v2.11.5

Issues and PRs
Blogpost

Version 2.11.5 fixes file system race conditions
in the config update process occurring in large HA environments
and improves the cluster connection liveness mechanisms.

Bugfixes

• Make the config update process mutually exclusive (Prevents file system race conditions) #8093
• Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094
• Send JsonRpcConnection heartbeat every 20s instead of 10s #8103
• Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097

v2.11.4

Issues and PRs
Blogpost

Version 2.11.4 fixes a crash during a heartbeat timeout with clients not yet signed. It also resolves
an issue with endpoints not reconnecting after a reload/deploy, which caused a lot of UNKNOWN states.

Bugfixes

• Cluster
  • Fix segfault during heartbeat timeout with clients not yet signed #7997
  • Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043
• Setup
  • Fix exception on trusted cert not readable during node setup #8044
  • prepare-dirs: Only set permissions during directory creation #8046
• DSL
  • Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054

v2.12.0-rc1

Changes

Issue and PRs

Notes

Release blogpost: https://icinga.com/2020/03/16/releasing-icinga-db-v1-0-rc1/
Upgrading docs: https://icinga.com/docs/icinga2/snapshot/doc/16-upgrading-icinga-2/#upgrading-to-v212

Thanks to all contributors: Ant1x, azthec, baurmatt, bootc, Foxeronie, ggzengel, islander, joni1993, KAMI911, mcktr, MichalMMac, sebastic, sthen, unki, vigiroux, wopfel,

Breaking changes

• Refuse acknowledging an already acknowledged checkable #7695
• Config lexer: complain on EOF in heredocs, i.e. {{{abc<EOF> #7541

Enhancements

• Core
  • Implement new database backend: Icinga DB #7571
• API
  • Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534
  • Improve error message for POST queries #7681
  • /v1/actions/remove-comment: let users specify themselves #7646
  • /v1/actions/remove-downtime: let users specify themselves #7645
  • /v1/config/stages: Add 'activate' parameter #7535
• CLI
  • Add pki verify command for better TLS certificate troubleshooting #7843
  • Add OpenSSL version to 'Build' section in --version #7833
  • Improve experience with 'Node Setup for Agents/Satellite' #7835
• DSL
  • Add get_template() and get_templates() #7632
  • MacroProcessor::ResolveArguments(): skip null argument values #7567
  • Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538
  • Introduce ternary operator (x ? y : z) #7442
  • LegacyTimePeriod: support specifying seconds #7439
  • Add support for Lambda Closures (() use(x) => x and () use(x) => { return x }) #7417
• ITL
  • Add notemp parameter to oracle health #7748
  • Add extended checks options to snmp-interface command template #7602
  • Add file age check for Windows command definition #7540
• Docs
  • Development: Update debugging instructions #7867
  • Add new API clients #7859
  • Clarify CRITICAL vs. UNKNOWN #7665
  • Explicitly explain how to disable freshness checks #7664
  • Update installation for RHEL/CentOS 8 and SLES 15 #7640
  • Add Powershell example to validate the certificate #7603
• Misc
  • Don't send event::Heartbeat to unauthenticated peers #7747
  • OpenTsdbWriter: Add custom tag support #7357

Bugfixes

• Core
  • Fix JSON-RPC crashes #7532 #7737
  • Fix zone definitions in zones #7546
  • Fix deadlock during start on OpenBSD #7739
  • Consider PENDING not a problem #7685
  • Fix zombie processes after reload #7606
• Cluster
  • Fix check_timeout not being forwarded to agent command endpoints #7861
  • Config sync: Use a more friendly message when configs are equal and don't need a reload #7811
  • Fix open connections when agent waits for CA approval #7686
  • Fix TLS context not being updated on signed certificate messages on agents #7654
• API
  • Close connections w/o successful TLS handshakes after 10s #7809
  • Handle permission exceptions soon enough, returning 404 #7528
• SELinux
  • Fix safe-reload #7858
  • Allow direct SMTP notifications #7749
• Windows
  • Terminate check processes with UNKNOWN state on timeout #7788
  • Ensure that log replay files are properly renamed #7767
• Metrics
  • Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765
  • Always send 0 as value for thresholds #7696
• Scripts
  • Fix notification scripts to stay compatible with Dash #7706
  • Fix bash line continuation in mail-host-notification.sh #7701
  • Fix notification scripts string comparison #7647
  • Service and host mail-notifications: Add line-breaks to very long output #6822
  • Set correct UTF-8 email subject header (RFC1342) #6369
• Misc
  • Catch exception when trusted cert is not readable during node setup on agent/satellite #7838
  • CheckCommand ssl: Fix wrong parameter -N #7741
  • Code quality fixes
  • Small documentation fixes

v2.11.3

Issues and PRs
Blogpost

This release addresses a critical crash regarding our cluster JSON-RPC connections. This mainly affects users who run large environments and use HA zones. In most cases updating all masters should resolve the problem, but we still recommend updating all Icinga 2 instances.

Bugfixes

• Cluster
  • Fix JSON-RPC crashes (#7532) in large environments: #7846 #7848 #7849

v2.11.2

https://icinga.com/2019/10/24/icinga-2-11-2/

v2.11.1

https://icinga.com/2019/10/17/icinga-2-11-1-release/

v2.10.7

https://icinga.com/2019/10/17/icinga-2-11-1-release/

v2.11.0

Announcement

Blog post: https://icinga.com/2019/09/19/icinga-2-11/
Twitter release feed: https://twitter.com/icinga/status/1174311275234504704

Changes

Issue and PRs

Notes

Upgrading docs: https://icinga.com/docs/icinga2/snapshot/doc/16-upgrading-icinga-2/

Thanks to all contributors: Obihoernchen, dasJ, sebastic, waja, BarbUk, alanlitster, mcktr, KAMI911, peteeckel, breml, episodeiv, Crited, robert-scheck, west0rmann, Napsty, Elias481, uubk, miso231, neubi4, atj, mvanduren-itisit, jschanz, MaBauMeBad, markleary, leeclemens, m4k5ym

Enhancements

• Core
  • Rewrite Network Stack (cluster, REST API) based on Boost Asio, Beast, Coroutines
    • Technical concept: #7041
    • Requires package updates: Boost >1.66 (either from packages.icinga.com, EPEL or backports). SLES11 & Ubuntu 14 are EOL.
    • Require TLS 1.2 and harden default cipher list
  • Improved Reload Handling (umbrella process, now 3 processes at runtime)
    • Support running Icinga 2 in (Docker) containers natively in foreground
  • Quality: Use Modern JSON for C++ library instead of YAJL (dead project)
  • Quality: Improve handling of invalid UTF8 strings
• API
  • Fix crashes on Linux, Unix and Windows from Nessus scans #7431
  • Locks and stalled waits are fixed with the core rewrite in #7071
  • schedule-downtime action supports all_services for host downtimes
  • Improve storage handling for runtime created objects in the _api package
• Cluster
  • HA aware features & improvements for failover handling #2941 #7062
  • Improve cluster config sync with staging #6716
  • Fixed that same downtime/comment objects would be synced again in a cluster loop #7198
• Checks & Notifications
  • Ensure that notifications during a restart are sent
  • Immediately notify about a problem after leaving a downtime and still NOT-OK
  • Improve reload handling and wait for features/metrics
  • Store notification command results and sync them in HA enabled zones #6722
• DSL/Configuration
  • Add getenv() function
  • Fix TimePeriod range support over midnight
  • concurrent_checks in the Checker feature has no effect, use the global MaxConcurrentChecks constant instead
• CLI
  • Permissions: node wizard/setup, feature, api setup now run in the Icinga user context, not root
  • ca list shows pending CSRs by default, ca remove/restore allow to delete signing requests
• ITL
  • Add new commands and missing attributes
• Windows
  • Update bundled NSClient++ to 0.5.2.39
  • Refine agent setup wizard & update requirements to .NET 4.6
• Documentation
  • Service Monitoring: How to create plugins by example, check commands and a modern version of the supported plugin API with best practices
  • Features: Better structure on metrics, and supported features
  • Technical Concepts: TLS Network IO, Cluster Feature HA, Cluster Config Sync
  • Development: Rewritten for better debugging and development experience for contributors including a style guide. Add nightly build setup instructions.
  • Packaging: INSTALL.md was integrated into the Development chapter, being available at https://icinga.com/docs too.

v2.11.0-rc1

Installation docs and changelog: https://icinga.com/2019/07/25/icinga-2-11-release-candidate/

v2.10.5

Announcement
Issues and PRs

Bugfixes

• Core
  • Fix crashes with logrotate signals #6737 (thanks Elias Ohm)
• API
  • Fix crashes and problems with permission filters from recent Namespace introduction #6785 (thanks Elias Ohm) #6874 (backported from 2.11)
  • Reduce log spam with locked connections (real fix is the network stack rewrite in 2.11) #6877
• Cluster
  • Fix problems with replay log rotation and storage #6932 (thanks Peter Eckel)
• IDO DB
  • Fix that reload shutdown deactivates hosts and hostgroups (introduced in 2.9) #7157
• Documentation
  • Improve the REST API chapter: Unix timestamp handling, filters, unify POST requests with filters in the body
  • Better layout for the features chapter, specifically metrics and events
  • Split object types into monitoring, runtime, features
  • Add technical concepts for cluster messages