Commit graph

2135 commits

Author SHA1 Message Date
Lord Hepipud
fc41ede2aa
Merge pull request #850 from Icinga:fix/restrict_folder_permissions_for_general_users
Fix: Security issue by restricting access to core folders of Icinga for Windows for generic users

Fixes security issue, allowing to access the private key file of the Icinga Agent/Icinga for Windows certificate file [GHSA](https://github.com/Icinga/icinga-powershell-framework/security/advisories/GHSA-88h5-rrm6-5973) [CVE-2026-24414](https://www.cve.org/CVERecord?id=CVE-2026-24414)
2026-01-29 11:02:47 +01:00
Lord Hepipud
e29038b9bd Fixes security issue by restricting access to core folders of Icinga for Windows for generic users 2026-01-29 11:01:44 +01:00
Lord Hepipud
009e88fd9b Fixes notice object handling for checks using only critical status and being chained with warning thresholds 2026-01-28 17:19:07 +01:00
Lord Hepipud
7661054f63 Fixes notice message for not found instances during performance counter cache update 2026-01-28 16:32:50 +01:00
Lord Hepipud
4a40a001e8 Fixes invalid threshold comparison in case either warning or critical threshold is empty 2026-01-26 15:37:23 +01:00
Lord Hepipud
b886269bbf
Merge pull request #849 from Icinga:feature/replace_cpu_counter_with_%_processor_time
Feature: Changes CPU counter being used for measurement to % Processor Time

Changes CPU provider to use the `\Processor(*)\% Processor Time` counter instead of `\Processor Information(*)\% Processor Utility`
2026-01-26 15:24:56 +01:00
Lord Hepipud
b8120e5a5a Feature: Changes CPU counter being used for measurement to % Processor Time 2026-01-26 15:24:21 +01:00
Lord Hepipud
cf221c0de0
Merge pull request #847 from Icinga:fix/windows_fips_exception_for_md5_algorithm
Fix: FIPS exception caused by MD5 hash usage

Fixes possible FIPS exception on some Windows machines, caused by `MD5` hash algorithm used to verify the service binary file integrity after download instead of `SHA256`
2025-12-30 16:42:03 +01:00
Lord Hepipud
d8767bb2fa Fixes FIPS exception caused by MD5 hash usage 2025-12-30 16:41:36 +01:00
Lord Hepipud
326d1fe3e5
Merge pull request #846 from Icinga:fix/match_and_notmatch_checks_fail_on_special_characters
Fix: Plugin error for match and not match with special characters

Fixes plugin execution error while using any `%IfNotMatch`/`%IfNotLike`/`%IfMatch`/`%IfLike` check function for strings containing special characters like `:`
2025-12-30 16:15:57 +01:00
Lord Hepipud
450cf74015 Fixes plugin error for match and not match with special characters 2025-12-30 16:12:54 +01:00
Lord Hepipud
46f8670427 Updates changelog to move 1.13.4 changes to v1.14.0 2025-12-30 16:05:40 +01:00
Lord Hepipud
0561a997bf
Merge pull request #845 from Icinga:fix/various_checker_issues
Fix: Various issues on the New-IcingaCheck component

Fixes a bunch of issues present in the `New-IcingaCheck` component, resulting in non-desired output value:

* The new introducted `INFO` state was not properly removed while using `SetOk`, `SetWarning`, `SetCritical` or `SetUnknown` without prior calling of any threshold evaluation for unlocked objects
* Locked objects did not properly output the configured output message, if no threshold validation function was called
* Locked objects did not output any performance data
2025-12-29 15:31:51 +01:00
Lord Hepipud
25083d6360 Fixes issues on checker component for new INFO state, perf data writer for locked components and missing message output values on locked objects 2025-12-29 15:31:22 +01:00
Lord Hepipud
3bf61237f1 Fixes notice packages to not return unknown and properly report if no entries were found 2025-12-29 11:24:24 +01:00
Lord Hepipud
83cc134c47
Merge pull request #844 from Icinga:feature/adds_migrations_for_v1.14
Feature: Adds migration tasks for v1.14 for updating permissions

Adds migration tasks to update user permissions.
2025-12-23 17:32:12 +01:00
Lord Hepipud
f24483c4b2 Adds migration tasks for v1.14 for updating permissions 2025-12-23 17:31:27 +01:00
Lord Hepipud
25f1814473
Merge pull request #843 from Icinga:fix/security_catalog_compilation_errors
Fix: Security catalog compilation on non-english Windows versions

Fixes security catalog compilation error on non-english Windows versions, while properly skipping checks on system SID's and improves security by always adding the `SeDenyNetworkLogonRight` and `SeDenyInteractiveLogonRight` privilege section for the JEA user SID
2025-12-23 17:26:44 +01:00
Lord Hepipud
aa62b66fd8 Fixes security catalog compilation on non-english Windows versions 2025-12-23 17:25:23 +01:00
Lord Hepipud
ff4a0b2bbc
Merge pull request #841 from Icinga:feature/adds_new_type_info_for_checks_and_packages
Feature: Adds new [INFO] state for notice and un-checked monitoring objects

Adds new [INFO] state for `New-IcingaCheck` and `New-IcingaCheckPackage`, to allow the printing of simple informational objects as well as telling the user, which objects are currently actively checked by the plugin engine.

```powershell
icinga> Invoke-IcingaCheckCPU -Verbosity 3;

[INFO] CPU Load (All must be [OK])
\_ [INFO] Overall Load: 8.714580%
\_ [INFO] Socket #0 (All must be [OK])
   \_ [INFO] Core 0: 22.63846%
   \_ [INFO] Core 1: 11.04723%
   \_ [INFO] Core 2: 0.672020%
   \_ [INFO] Core 3: 0.500612%
   \_ [INFO] Core Total: 8.714580%
| totalload::ifw_cpu::load=8.714580%;;;0;100 0_0::ifw_cpu::load=22.63846%;;;0;100 0_1::ifw_cpu::load=11.04723%;;;0;100 0_2::ifw_cpu::load=0.672020%;;;0;100 0_3::ifw_cpu::load=0.500612%;;;0;100 0_total::ifw_cpu::load=8.714580%;;;0;100
```


```powershell
icinga> Invoke-IcingaCheckProcess -Verbosity 3 -Process  WmiApSrv -MemoryWarning '1MB' -PageFileWarning '1KiB';

[WARNING] Process Overview: 1 Warning [WARNING] WmiApSrv (All must be [OK])
\_ [WARNING] WmiApSrv (All must be [OK])
   \_ [WARNING] WmiApSrv [16476] (All must be [OK])
      \_ [INFO] CPU Usage: 0%
      \_ [WARNING] Memory Usage: Value 1.67MiB is greater than threshold 976.56KiB
      \_ [INFO] Page File Usage: 2.30KiB
      \_ [INFO] Thread Count: 5c
   \_ [INFO] WmiApSrv Summary (All must be [OK])
      \_ [INFO] CPU Usage: 0%
      \_ [INFO] Memory Usage: 1.67MiB
      \_ [INFO] Page File Usage: 2.30KiB
      \_ [INFO] Process Count: 1c
      \_ [INFO] Thread Count: 5c
| wmiapsrv::ifw_process::cpu=0%;;;0;100 wmiapsrv::ifw_process::memory=1748992B;;;0;8583315000 wmiapsrv::ifw_process::pagefile=2352B;;;0;34359740000 wmiapsrv::ifw_process::count=1c;;;; wmiapsrv::ifw_process::threads=5c;;;;
```
2025-12-15 16:54:32 +01:00
Lord Hepipud
97f2cb8c11 Adds new [INFO] state for Icinga check and checkpage objects 2025-12-15 16:50:19 +01:00
Lord Hepipud
ad59bb9a3a
Merge pull request #828 from Icinga:feature/adds_cache_update_for_performance_counters
Feature: Adds caching update for added/removed performance counter instances

Adds feature to update the cache for performance counter instances to keep track of system changes.

This will ensure that while we are running as a daemon with Icinga for Windows, newly added or removed information for performance counters will be updated whenever required.
2025-11-20 15:52:31 +01:00
Lord Hepipud
4051239d0f Adds feature to update the cache for performance counter instances to keep track of system changes 2025-11-20 15:51:21 +01:00
Lord Hepipud
93ac71922f
Merge pull request #839 from Icinga:fix/agent_installation_lookup_for_missing_attribute
Fix: Icinga Agent installation lookup on missing registry attributes

Fixes registry lookup for Icinga Agent installation to check if the required `DisplayName` attribute is defined before checking
2025-11-20 15:48:30 +01:00
Lord Hepipud
a19728f736 Fixes Icinga Agent installation lookup on missing registiyr attributes 2025-11-20 15:47:32 +01:00
Lord Hepipud
c92c0eb410
Merge pull request #829 from Icinga:fix/clearcache
Fix(lib/core): Allow Cache-Key deletion with NULL

Allows to delete Cache Entries. Usage `Set-IcingaCacheData -KeyName Key -Value $NULL`
2025-11-20 08:35:22 +01:00
Lord Hepipud
72be26f129
Merge pull request #838 from Icinga:fix/ensure_ifw_never_loads_user_profiles
Fix: Never load user PowerShell profiles

To enhance compatibility and reduce the overall impact during certain tasks run by Icinga for Windows, ensure we never load any user PowerShell profiles
2025-11-19 09:57:47 +01:00
Lord Hepipud
44d66a9a54 Fixes Icinga for Windows to never load custom user profiles 2025-11-19 09:49:29 +01:00
Lord Hepipud
0c72fdafdd
Merge pull request #837 from Icinga:fix/metrics_over_time_on_windows_2012
Fix: Metrics over Time on Windows 2012 R2 and older

Fixes Metrics over Time on Windows 2012 R2 and older caused by thread pooling issues
2025-11-19 09:39:47 +01:00
Lord Hepipud
80b8d7e2f8 Fixes Metrics over Time on Windows 2012 R2 and older 2025-11-14 14:11:50 +01:00
Lord Hepipud
7276d43ac2
Merge pull request #835 from Icinga:fix/ensure_jea_always_rebuild_framework
Fix: JEA compiler to always force a framework rebuild on update

Fixes JEA compiler to always enforce a rebuild of the Framework to ensure integrity of JEA profiles
2025-11-13 18:32:49 +01:00
Lord Hepipud
d2bc75c6f4 Fixes JEA compiler to always force a framework rebuild on update 2025-11-13 18:31:16 +01:00
Fabian Thomys
44700e4bd2 fix(lib/core): Allow Cache-Key deletion with NULL 2025-09-16 13:58:01 +02:00
Lord Hepipud
854ef78f91
Fix: Improved security for random character generator (#814)
Fixes random chars function to truly generate unpredictable character sequences and to replace `Get-Random` which is not entirely secure
2025-06-16 14:14:05 +02:00
Lord Hepipud
440a04659c
Fix: Possible crash on assembly fetching for third party assemblies (#815)
* Fixes possible crash on assembly fetching for third party assemblies

* Updates Changelog
2025-06-16 13:34:05 +02:00
Lord Hepipud
507575c5a9 Sets release date for v1.13.3 2025-05-08 14:19:44 +02:00
Lord Hepipud
7ae4fb40ad
Merge pull request #812 from Icinga:feature/ensure_icinga_services_are_set_to_delayed_auto_start
Feauture: Adds support to ensure Icinga services are always set to delayed auto start

Adds new Cmdlet `Set-IcingaForWindowsServicesDelayedStart` which will update the Icinga Agent and Icinga for Windows service to run with delayed autostart
2025-04-25 16:19:16 +02:00
Lord Hepipud
2c76237409 Adds support to ensure Icinga services are always set to delayed auto start 2025-04-25 16:14:49 +02:00
Lord Hepipud
0ff9286d0c
Merge pull request #811 from Icinga:fix/add_summary_header_for_check_compiler_not_adding_check_details
Fix: AddSummaryHeader not adding any check information to check package

Fixes plugin compiler not handling `AddSummaryHeader` properly for nested check packages, not adding any check information

```powershell
[WARNING] CPU Load [WARNING] Socket #0 (All must be [OK])
\_ [OK] Overall Load: 8.283808%
\_ [WARNING] Socket #0: 2 Warning 3 Ok [WARNING] Core 0, Core 2 (All must be [OK])
   \_ [WARNING] Core 0: Value 18.86168% is greater than threshold 9%
   \_ [OK] Core 1: 4.852731%
   \_ [WARNING] Core 2: Value 9.340026% is greater than threshold 9%
   \_ [OK] Core 3: 0.080795%
   \_ [OK] Core Total: 8.283808%
| totalload::ifw_cpu::load=8.283808%;9;;0;100 0_0::ifw_cpu::load=18.86168%;9;;0;100 0_1::ifw_cpu::load=4.852731%;9;;0;100 0_2::ifw_cpu::load=9.340026%;9;;0;100 0_3::ifw_cpu::load=0.080795%;9;;0;100 0_total::ifw_cpu::load=8.283808%;9;;0;100
```
2025-04-24 08:17:51 +02:00
Lord Hepipud
d68be2674c Fixes AddSummaryHeader not adding any check information to check package 2025-04-24 08:16:33 +02:00
Lord Hepipud
647cedbdf4
Merge pull request #810 from Icinga:feature/adds_supress_messages_to_disable_untrusted_certificates
Feature: Adds support to suppress messages for Disable-IcingaUntrustedCertificateValidation

Adds support to suppress messages for Disable-IcingaUntrustedCertificateValidation
2025-04-23 12:38:55 +02:00
Lord Hepipud
650db57496 Adds support to suppress messages for Disable-IcingaUntrustedCertificateValidation 2025-04-23 12:38:29 +02:00
Lord Hepipud
c39ea59986
Merge pull request #808 from Icinga:fix/config_compiler_always_using_switchparameter
Fix: Config compiler to always use Switchparameter for switch argument

Fixes Icinga for Windows config compiler to always use `Switchparameter` for `switch` data types, in case the documentation is not written properly for the plugin
2025-04-22 15:32:31 +02:00
Lord Hepipud
3cd4f0d1d6 Fixes config compiler to always use Switchparameter for switch argument 2025-04-22 15:31:40 +02:00
Lord Hepipud
6c5a439808 Fixes broken Framework cache 2025-04-22 14:51:34 +02:00
Lord Hepipud
9beba0e854
Merge pull request #807 from Icinga:fix/ifw_freezes_for_services_blocking_cim_requests
Fix: Icinga for Windows being stuck while fetching service information if other services block CIM requests

Fixes Icinga for Windows being stuck during installation while fetching service information over CIM-Instances, if other services are frozen, blocking the CIM-Request
2025-04-22 14:47:30 +02:00
Lord Hepipud
aa5c06bbd6 Fixes Icinga for Windows being stuck while fetching service information if other services block CIM requests 2025-04-22 14:46:41 +02:00
Lord Hepipud
fa7e729308
Merge pull request #806 from Icinga:fix/threshold_comparison_for_non-range_arguments
Fix: Threshold comparison to only apply for ranged values

Fixes Icinga for Windows threshold comparison which wrongly compared warning/critical thresholds for non-range values (like Match)
2025-04-22 13:48:36 +02:00
Lord Hepipud
bbb950a3ae Fixes threshold comparison to only apply for ranged values 2025-04-22 13:47:53 +02:00
Lord Hepipud
bf30c1a9ed
Merge pull request #805 from Icinga:fix/force_service_install_on_wizard
Fix: Icinga for Windows installer to always force service installation

Fixes Icinga for Windows installer to always force the installation of the service, to ensure it is present
2025-04-22 13:22:26 +02:00