:warning: :warning: This is a security release. It is recommended to upgrade immediately. :warning: :warning:

Fixes

• Configuration is susceptible to CSRF (GHSA-3mwp-5p5v-j6q3)
• FIX: The activity log now avoids a bug in PHP introduced with version 8.1.25 (#2828)

Icinga Director v1.11 ships a nice new feature, which has been requested by many users: it is now possible to let Notification rules pick User and/or User Groups from Host and Service custom variables.

Behind the scenes, some Icinga DSL assures that Icinga behaves as expected:

The IcingaDB module is now supported. This release also ships a fallback template for Icinga for Windows 1.11 (and Icinga 2.14). To improve security for those relying on default settings, all Host templates are per default rendered to all non-global zones in a redundant way, instead of being rendered to the main global zone.

For those who want to store Secrets in their Host template definitions, this now hinders them from reaching your Agent Endpoints. In addition to this, with this release you now have more control over target Zones for services belonging to Service Sets. Also, some issues related to permissions and restrictions have been addressed.

Various little Import and Sync issues have been addressed, automated Service Template import has been fixed. In addition to some minor Property modifier improvements, they can now be applied in a conditional way. Such filter rules also support CIDR notation. Most prominent use-case: as vSphereDB now ships ALL guest IP addresses, you can pick specific addresses for specific use-cases / host properties based on their network range:

This release now officially supports PHP 8.2, addresses issues when integrating with the IcingaDB web module, and some dark-mode glitches. Search functionality has been improved, Preview Diff shows more details, editing multiple single Services with the very same name has been fixed, and the interactive Startup log renderer now wraps log lines in a nice way:

Performance has greatly been improved for those, who trigger a lot of single API requests, instead of relying on Import/Sync mechanism. Our template usage overview now also summarizes and links objects used in Services belonging to Service Sets:

Commands can now be cloned with their field definitions, and custom variables from set_if flags make now part of the "suggested fields" list.

In addition to major refactoring and technical improvements related to our configuration baskets, it's now also possible to upload additional snapshots for existing baskets:

Speaking of baskets, they have been reworked in a way giving especially Icinga Partners and Plugin authors more control over related objects. As UUIDs are now supported in Baskets too, it is for example possible to rename an object with a new Basket Snapshot.

Breaking Changes

• Module and system dependencies have been raised, Upgrading and Installation documentations contain related details

UI

• FEATURE: allow to clone commands with fields (#2264)
• FEATURE: Data Fields are now sorted in a case-insensitive way (#2358)
• FEATURE: Data Field search is now case-insensitive (#2359)
• FEATURE: Deployment Log now breaks lines (#2677)
• FEATURE: Sort Template trees by name (#2691)
• FEATURE: Branch and Sync diff/preview now shows related host for services (#2736)
• FEATURE: Show more details for assign filter parsing errors (#2667)
• FEATURE: Fields from set_if are now being proposed (#514)
• FEATURE: Template usage table now shows Set members (#2378)
• FIX: do not fail for (some) Service Dependencies (#2669, #1142)
• FIX: Service Sets can now be searched by Service name in branches too (#2738)
• FIX: Template usage table had no header (#2780)
• FIX: Strikethrough for deactivated services in applied Service Set (#2746, #2766)
• FIX: editing multi-selected services with the same name has been fixed (#2798, 2801, #2599)
• FIX: Service Sets table with PostgreSQL (#2799)
• FIX: Dark mode for some clone forms (#2670)

Icinga Configuration

• FEATURE: render fallback template for IfW 1.11 for Icinga < 2.14 (#2776)
• FEATURE: render host templates to all non-global zones per default (#2410)
• FEATURE: notifications can pick user(groups) from host/service vars (#462)
• FIX: render Set Services to individual zones where required (#1589, #2356)
• FIX: special characters like & and | caused trouble in filters (#2667)

Import and Sync

• FEATURE: regular expression based modifier allows explicit NULL on no match (#2705)
• FEATURE: property modifiers can now be applied based on filters (#2756)
• FEATURE: CIDR notation (network ranges) is supported in such filters (#2757)
• FEATURE: trigger group membership resolution on group sync conditionally (#2812)
• FIX: synchronizing Service (and -Set) Templates has been fixed (#2745, #2217)
• FIX: null properties with Sync policy "ignore" are now being ignored (#2657)
• FIX: Import Source shows available columns for Core API Import (#2763)
• FIX: JSON-decode now explicitly fails for non-string inputs (#2810)

Integrations

• FIX: don't throw an error, when editing a Service via IcingaDB link (#2533, #2563)

Configuration Baskets

• FEATURE: it's now possible to upload snapshots for existing baskets (#1952)
• FIX: basket now shows where to expect changes for lists from snapshots (#2791)
• FIX: Icinga DSL parts for Commands are now restored from Baskets (#2811)

REST API

• FIX: Commands give 204 w/o ghost changes for same properties (#2660)

Permissions and Restrictions

• FIX: monitoring-related permission checks have been refactored (#2712)
• FIX: Hostgroup-Filters have not been applied to Overview tables (#2775)
• FIX: error editing Hosts with hostgroup restriction in place (#2164, #2809)

Configuration Branches

• FEATURE: with this release, directorbranches v1.3 supports a "default branch" (#2688)
• FEATURE: users with default branches get warnings in the main branch (#2689)
• FIX: create a branched set, add services, modify them (#2710)

Health Check

• FIX: complaint about overdue jobs was not correct (#2680, #2681)

Internals

• FEATURE: support PHP 8.2 (#2777, #2792)
• FEATURE: Unit Tests are now being triggered as GitHub workflows (no issue)
• FIX: group membership is no longer resolved when not needed (#2048)
• FIX: require Auth object for all object tables (#2808)
• FIX: group membership is no longer resolved when not needed (#2048)

Fixed issues

• You can find issues and feature requests related to this release on our roadmap

This is a minor bugfix release, addressing some Sync-related issues: purge for objects with uppercase characters now works as expected, automated Sync jobs run again, and manually triggered Sync has been fixed on PostgreSQL.

Some UI glitches have been addressed, and a few problems appearing only in certain conditions - related to Configuration Baskets, our Self Service REST API and the Activity Log.

Fixed issues

• You can find issues and feature requests related to this release on our roadmap

UI

• FEATURE: improve Service Set table layout (#2648)
• FIX: modifying single time-period ranges had no effect (#2525)
• FIX: activity log pagination is now on a single line (#2649)

Import and Sync

• FIX: triggering Sync manually produced an error on PostgreSQL (#2636)
• FIX: purge stopped working for objects with uppercase characters (#2627)
• FIX: Notification Apply rule is now possible (wasn't since v1.8) (#2142, #2634)
• FIX: nested property access with intermediate NULL values now gives NULL (#2474, #2584)
• FIX: automated Sync jobs stopped working (#2633)

Configuration Baskets

• FEATURE: more details shown in error messages related to invalid characters (#2646)
• FIX: snapshots for Baskets containing Baskets failed since v1.10 (#2644)

REST API

• FIX: Self Service API returned invalid JSON on PHP 8.1 (#2614)

Internals

• FIX: issue with empty activity log, deprecate outdated method (#2630)