Commit graph

2139 commits

Author SHA1 Message Date
Lord Hepipud
07611cc8cc
Merge pull request #852 from Icinga:fix/icinga_agent_version_detection
Fix: Icinga Agent version detection by using the icinga2 binary instead of the registry values

Fixes the version detection of the installed Icinga Agent by looking on the local installed `icinga2.exe` instead of fully relying on the registry version, printing an error in case the versions do not match
2026-01-30 16:38:43 +01:00
Lord Hepipud
c01cf5bf34 Fixes Icinga Agent version detection by using the icinga2 binary instead of the registry values 2026-01-30 16:37:05 +01:00
Lord Hepipud
e4475bb40e
Merge pull request #851 from Icinga:fix/do_not_include_domain_for_domain_controllers_on_user_updates
Fix: Issue with user updates on domain controllers in case the domain is included in the update

Fixes an issue with user updates on domain controllers, which included the domain besides the user name, causing the user updates to fail
2026-01-29 12:48:10 +01:00
Lord Hepipud
16cdfcc626 Fixes an issue with user updates on domain controllers in case the domain is included in the update 2026-01-29 12:45:52 +01:00
Lord Hepipud
fc41ede2aa
Merge pull request #850 from Icinga:fix/restrict_folder_permissions_for_general_users
Fix: Security issue by restricting access to core folders of Icinga for Windows for generic users

Fixes security issue, allowing to access the private key file of the Icinga Agent/Icinga for Windows certificate file [GHSA](https://github.com/Icinga/icinga-powershell-framework/security/advisories/GHSA-88h5-rrm6-5973) [CVE-2026-24414](https://www.cve.org/CVERecord?id=CVE-2026-24414)
2026-01-29 11:02:47 +01:00
Lord Hepipud
e29038b9bd Fixes security issue by restricting access to core folders of Icinga for Windows for generic users 2026-01-29 11:01:44 +01:00
Lord Hepipud
009e88fd9b Fixes notice object handling for checks using only critical status and being chained with warning thresholds 2026-01-28 17:19:07 +01:00
Lord Hepipud
7661054f63 Fixes notice message for not found instances during performance counter cache update 2026-01-28 16:32:50 +01:00
Lord Hepipud
4a40a001e8 Fixes invalid threshold comparison in case either warning or critical threshold is empty 2026-01-26 15:37:23 +01:00
Lord Hepipud
b886269bbf
Merge pull request #849 from Icinga:feature/replace_cpu_counter_with_%_processor_time
Feature: Changes CPU counter being used for measurement to % Processor Time

Changes CPU provider to use the `\Processor(*)\% Processor Time` counter instead of `\Processor Information(*)\% Processor Utility`
2026-01-26 15:24:56 +01:00
Lord Hepipud
b8120e5a5a Feature: Changes CPU counter being used for measurement to % Processor Time 2026-01-26 15:24:21 +01:00
Lord Hepipud
cf221c0de0
Merge pull request #847 from Icinga:fix/windows_fips_exception_for_md5_algorithm
Fix: FIPS exception caused by MD5 hash usage

Fixes possible FIPS exception on some Windows machines, caused by `MD5` hash algorithm used to verify the service binary file integrity after download instead of `SHA256`
2025-12-30 16:42:03 +01:00
Lord Hepipud
d8767bb2fa Fixes FIPS exception caused by MD5 hash usage 2025-12-30 16:41:36 +01:00
Lord Hepipud
326d1fe3e5
Merge pull request #846 from Icinga:fix/match_and_notmatch_checks_fail_on_special_characters
Fix: Plugin error for match and not match with special characters

Fixes plugin execution error while using any `%IfNotMatch`/`%IfNotLike`/`%IfMatch`/`%IfLike` check function for strings containing special characters like `:`
2025-12-30 16:15:57 +01:00
Lord Hepipud
450cf74015 Fixes plugin error for match and not match with special characters 2025-12-30 16:12:54 +01:00
Lord Hepipud
46f8670427 Updates changelog to move 1.13.4 changes to v1.14.0 2025-12-30 16:05:40 +01:00
Lord Hepipud
0561a997bf
Merge pull request #845 from Icinga:fix/various_checker_issues
Fix: Various issues on the New-IcingaCheck component

Fixes a bunch of issues present in the `New-IcingaCheck` component, resulting in non-desired output value:

* The new introducted `INFO` state was not properly removed while using `SetOk`, `SetWarning`, `SetCritical` or `SetUnknown` without prior calling of any threshold evaluation for unlocked objects
* Locked objects did not properly output the configured output message, if no threshold validation function was called
* Locked objects did not output any performance data
2025-12-29 15:31:51 +01:00
Lord Hepipud
25083d6360 Fixes issues on checker component for new INFO state, perf data writer for locked components and missing message output values on locked objects 2025-12-29 15:31:22 +01:00
Lord Hepipud
3bf61237f1 Fixes notice packages to not return unknown and properly report if no entries were found 2025-12-29 11:24:24 +01:00
Lord Hepipud
83cc134c47
Merge pull request #844 from Icinga:feature/adds_migrations_for_v1.14
Feature: Adds migration tasks for v1.14 for updating permissions

Adds migration tasks to update user permissions.
2025-12-23 17:32:12 +01:00
Lord Hepipud
f24483c4b2 Adds migration tasks for v1.14 for updating permissions 2025-12-23 17:31:27 +01:00
Lord Hepipud
25f1814473
Merge pull request #843 from Icinga:fix/security_catalog_compilation_errors
Fix: Security catalog compilation on non-english Windows versions

Fixes security catalog compilation error on non-english Windows versions, while properly skipping checks on system SID's and improves security by always adding the `SeDenyNetworkLogonRight` and `SeDenyInteractiveLogonRight` privilege section for the JEA user SID
2025-12-23 17:26:44 +01:00
Lord Hepipud
aa62b66fd8 Fixes security catalog compilation on non-english Windows versions 2025-12-23 17:25:23 +01:00
Lord Hepipud
ff4a0b2bbc
Merge pull request #841 from Icinga:feature/adds_new_type_info_for_checks_and_packages
Feature: Adds new [INFO] state for notice and un-checked monitoring objects

Adds new [INFO] state for `New-IcingaCheck` and `New-IcingaCheckPackage`, to allow the printing of simple informational objects as well as telling the user, which objects are currently actively checked by the plugin engine.

```powershell
icinga> Invoke-IcingaCheckCPU -Verbosity 3;

[INFO] CPU Load (All must be [OK])
\_ [INFO] Overall Load: 8.714580%
\_ [INFO] Socket #0 (All must be [OK])
   \_ [INFO] Core 0: 22.63846%
   \_ [INFO] Core 1: 11.04723%
   \_ [INFO] Core 2: 0.672020%
   \_ [INFO] Core 3: 0.500612%
   \_ [INFO] Core Total: 8.714580%
| totalload::ifw_cpu::load=8.714580%;;;0;100 0_0::ifw_cpu::load=22.63846%;;;0;100 0_1::ifw_cpu::load=11.04723%;;;0;100 0_2::ifw_cpu::load=0.672020%;;;0;100 0_3::ifw_cpu::load=0.500612%;;;0;100 0_total::ifw_cpu::load=8.714580%;;;0;100
```


```powershell
icinga> Invoke-IcingaCheckProcess -Verbosity 3 -Process  WmiApSrv -MemoryWarning '1MB' -PageFileWarning '1KiB';

[WARNING] Process Overview: 1 Warning [WARNING] WmiApSrv (All must be [OK])
\_ [WARNING] WmiApSrv (All must be [OK])
   \_ [WARNING] WmiApSrv [16476] (All must be [OK])
      \_ [INFO] CPU Usage: 0%
      \_ [WARNING] Memory Usage: Value 1.67MiB is greater than threshold 976.56KiB
      \_ [INFO] Page File Usage: 2.30KiB
      \_ [INFO] Thread Count: 5c
   \_ [INFO] WmiApSrv Summary (All must be [OK])
      \_ [INFO] CPU Usage: 0%
      \_ [INFO] Memory Usage: 1.67MiB
      \_ [INFO] Page File Usage: 2.30KiB
      \_ [INFO] Process Count: 1c
      \_ [INFO] Thread Count: 5c
| wmiapsrv::ifw_process::cpu=0%;;;0;100 wmiapsrv::ifw_process::memory=1748992B;;;0;8583315000 wmiapsrv::ifw_process::pagefile=2352B;;;0;34359740000 wmiapsrv::ifw_process::count=1c;;;; wmiapsrv::ifw_process::threads=5c;;;;
```
2025-12-15 16:54:32 +01:00
Lord Hepipud
97f2cb8c11 Adds new [INFO] state for Icinga check and checkpage objects 2025-12-15 16:50:19 +01:00
Lord Hepipud
ad59bb9a3a
Merge pull request #828 from Icinga:feature/adds_cache_update_for_performance_counters
Feature: Adds caching update for added/removed performance counter instances

Adds feature to update the cache for performance counter instances to keep track of system changes.

This will ensure that while we are running as a daemon with Icinga for Windows, newly added or removed information for performance counters will be updated whenever required.
2025-11-20 15:52:31 +01:00
Lord Hepipud
4051239d0f Adds feature to update the cache for performance counter instances to keep track of system changes 2025-11-20 15:51:21 +01:00
Lord Hepipud
93ac71922f
Merge pull request #839 from Icinga:fix/agent_installation_lookup_for_missing_attribute
Fix: Icinga Agent installation lookup on missing registry attributes

Fixes registry lookup for Icinga Agent installation to check if the required `DisplayName` attribute is defined before checking
2025-11-20 15:48:30 +01:00
Lord Hepipud
a19728f736 Fixes Icinga Agent installation lookup on missing registiyr attributes 2025-11-20 15:47:32 +01:00
Lord Hepipud
c92c0eb410
Merge pull request #829 from Icinga:fix/clearcache
Fix(lib/core): Allow Cache-Key deletion with NULL

Allows to delete Cache Entries. Usage `Set-IcingaCacheData -KeyName Key -Value $NULL`
2025-11-20 08:35:22 +01:00
Lord Hepipud
72be26f129
Merge pull request #838 from Icinga:fix/ensure_ifw_never_loads_user_profiles
Fix: Never load user PowerShell profiles

To enhance compatibility and reduce the overall impact during certain tasks run by Icinga for Windows, ensure we never load any user PowerShell profiles
2025-11-19 09:57:47 +01:00
Lord Hepipud
44d66a9a54 Fixes Icinga for Windows to never load custom user profiles 2025-11-19 09:49:29 +01:00
Lord Hepipud
0c72fdafdd
Merge pull request #837 from Icinga:fix/metrics_over_time_on_windows_2012
Fix: Metrics over Time on Windows 2012 R2 and older

Fixes Metrics over Time on Windows 2012 R2 and older caused by thread pooling issues
2025-11-19 09:39:47 +01:00
Lord Hepipud
80b8d7e2f8 Fixes Metrics over Time on Windows 2012 R2 and older 2025-11-14 14:11:50 +01:00
Lord Hepipud
7276d43ac2
Merge pull request #835 from Icinga:fix/ensure_jea_always_rebuild_framework
Fix: JEA compiler to always force a framework rebuild on update

Fixes JEA compiler to always enforce a rebuild of the Framework to ensure integrity of JEA profiles
2025-11-13 18:32:49 +01:00
Lord Hepipud
d2bc75c6f4 Fixes JEA compiler to always force a framework rebuild on update 2025-11-13 18:31:16 +01:00
Fabian Thomys
44700e4bd2 fix(lib/core): Allow Cache-Key deletion with NULL 2025-09-16 13:58:01 +02:00
Lord Hepipud
854ef78f91
Fix: Improved security for random character generator (#814)
Fixes random chars function to truly generate unpredictable character sequences and to replace `Get-Random` which is not entirely secure
2025-06-16 14:14:05 +02:00
Lord Hepipud
440a04659c
Fix: Possible crash on assembly fetching for third party assemblies (#815)
* Fixes possible crash on assembly fetching for third party assemblies

* Updates Changelog
2025-06-16 13:34:05 +02:00
Lord Hepipud
507575c5a9 Sets release date for v1.13.3 2025-05-08 14:19:44 +02:00
Lord Hepipud
7ae4fb40ad
Merge pull request #812 from Icinga:feature/ensure_icinga_services_are_set_to_delayed_auto_start
Feauture: Adds support to ensure Icinga services are always set to delayed auto start

Adds new Cmdlet `Set-IcingaForWindowsServicesDelayedStart` which will update the Icinga Agent and Icinga for Windows service to run with delayed autostart
2025-04-25 16:19:16 +02:00
Lord Hepipud
2c76237409 Adds support to ensure Icinga services are always set to delayed auto start 2025-04-25 16:14:49 +02:00
Lord Hepipud
0ff9286d0c
Merge pull request #811 from Icinga:fix/add_summary_header_for_check_compiler_not_adding_check_details
Fix: AddSummaryHeader not adding any check information to check package

Fixes plugin compiler not handling `AddSummaryHeader` properly for nested check packages, not adding any check information

```powershell
[WARNING] CPU Load [WARNING] Socket #0 (All must be [OK])
\_ [OK] Overall Load: 8.283808%
\_ [WARNING] Socket #0: 2 Warning 3 Ok [WARNING] Core 0, Core 2 (All must be [OK])
   \_ [WARNING] Core 0: Value 18.86168% is greater than threshold 9%
   \_ [OK] Core 1: 4.852731%
   \_ [WARNING] Core 2: Value 9.340026% is greater than threshold 9%
   \_ [OK] Core 3: 0.080795%
   \_ [OK] Core Total: 8.283808%
| totalload::ifw_cpu::load=8.283808%;9;;0;100 0_0::ifw_cpu::load=18.86168%;9;;0;100 0_1::ifw_cpu::load=4.852731%;9;;0;100 0_2::ifw_cpu::load=9.340026%;9;;0;100 0_3::ifw_cpu::load=0.080795%;9;;0;100 0_total::ifw_cpu::load=8.283808%;9;;0;100
```
2025-04-24 08:17:51 +02:00
Lord Hepipud
d68be2674c Fixes AddSummaryHeader not adding any check information to check package 2025-04-24 08:16:33 +02:00
Lord Hepipud
647cedbdf4
Merge pull request #810 from Icinga:feature/adds_supress_messages_to_disable_untrusted_certificates
Feature: Adds support to suppress messages for Disable-IcingaUntrustedCertificateValidation

Adds support to suppress messages for Disable-IcingaUntrustedCertificateValidation
2025-04-23 12:38:55 +02:00
Lord Hepipud
650db57496 Adds support to suppress messages for Disable-IcingaUntrustedCertificateValidation 2025-04-23 12:38:29 +02:00
Lord Hepipud
c39ea59986
Merge pull request #808 from Icinga:fix/config_compiler_always_using_switchparameter
Fix: Config compiler to always use Switchparameter for switch argument

Fixes Icinga for Windows config compiler to always use `Switchparameter` for `switch` data types, in case the documentation is not written properly for the plugin
2025-04-22 15:32:31 +02:00
Lord Hepipud
3cd4f0d1d6 Fixes config compiler to always use Switchparameter for switch argument 2025-04-22 15:31:40 +02:00
Lord Hepipud
6c5a439808 Fixes broken Framework cache 2025-04-22 14:51:34 +02:00
Lord Hepipud
9beba0e854
Merge pull request #807 from Icinga:fix/ifw_freezes_for_services_blocking_cim_requests
Fix: Icinga for Windows being stuck while fetching service information if other services block CIM requests

Fixes Icinga for Windows being stuck during installation while fetching service information over CIM-Instances, if other services are frozen, blocking the CIM-Request
2025-04-22 14:47:30 +02:00