (GHSA-3mwp-5p5v-j6q3)
• FIX: The activity log now avoids a bug in PHP introduced with version 8.1.25 (#2828)

Icinga Director v1.11.0

Icinga Director v1.11 ships a nice new feature, which has been requested by
many users: it is now possible to let Notification rules pick User and/or User
Groups from Host and Service custom variables.

Behind the scenes, some Icinga DSL assures that Icinga behaves as expected:

The IcingaDB module is now supported. This release also ships a fallback template
for Icinga for Windows 1.11 (and Icinga 2.14). To improve security for those
relying on default settings, all Host templates are per default rendered to all
non-global zones in a redundant way, instead of being rendered to the main global
zone.

For those who want to store Secrets in their Host template definitions, this now
hinders them from reaching your Agent Endpoints. In addition to this, with this
release you now have more control over target Zones for services belonging to
Service Sets. Also, some issues related to permissions and restrictions have been
addressed.

Various little Import and Sync issues have been addressed, automated Service
Template import has been fixed. In addition to some minor Property modifier
improvements, they can now be applied in a conditional way. Such filter rules
also support CIDR notation. Most prominent use-case: as vSphereDB now ships ALL
guest IP addresses, you can pick specific addresses for specific use-cases /
host properties based on their network range:

This release now officially supports PHP 8.2, addresses issues when integrating
with the IcingaDB web module, and some dark-mode glitches. Search functionality
has been improved, Preview Diff shows more details, editing multiple single
Services with the very same name has been fixed, and the interactive Startup log
renderer now wraps log lines in a nice way:

Performance has greatly been improved for those, who trigger a lot of single API
requests, instead of relying on Import/Sync mechanism. Our template usage overview
now also summarizes and links objects used in Services belonging to Service Sets:

Commands can now be cloned with their field definitions, and custom variables
from set_if flags make now part of the "suggested fields" list.

In addition to major refactoring and technical improvements related to our
configuration baskets, it's now also possible to upload additional snapshots for
existing baskets:

Speaking of baskets, they have been reworked in a way giving especially Icinga
Partners and Plugin authors more control over related objects. As UUIDs are now
supported in Baskets too, it is for example possible to rename an object with a
new Basket Snapshot.

Breaking Changes

• Module and system dependencies have been raised, Upgrading
  and Installation documentations contain related details

UI

• FEATURE: allow to clone commands with fields (#2264)
• FEATURE: Data Fields are now sorted in a case-insensitive way (#2358)
• FEATURE: Data Field search is now case-insensitive (#2359)
• FEATURE: Deployment Log now breaks lines (#2677)
• FEATURE: Sort Template trees by name (#2691)
• FEATURE: Branch and Sync diff/preview now shows related host for services (#2736)
• FEATURE: Show more details for assign filter parsing errors (#2667)
• FEATURE: Fields from set_if are now being proposed (#514)
• FEATURE: Template usage table now shows Set members (#2378)
• FIX: do not fail for (some) Service Dependencies (#2669, #1142)
• FIX: Service Sets can now be searched by Service name in branches too (#2738)
• FIX: Template usage table had no header (#2780)
• FIX: Strikethrough for deactivated services in applied Service Set (#2746, #2766)
• FIX: editing multi-selected services with the same name has been fixed (#2798, 2801, #2599)
• FIX: Service Sets table with PostgreSQL (#2799)
• FIX: Dark mode for some clone forms (#2670)

Icinga Configuration

• FEATURE: render fallback template for IfW 1.11 for Icinga < 2.14 (#2776)
• FEATURE: render host templates to all non-global zones per default (#2410)
• FEATURE: notifications can pick user(groups) from host/service vars (#462)
• FIX: render Set Services to individual zones where required (#1589, #2356)
• FIX: special characters like & and | caused trouble in filters (#2667)

Import and Sync

• FEATURE: regular expression based modifier allows explicit NULL on no match (#2705)
• FEATURE: property modifiers can now be applied based on filters (#2756)
• FEATURE: CIDR notation (network ranges) is supported in such filters (#2757)
• FEATURE: trigger group membership resolution on group sync conditionally (#2812)
• FIX: synchronizing Service (and -Set) Templates has been fixed (#2745, #2217)
• FIX: null properties with Sync policy "ignore" are now being ignored (#2657)
• FIX: Import Source shows available columns for Core API Import (#2763)
• FIX: JSON-decode now explicitly fails for non-string inputs (#2810)

Integrations

• FIX: don't throw an error, when editing a Service via IcingaDB link (#2533, #2563)

Configuration Baskets

• FEATURE: it's now possible to upload snapshots for existing baskets (#1952)
• FIX: basket now shows where to expect changes for lists from snapshots (#2791)
• FIX: Icinga DSL parts for Commands are now restored from Baskets (#2811)

REST API

• FIX: Commands give 204 w/o ghost changes for same properties (#2660)

Permissions and Restrictions

• FIX: monitoring-related permission checks have been refactored (#2712)
• FIX: Hostgroup-Filters have not been applied to Overview tables (#2775)
• FIX: error editing Hosts with hostgroup restriction in place (#2164, #2809)

Configuration Branches

• FEATURE: with this release, directorbranches v1.3 supports a "default branch" (#2688)
• FEATURE: users with default branches get warnings in the main branch (#2689)
• FIX: create a branched set, add services, modify them (#2710)

Health Check

• FIX: complaint about overdue jobs was not correct (#2680, #2681)

Internals

• FEATURE: support PHP 8.2 (#2777, #2792)
• FEATURE: Unit Tests are now being triggered as GitHub workflows (no issue)
• FIX: group membership is no longer resolved when not needed (#2048)
• FIX: require Auth object for all object tables (#2808)
• FIX: group membership is no longer resolved when not needed (#2048)

Fixed issues

• You can find issues and feature requests related to this release on our
  roadmap

Icinga Director v1.10.2

This is a minor bugfix release, addressing some Sync-related issues: purge for
objects with uppercase characters now works as expected, automated Sync jobs run
again, and manually triggered Sync has been fixed on PostgreSQL.

Some UI glitches have been addressed, and a few problems appearing only in
certain conditions - related to Configuration Baskets, our Self Service REST API
and the Activity Log.

Fixed issues

• You can find issues and feature requests related to this release on our
  roadmap

UI

• FEATURE: improve Service Set table layout (#2648)
• FIX: modifying single time-period ranges had no effect (#2525)
• FIX: activity log pagination is now on a single line (#2649)

Import and Sync

• FIX: triggering Sync manually produced an error on PostgreSQL (#2636)
• FIX: purge stopped working for objects with uppercase characters (#2627)
• FIX: Notification Apply rule is now possible (wasn't since v1.8) (#2142, #2634)
• FIX: nested property access with intermediate NULL values now gives NULL (#2474, #2584)
• FIX: automated Sync jobs stopped working (#2633)

Configuration Baskets

• FEATURE: more details shown in error messages related to invalid characters (#2646)
• FIX: snapshots for Baskets containing Baskets failed since v1.10 (#2644)

REST API

• FIX: Self Service API returned invalid JSON on PHP 8.1 (#2614)

Internals

• FIX: issue with empty activity log, deprecate outdated method (#2630)

Icinga Director v1.10.1

This is a minor bugfix release, addressing issues with modifying services via
the monitoring module, Sync problems and a copy and paste error in the DB schema,
which caused problems for fresh installations since v1.10.

Please note that a long-standing issue for our Sync Rules has been fixed: with
"merge" policy, NULL properties have been ignored for quite some time. This has
now been fixed. If in doubt, please preview your Sync Rules to make sure,
that they behave as expected.

This release brings a small schema migration, cleaning up invalid Sync history
entries. If in doubt, please create a database backup first.

Fixed issues

• You can find issues and feature requests related to this release on our
  roadmap

Import and Sync

• FIX: sync lower-cased all object names since v1.10 (#2608)
• FIX: sync for Datalist entries has been fixed (#2618)
• FIX: Sync now applied NULL values with merge policy (#2623)
• FIX: Sync created Sync History entries for every preview (#2632)
• FIX: "Purge" stopped working for Sync (#2627)

UI

• FIX: "Modify" Services via the monitoring module (#2615, #2619)

Configuration Baskets

• FIX: restore Import/Sync/Job when exported with v1.10 (#2620)
• FIX: restoring Job with ImportSource or SyncRule (#2528)

Database Schema

• FIX: new DB schema failed due to duplicate line in SQL statement (#2609)

Icinga Director v1.10.0

An advanced Sync Preview is one of the features I'd love to highlight in v1.10.0. We have been able to leverage our Configuration Branch support as an underlying technology for this:

In case you have lots of changes, you can browse all of them - formerly this hasn't been possible. Also, this now allows you to inspect every single upcoming change before applying the Sync:

This has been possible based on the code we implemented to support the Director Branches module. In case you never heard about it, here you can find the related announcement.

This release also contains a lot of related fixes and new Features. It is now possible to deal with Service Sets in Configuration Branches, the commit remark can be proposed with a merge request, and the Activity Log shows not only who has merged the change, but also the original author.

Powerful new features have been implemented for those who love to orchestrate the Director from the outside. Please check our
CLI and REST API documentation for related details, especially look for --with-services (withServices)
and --allow-overrides (allowOverrides).

CLI now supports JSON on STDIN, REST API can request detailed stack traces in case an error occurs.

Breaking Changes

• Module and system dependencies have been raised, Upgrading
  and Installation documentations contain related details

Fixed issues

• You can find issues and feature requests related to this release on our
  roadmap

User Interface

• FIX: links from Service Previews (Icinga DSL) to templates (#2554)
• FIX: daemon health visualization on systems w/o /proc filesystem (#2544)

Import and Sync

• FIX: Sync now compares keys in a case-insensitive way (#2598, #2419, #1140)
• FIX: Sync now preserves Self Service API keys in override mode (#2590)
• FEATURE: clone a row for nested Dictionary/Hash entries (#2555)
• FEATURE: Sync in "override" mode now preserves Self Service API keys (#2590)
• FEATURE: split a row in multiple ones, based on a Dictionary (#2555)
• FEATURE: it's now possible to sync to a configuration branch (#2552)
• FEATURE: Sync preview now allows to navigate single changes (#2607)

Configuration Baskets

• BREAKING: configuration baskets no longer contain originalId (#2549)
• FEATURE: exporting/snapshot-logic has been centralized (#2549)

Configuration Branches

• FIX: PostgreSQL now allows for the same object in multiple branches (#2605)
• FEATURE: merge comments can now be proposed (#2604)
• FEATURE: activity log now shows author and committer (#2606)

Integrations

• FIX: Monitoring Hooks are no longer provided with disable Director UI (#2597)
• FIX: cleanup for IcingaDbCube (#2484)

Kickstart

• FIX: breaking change in ipl/html, affected setups with ro INI files (#2595)
• FEATURE: better explanation for missing DSL bodies fetched from core (#2557)

REST API

• FIX: addressing service templates by name has been fixed (#2487)
• FIX: allow for object_name in body only (#2576)
• FIX: notice on PHP 8.1 (#2575)
• FEATURE: Stack traces can now be requested (#2570)
• FEATURE: Hosts can now be exported with their services (#2568)
• FEATURE: "magic" variable overrides are now supported (#2569)

CLI

• FIX: config deploy doesn't try to wait in case of no deployment (#2522)
• FIX: renderer now shows full service sets (#2550)
• FEATURE: improved wording for deployment error messages (#2523)
• FEATURE: JSON can now be shipped via STDIN (#1570)
• FEATURE: improved readability for some error messages (#2567)
• FEATURE: allows showing hosts with their services (#2565)
• FEATURE: allow showing resolved Host services (#2571)
• FEATURE: "magic" variable overrides are now supported (#2560)
• FEATURE: error messages are now friendlier (#2567)
• FEATURE: STDIN support for --json is now available (#1570)

Activity Log

• FIX: deleted objects might have been missing related properties (#2559)

Deployment Log

• FEATURE: visualization performance has been improved (#2551)

Internals

• FEATURE: there is now a centralized Exporter implementation (#2549)