forked from Icinga/icinga2
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathCHANGELOG.md
5171 lines (4356 loc) · 417 KB
/
CHANGELOG.md
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
# Icinga 2 CHANGELOG
**The latest release announcements are available on [https://icinga.com/blog/](https://icinga.com/blog/).**
Please read the [upgrading](https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/)
documentation before upgrading to a new release.
Released closed milestones can be found on [GitHub](https://github.com/Icinga/icinga2/milestones?state=closed).
## 2.13.7 (2023-02-16)
This security release updates Boost and OpenSSL libraries bundled on Windows
and repairs broken SELinux policies. By the way it fixes several other bugs.
### Security
* Windows: update bundled OpenSSL to v1.1.1t. #9672
### Bugfixes
* SELinux: fix user and domain creation by explicitly setting the role. #9690
* Signal handlers: don't interrupt and break plugins spawning. #9682
* Icinga DB: take check\_period into account during overdue calculation. #9679
* Avoid corrupted files: use fsync(2)/FlushFileBuffers() everywhere. #9681
* Solaris: fix compile error. #9680
### Enhancements
* Windows: update bundled Boost to v1.81. #9678
* Documentation: several fixes and improvements. #9671
## 2.13.6 (2022-11-08)
The main focus of version 2.13.6 is improved performance of Icinga DB and apply rules.
Additionally, it includes bug fixes related to config loading and API permissions.
### Bugfixes
* Improve the throughput of the Icinga DB feature. #9550
* Multiple changes to speed up evaluation of apply rules. #9559 #9565 #9558
* Fix a possible crash on config loading related to `ignore_on_error`. #9560
* Check API user permission on objects returned by joins. #9561
* Windows: update bundled Boost and OpenSSL versions. #9562 #9567
## 2.13.5 (2022-08-11)
Version 2.13.5 is a maintenance release that fixes some bugs,
improves logging and updates the documentation as well as a bundled library.
### Bugfixes
* Ensure not to write an incomplete (i.e. corrupt) state file. #9467
* ITL: Render vars.apt\_upgrade=true as --upgrade, not --upgrade=true. #9458
* Icinga DB: Don't surprise (and crash) the Go daemon with config types it doesn't know. #9480
* Icinga DB: Add missing Redis SELinux policy. #9473
* Windows: Don't spam the event log with non-error startup messages. #9457
* Windows: Update bundled version of OpenSSL. #9460
* Docs: Update RHEL 8 installation instructions. #9482
* Docs: Add RHEL 9 installation instructions. #9482
## 2.13.4 (2022-06-30)
This release brings the final changes needed for the Icinga DB 1.0 release.
Addtionally, it includes some fixes and a performance improvement resulting
in faster config validation and reload times.
### Bugfixes
* Fix a race-condition involving object attribute updates that could result in a crash. #9395
* After a host recovered, only send problem notifications for services after
they have been rechecked afterwards to avoid false notifications. #9348
* Speed up config validation by avoiding redundant serialization of objects. #9400
* Add a `separator` attribute to allow using arguments like `--key=value` as required by some
check plugins. This fixes the `--upgrade` and `--dist-upgrade` arguments of `check_apt`. #9397
* Windows: Update bundled versions of Boost and OpenSSL. #9360 #9415
### Icinga DB
* Add an `icingadb` CheckCommand to allow checking if Icinga DB is healthy. #9417
* Update documentation related to Icinga DB. #9423
* Fix a bug where history events could miss the environment ID. #9396
* Properly serialize attributes of command arguments when explicitly set to `null`. #9398
* Rename some attributes to make the database schema more consistent. #9399 #9419 #9421
* Make the error message more helpful if the API isn't set up #9418
## 2.13.3 (2022-04-14)
This version includes bugfixes for many features of Icinga 2, including fixes for multiple crashes.
It also includes a number of fixes and improvements for Icinga DB.
### API
* The /v1/config/stages endpoint now immediately rejects parallel config updates
instead of accepting and then later failing to verify and activate them. #9328
### Certificates
* The lifetime of newly issued node certificates is reduced from 15 years to 397 days. #9337
* Compare cluster certificate tickets in constant time. #9333
### Notifications
* Fix a crash that could happen while sending notifications shortly after Icinga 2 started. #9124
* Fix missing or redundant notifications after certain combinations of state changes happened
while notifications were suppressed, for example during a downtime. #9285
### Checks and Commands
* Fix a deadlock when processing check results for checkables with dependencies. #9228
* Fix a message routing loop that can happen for event commands that are executed within a zone
using `command_endpoint` that resulted in excessive execution of the command. #9260
### Downtimes
* Fix scheduling of downtimes for all services on child hosts. #9159
* Creating fixed downtimes starting immediately now send a corresponding notification. #9158
* Fix some issues involving daylight saving time changes that could result in an hour missing
from scheduled downtimes. This fix applies to time periods as well. #9238
### Configuration
* Fix the evaluation order of default templates when used in combination with apply rules.
Now default templates are imported first as stated in the documentation and
as it already happens for objects defined without using apply. #9290
### IDO
* Fix an issue where contacts were not written correctly to the notification history
if multiple IDO instances are active on the same node. #9242
* Explicitly set the encoding for MySQL connections as a workaround for changed defaults
in Debian bullseye. #9312
* Ship a MySQL schema upgrade that fixes inconsistent version information in the
full schema file and upgrade files which could have resulted in inaccurate reports
of an outdated schema version. #9139
### Performance Data Writers
* Fix a race condition in the InfluxDB Writers that could result in a crash. #9237
* Fix a log message where Influxdb2Writer logged as InfluxdbWriter. #9315
* All writers no longer send metrics multiple times after HA failovers. #9322
### Build
* Fix the order of linker flags to fix builds on some ARM platforms. #9164
* Fix a regression introduced in 2.13.2 preventing non-unity builds. #9094
* Fix an issue when building within an unrelated Git repository,
version information from that repository could incorrectly be used for Icinga 2. #9155
* Windows: Update bundled Boost version to 1.78.0 and OpenSSL to 1.1.1n #9325
### Internals
* Fix some race conditions due to missing synchronization.
These race conditions should not have caused any practical problems
besides incorrect numbers in debug log message. #9306
* Move the startup.log and status files created when validating incoming cluster config updates
to /var/lib/icinga2/api and always keep the last failed startup.log to ease debugging. #9335
### Icinga DB
* The `severity` attribute was updated to match the sort order Icinga Web 2 uses for the IDO.
The documentation for this attribute was already incorrect before and was updated
to reflect the current functionality. #9239 #9240
* Fix the `is_sticky` attribute for comments. #9303
* Fix missing updates of `is_reachable` and `severity` in the state tables. #9241
* Removing an acknowledgement no longer incorrectly writes comment history. #9302
* Fix multiple issues so that in an HA zone, both nodes now write consistent history. #9157 #9182 #9190
* Fix that history events are no longer written when state information should be updated. #9252
* Fix an issue where incomplete comment history events were generated. #9301
**Note:** when removing comments using the API, the dedicated remove-comment action
should be used instead of the objects API, otherwise no history event will be generated.
* Fix handling of non-integer values for the order attribute of command arguments. #9181
**Note:** You should only specify integer values for order, other values are converted to integer
before use so using fractional numbers there has no effect.
* Add a dependency on icingadb-redis.service to the systemd service file
so that Redis is stopped after Icinga 2. #9304
* Buffer history events in memory when the Redis connection is lost. #9271
* Add the previous soft state to the state tables. #9214
* Add missing locking on object runtime updates. #9300
## 2.13.2 (2021-11-12)
This version only includes changes needed for the release of Icinga DB 1.0.0 RC2 and doesn't include any other bugfixes or features.
### Icinga DB
* Prefix command_id with command type #9085
* Decouple environment from Icinga 2 Environment constant #9082
* Make icinga:history:stream:*#event_id deterministic #9076
* Add downtime.duration & service_state.host_id to Redis #9084
* Sync checkables along with their states first #9081
* Flush both buffered states and state checksums on initial dump #9079
* Introduce icinga:history:stream:downtime#scheduled_by #9080
* Actually write parent to parent_id of zones #9078
* Set value in milliseconds for program_start in stats/heartbeat #9077
* Clean up vanished objects from icinga:checksum:*:state #9074
* Remove usernotification history stream #9073
* Write IDs of notified users into notification history stream #9071
* Make CheckResult#scheduling_source available to Icinga DB #9072
* Stream runtime state updates only to icinga:runtime:state #9068
* Publish Redis schema version via XADD icinga:schema #9069
* Don't include checkable types in history IDs #9070
* Remove unused Redis key 'icinga:zone:parent' #9075
* Make sure object relationships are handled correctly during runtime updates #9089
* Only log queries at debug level #9088
## 2.13.1 (2021-08-19)
The main focus of this version is a security vulnerability in the TLS certificate verification of our metrics writers ElasticsearchWriter, GelfWriter, InfluxdbWriter and Influxdb2Writer.
Version 2.13.1 also fixes two issues indroduced with the 2.13.0 release.
### Security
* Add TLS server certificate validation to ElasticsearchWriter, GelfWriter, InfluxdbWriter and Influxdb2Writer ([GHSA-cxfm-8j5v-5qr2](https://github.com/Icinga/icinga2/security/advisories/GHSA-cxfm-8j5v-5qr2))
Depending on your setup, manual intervention beyond installing the new versions
may be required, so please read the more detailed information in the
[release blog post](https://icinga.com/blog/2021/08/19/icinga-2-13-1-security-release//)
carefully
### Bugfixes
* IDO PgSQL: Fix a string quoting regression introduced in 2.13.0 #8958
* ApiListener: Automatically fall back to IPv4 in default configuration on systems without IPv6 support #8961
## 2.13.0 (2021-08-03)
[Issues and PRs](https://github.com/Icinga/icinga2/issues?utf8=%E2%9C%93&q=milestone%3A2.13.0)
### Notes
Upgrading docs: https://icinga.com/docs/icinga2/snapshot/doc/16-upgrading-icinga-2/#upgrading-to-v213
Thanks to all contributors:
[andygrunwald](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Aandygrunwald+milestone%3A2.13.0),
[BausPhi](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3ABausPhi+milestone%3A2.13.0),
[bebehei](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Abebehei+milestone%3A2.13.0),
[Bobobo-bo-Bo-bobo](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3ABobobo-bo-Bo-bobo+milestone%3A2.13.0),
[efuss](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Aefuss+milestone%3A2.13.0),
[froehl](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Afroehl+milestone%3A2.13.0),
[iustin](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Aiustin+milestone%3A2.13.0),
[JochenFriedrich](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3AJochenFriedrich+milestone%3A2.13.0),
[leeclemens](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Aleeclemens+milestone%3A2.13.0),
[log1-c](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Alog1-c+milestone%3A2.13.0),
[lyknode](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Alyknode+milestone%3A2.13.0),
[m41kc0d3](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Am41kc0d3+milestone%3A2.13.0),
[MarcusCaepio](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3AMarcusCaepio+milestone%3A2.13.0),
[mathiasaerts](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Amathiasaerts+milestone%3A2.13.0),
[mcktr](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Amcktr+milestone%3A2.13.0),
[MEschenbacher](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3AMEschenbacher+milestone%3A2.13.0),
[Napsty](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3ANapsty+milestone%3A2.13.0),
[netson](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Anetson+milestone%3A2.13.0),
[pdolinic](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Apdolinic+milestone%3A2.13.0),
[Ragnra](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3ARagnra+milestone%3A2.13.0),
[RincewindsHat](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3ARincewindsHat+milestone%3A2.13.0),
[sbraz](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Asbraz+milestone%3A2.13.0),
[sni](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Asni+milestone%3A2.13.0),
[sysadt](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Asysadt+milestone%3A2.13.0),
[XnS](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3AXnS+milestone%3A2.13.0),
[yayayayaka](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Ayayayayaka+milestone%3A2.13.0)
### Enhancements
* Core
* PerfdataValue: Add units of measurement #7871
* Flapping: Allow to ignore states in flapping detection #8600
* Cluster
* Display log message if two nodes run on incompatible versions #8088
* API
* /v1/actions/remove-downtime: Also remove child downtimes #8913
* Add API endpoint: /v1/actions/execute-command #8040
* /v1/actions/add-comment: Add param expiry #8035
* API-Event StateChange & CheckResult: Add acknowledgement and downtime_depth #7736
* Implement new API events ObjectCreated, ObjectDeleted and ObjectModified #8083
* Implement scheduling_endpoint attribute to checkable #6326
* Windows
* Add support for Windows Event Log and write early log messages to it #8710
* IDO
* MySQL: support larger host and service names #8425
* ITL
* Add -S parameter for esxi_hardware ITL #8814
* Add CheckCommands for Thola #8683
* Add option ignore-sct for ssl_cert to ITL #8625
* Improve check_dns command when used with monitoring-plugins 2.3 #8589
* Add parameter -f to snmp-process #8569
* Add systemd CheckCommand #8568
* Add new options for ipmi-sensor #8498
* check_snmp_int: support -a #8003
* check_fail2ban: Add parameter fail2ban_jail to monitor a specific jail only #7960
* check_nrpe: Add parameters needed for PKI usage #7907
* Metrics
* Support InfluxDB 2.0 #8719
* Add support for InfluxDB basic auth #8314
* Docs
* Add info about ongoing support for IDO #8446
* Improve instructions on how to setup a Windows dev env #8400
* Improve instructions for installing wixtoolset on Windows #8397
* Add section about usage of satellites #8458
* Document command for verifying the parent node's certificate #8221
* Clarify TimePeriod/ScheduledDowntime time zone handling #8001
* Misc
* Support TLS 1.3 #8718
* Livestatus: append app name to program_version #7931
* sd_notify() systemd about what we're doing right now #7874
### Bugfixes
* Core
* Fix state not being UNKNOWN after process timeout #8937
* Set a default severity for loggers #8846
* Fix integer overflow when converting large unsigned integers to string #8742
* StartUnixWorker(): don't exit() on fork() failure #8427
* Fix perf data parser not recognizing scientific notation #8492
* Close FDs based on /proc/self/fd #8442
* Fix check source getting overwritten on passive check result #8158
* Clean up temp files #8157
* Improve perf data parser to allow for special output (e.g. ASCII tables) #8008
* On check timeout first send SIGTERM #7918
* Cluster
* Drop passive check results for unreachable hosts/services #8267
* Fix state timestamps set by the same check result differing across nodes #8101
* API
* Do not override status codes that are not 200 #8532
* Update the SSL context after accepting incoming connections #8515
* Allow to create API User with password #8321
* Send Content-Type as API response header too #8108
* Display a correct status when removing a downtime #8104
* Display log message if a permission error occurs #8087
* Replace broken package name validation regex #8825 #8946
* Windows
* Fix Windows command escape for \" #7092
* Notifications/Downtimes
* Fix no re-notification for non OK state changes with time delay #8562
* TimePeriod/ScheduledDowntime: Improve DST handling #8921
* Don't send notifications while suppressed by checkable #8513
* Fix a crash while removing a downtime from a disappeared checkable #8229
* IDO
* Update program status on stop #8730
* Also mark objects inactive in memory on object deactivation #8626
* IdoCheckTask: Don't override checkable critical with warn state #8613
* PostgreSQL: Do not set standard_conforming_strings to off #8123
* ITL
* check_http: Fix assignment of check_adress blocking check by hostname #8109
* check_mysql: Don't set -H if -s is given #8020
* Metrics
* OpenTSDB-Writer: Remove incorrect space causing missing tag error #8245
## 2.12.5 (2021-07-15)
Version 2.12.5 fixes two security vulnerabilities that may lead to privilege
escalation for authenticated API users. Other improvements include several
bugfixes related to downtimes, downtime notifications, and more reliable
connection handling.
### Security
* Don't expose the PKI ticket salt via the API. This may lead to privilege
escalation for authenticated API users by them being able to request
certificates for other identities (CVE-2021-32739)
* Don't expose IdoMysqlConnection, IdoPgsqlConnection, IcingaDB, and
ElasticsearchWriter passwords via the API (CVE-2021-32743)
* Windows: Update bundled OpenSSL to version 1.1.1k #8885
Depending on your setup, manual intervention beyond installing the new versions
may be required, so please read the more detailed information in the
[release blog post](https://icinga.com/blog/2021/07/15/releasing-icinga-2-12-5-and-2-11-10/)
carefully.
### Bugfixes
* Don't send downtime end notification if downtime hasn't started #8877
* Don't let a failed downtime creation block the others #8863
* Support downtimes and comments for checkables with long names #8864
* Trigger fixed downtimes immediately if the current time matches
(instead of waiting for the timer) #8889
* Add configurable timeout for full connection handshake #8866
### Enhancements
* Replace existing downtimes on ScheduledDowntime change #8879
* Improve crashlog #8865
## 2.12.4 (2021-05-27)
Version 2.12.4 is a maintenance release that fixes some crashes, improves error handling
and adds compatibility for systems coming with newer Boost versions.
### Bugfixes
* Fix a crash when notification objects are deleted using the API #8782
* Fix crashes that might occur during downtime scheduling if host or downtime objects are deleted using the API #8785
* Fix an issue where notifications may incorrectly be skipped after a downtime ends #8775
* Don't send reminder notification if the notification is still suppressed by a time period #8808
* Fix an issue where attempting to create a duplicate object using the API
might result in the original object being deleted #8787
* IDO: prioritize program status updates #8809
* Improve exceptions handling, including a fix for an uncaught exception on Windows #8777
* Retry file rename operations on Windows to avoid intermittent locking issues #8771
### Enhancements
* Support Boost 1.74 (Ubuntu 21.04, Fedora 34) #8792
## 2.12.3 (2020-12-15)
Version 2.12.3 resolves a security vulnerability with revoked certificates being
renewed automatically ignoring the CRL.
This version also resolves issues with high load on Windows regarding the config sync
and not being able to disable/enable Icinga 2 features over the API.
### Security
* Fix that revoked certificates due for renewal will automatically be renewed ignoring the CRL (CVE-2020-29663)
When a CRL is specified in the ApiListener configuration, Icinga 2 only used it
when connections were established so far, but not when a certificate is requested.
This allows a node to automatically renew a revoked certificate if it meets the
other conditions for auto renewal (issued before 2017 or expires in less than 30 days).
Because Icinga 2 currently (v2.12.3 and earlier) uses a validity duration of 15 years,
this only affects setups with external certificate signing and revoked certificates
that expire in less then 30 days.
### Bugfixes
* Improve config sync locking - resolves high load issues on Windows #8511
* Fix runtime config updates being ignored for objects without zone #8549
* Use proper buffer size for OpenSSL error messages #8542
### Enhancements
* On checkable recovery: re-check children that have a problem #8506
## 2.12.2 (2020-12-01)
Version 2.12.2 fixes several issues to improve the reliability of the cluster functionality.
### Bugfixes
* Fix a connection leak with misconfigured agents #8483
* Properly sync changes of config objects in global zones done via the API #8474 #8470
* Prevent other clients from being disconnected when replaying the cluster log takes very long #8496
* Avoid duplicate connections between endpoints #8465
* Ignore incoming config object updates for unknown zones #8461
* Check timestamps before removing files in config sync #8495
### Enhancements
* Include HTTP status codes in log #8467
## 2.12.1 (2020-10-15)
Version 2.12.1 fixes several crashes, deadlocks and excessive check latencies.
It also addresses several bugs regarding IDO, API, notifications and checks.
### Bugfixes
* Core
* Fix crashes during config update #8348 #8345
* Fix crash while removing a downtime #8228
* Ensure the daemon doesn't get killed by logrotate #8170
* Fix hangup during shutdown #8211
* Fix a deadlock in Icinga DB #8168
* Clean up zombie processes during reload #8376
* Reduce check latency #8276
* IDO
* Prevent unnecessary IDO updates #8327 #8320
* Commit IDO MySQL transactions earlier #8349
* Make sure to insert IDO program status #8330
* Improve IDO queue stats logging #8271 #8328 #8379
* Misc
* Ensure API connections are closed properly #8293
* Prevent unnecessary notifications #8299
* Don't skip null values of command arguments #8174
* Fix Windows .exe version #8234
* Reset Icinga check warning after successful config update #8189
## 2.12.0 (2020-08-05)
[Issue and PRs](https://github.com/Icinga/icinga2/issues?utf8=%E2%9C%93&q=milestone%3A2.12.0)
### Notes
Upgrading docs: https://icinga.com/docs/icinga2/snapshot/doc/16-upgrading-icinga-2/#upgrading-to-v212
Thanks to all contributors:
[Ant1x](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3AAnt1x+milestone%3A2.12.0),
[azthec](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Aazthec+milestone%3A2.12.0),
[baurmatt](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Abaurmatt+milestone%3A2.12.0),
[bootc](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Abootc+milestone%3A2.12.0),
[Foxeronie](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3AFoxeronie+milestone%3A2.12.0),
[ggzengel](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Aggzengel+milestone%3A2.12.0),
[islander](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Aislander+milestone%3A2.12.0),
[joni1993](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Ajoni1993+milestone%3A2.12.0),
[KAMI911](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3AKAMI911+milestone%3A2.12.0),
[mcktr](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Amcktr+milestone%3A2.12.0),
[MichalMMac](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3AMichalMMac+milestone%3A2.12.0),
[sebastic](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Asebastic+milestone%3A2.12.0),
[sthen](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Asthen+milestone%3A2.12.0),
[unki](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Aunki+milestone%3A2.12.0),
[vigiroux](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Avigiroux+milestone%3A2.12.0),
[wopfel](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Awopfel+milestone%3A2.12.0)
### Breaking changes
* Deprecate Windows plugins in favor of our
[PowerShell plugins](https://github.com/Icinga/icinga-powershell-plugins) #8071
* Deprecate Livestatus #8051
* Refuse acknowledging an already acknowledged checkable #7695
* Config lexer: complain on EOF in heredocs, i.e. `{{{abc<EOF>` #7541
### Enhancements
* Core
* Implement new database backend: Icinga DB #7571
* Re-send notifications previously suppressed by their time periods #7816
* API
* Host/Service: Add `acknowledgement_last_change` and `next_update` attributes #7881 #7534
* Improve error message for POST queries #7681
* /v1/actions/remove-comment: let users specify themselves #7646
* /v1/actions/remove-downtime: let users specify themselves #7645
* /v1/config/stages: Add 'activate' parameter #7535
* CLI
* Add `pki verify` command for better TLS certificate troubleshooting #7843
* Add OpenSSL version to 'Build' section in --version #7833
* Improve experience with 'Node Setup for Agents/Satellite' #7835
* DSL
* Add `get_template()` and `get_templates()` #7632
* `MacroProcessor::ResolveArguments()`: skip null argument values #7567
* Fix crash due to dependency apply rule with `ignore_on_error` and non-existing parent #7538
* Introduce ternary operator (`x ? y : z`) #7442
* LegacyTimePeriod: support specifying seconds #7439
* Add support for Lambda Closures (`() use(x) => x and () use(x) => { return x }`) #7417
* ITL
* Add notemp parameter to oracle health #7748
* Add extended checks options to snmp-interface command template #7602
* Add file age check for Windows command definition #7540
* Docs
* Development: Update debugging instructions #7867
* Add new API clients #7859
* Clarify CRITICAL vs. UNKNOWN #7665
* Explicitly explain how to disable freshness checks #7664
* Update installation for RHEL/CentOS 8 and SLES 15 #7640
* Add Powershell example to validate the certificate #7603
* Misc
* Don't send `event::Heartbeat` to unauthenticated peers #7747
* OpenTsdbWriter: Add custom tag support #7357
### Bugfixes
* Core
* Fix JSON-RPC crashes #7532 #7737
* Fix zone definitions in zones #7546
* Fix deadlock during start on OpenBSD #7739
* Consider PENDING not a problem #7685
* Fix zombie processes after reload #7606
* Don't wait for checks to finish during reload #7894
* Cluster
* Fix segfault during heartbeat timeout with clients not yet signed #7970
* Make the config update process mutually exclusive (Prevents file system race conditions) #7936
* Fix `check_timeout` not being forwarded to agent command endpoints #7861
* Config sync: Use a more friendly message when configs are equal and don't need a reload #7811
* Fix open connections when agent waits for CA approval #7686
* Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836
* Send JsonRpcConnection heartbeat every 20s instead of 10s #8102
* Use JsonRpcConnection heartbeat only to update connection liveness (m\_Seen) #8142
* Fix TLS context not being updated on signed certificate messages on agents #7654
* API
* Close connections w/o successful TLS handshakes after 10s #7809
* Handle permission exceptions soon enough, returning 404 #7528
* SELinux
* Fix safe-reload #7858
* Allow direct SMTP notifications #7749
* Windows
* Terminate check processes with UNKNOWN state on timeout #7788
* Ensure that log replay files are properly renamed #7767
* Metrics
* Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765
* Always send 0 as value for thresholds #7696
* Scripts
* Fix notification scripts to stay compatible with Dash #7706
* Fix bash line continuation in mail-host-notification.sh #7701
* Fix notification scripts string comparison #7647
* Service and host mail-notifications: Add line-breaks to very long output #6822
* Set correct UTF-8 email subject header (RFC1342) #6369
* Misc
* DSL: Fix segfault due to passing null as custom function to `Array#{sort,map,reduce,filter,any,all}()` #8053
* CLI: `pki save-cert`: allow to specify --key and --cert for backwards compatibility #7995
* Catch exception when trusted cert is not readable during node setup on agent/satellite #7838
* CheckCommand ssl: Fix wrong parameter `-N` #7741
* Code quality fixes
* Small documentation fixes
## 2.12.0 RC1 (2020-03-13)
[Issue and PRs](https://github.com/Icinga/icinga2/issues?utf8=%E2%9C%93&q=milestone%3A2.12.0)
### Notes
Upgrading docs: https://icinga.com/docs/icinga2/snapshot/doc/16-upgrading-icinga-2/#upgrading-to-v212
Thanks to all contributors:
[Ant1x](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3AAnt1x+milestone%3A2.12.0),
[azthec](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Aazthec+milestone%3A2.12.0),
[baurmatt](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Abaurmatt+milestone%3A2.12.0),
[bootc](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Abootc+milestone%3A2.12.0),
[Foxeronie](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3AFoxeronie+milestone%3A2.12.0),
[ggzengel](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Aggzengel+milestone%3A2.12.0),
[islander](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Aislander+milestone%3A2.12.0),
[joni1993](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Ajoni1993+milestone%3A2.12.0),
[KAMI911](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3AKAMI911+milestone%3A2.12.0),
[mcktr](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Amcktr+milestone%3A2.12.0),
[MichalMMac](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3AMichalMMac+milestone%3A2.12.0),
[sebastic](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Asebastic+milestone%3A2.12.0),
[sthen](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Asthen+milestone%3A2.12.0),
[unki](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Aunki+milestone%3A2.12.0),
[vigiroux](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Avigiroux+milestone%3A2.12.0),
[wopfel](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Awopfel+milestone%3A2.12.0),
### Breaking changes
* Refuse acknowledging an already acknowledged checkable #7695
* Config lexer: complain on EOF in heredocs, i.e. `{{{abc<EOF>` #7541
### Enhancements
* Core
* Implement new database backend: Icinga DB #7571
* API
* Host/Service: Add `acknowledgement_last_change` and `next_update` attributes #7881 #7534
* Improve error message for POST queries #7681
* /v1/actions/remove-comment: let users specify themselves #7646
* /v1/actions/remove-downtime: let users specify themselves #7645
* /v1/config/stages: Add 'activate' parameter #7535
* CLI
* Add `pki verify` command for better TLS certificate troubleshooting #7843
* Add OpenSSL version to 'Build' section in --version #7833
* Improve experience with 'Node Setup for Agents/Satellite' #7835
* DSL
* Add `get_template()` and `get_templates()` #7632
* `MacroProcessor::ResolveArguments()`: skip null argument values #7567
* Fix crash due to dependency apply rule with `ignore_on_error` and non-existing parent #7538
* Introduce ternary operator (`x ? y : z`) #7442
* LegacyTimePeriod: support specifying seconds #7439
* Add support for Lambda Closures (`() use(x) => x and () use(x) => { return x }`) #7417
* ITL
* Add notemp parameter to oracle health #7748
* Add extended checks options to snmp-interface command template #7602
* Add file age check for Windows command definition #7540
* Docs
* Development: Update debugging instructions #7867
* Add new API clients #7859
* Clarify CRITICAL vs. UNKNOWN #7665
* Explicitly explain how to disable freshness checks #7664
* Update installation for RHEL/CentOS 8 and SLES 15 #7640
* Add Powershell example to validate the certificate #7603
* Misc
* Don't send `event::Heartbeat` to unauthenticated peers #7747
* OpenTsdbWriter: Add custom tag support #7357
### Bugfixes
* Core
* Fix JSON-RPC crashes #7532 #7737
* Fix zone definitions in zones #7546
* Fix deadlock during start on OpenBSD #7739
* Consider PENDING not a problem #7685
* Fix zombie processes after reload #7606
* Cluster
* Fix `check_timeout` not being forwarded to agent command endpoints #7861
* Config sync: Use a more friendly message when configs are equal and don't need a reload #7811
* Fix open connections when agent waits for CA approval #7686
* Fix TLS context not being updated on signed certificate messages on agents #7654
* API
* Close connections w/o successful TLS handshakes after 10s #7809
* Handle permission exceptions soon enough, returning 404 #7528
* SELinux
* Fix safe-reload #7858
* Allow direct SMTP notifications #7749
* Windows
* Terminate check processes with UNKNOWN state on timeout #7788
* Ensure that log replay files are properly renamed #7767
* Metrics
* Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765
* Always send 0 as value for thresholds #7696
* Scripts
* Fix notification scripts to stay compatible with Dash #7706
* Fix bash line continuation in mail-host-notification.sh #7701
* Fix notification scripts string comparison #7647
* Service and host mail-notifications: Add line-breaks to very long output #6822
* Set correct UTF-8 email subject header (RFC1342) #6369
* Misc
* Catch exception when trusted cert is not readable during node setup on agent/satellite #7838
* CheckCommand ssl: Fix wrong parameter `-N` #7741
* Code quality fixes
* Small documentation fixes
## 2.11.11 (2021-08-19)
The main focus of these versions is a security vulnerability in the TLS certificate verification of our metrics writers ElasticsearchWriter, GelfWriter and InfluxdbWriter.
### Security
* Add TLS server certificate validation to ElasticsearchWriter, GelfWriter and InfluxdbWriter
Depending on your setup, manual intervention beyond installing the new versions
may be required, so please read the more detailed information in the
[release blog post](https://icinga.com/blog/2021/08/19/icinga-2-13-1-security-release//)
carefully
## 2.11.10 (2021-07-15)
Version 2.11.10 fixes two security vulnerabilities that may lead to privilege
escalation for authenticated API users. Other improvements include several
bugfixes related to downtimes, downtime notifications, and more reliable
connection handling.
### Security
* Don't expose the PKI ticket salt via the API. This may lead to privilege
escalation for authenticated API users by them being able to request
certificates for other identities (CVE-2021-32739)
* Don't expose IdoMysqlConnection, IdoPgsqlConnection, and ElasticsearchWriter
passwords via the API (CVE-2021-32743)
* Windows: Update bundled OpenSSL to version 1.1.1k #8888
Depending on your setup, manual intervention beyond installing the new versions
may be required, so please read the more detailed information in the
[release blog post](https://icinga.com/blog/2021/07/15/releasing-icinga-2-12-5-and-2-11-10/)
carefully.
### Bugfixes
* Don't send downtime end notification if downtime hasn't started #8878
* Don't let a failed downtime creation block the others #8871
* Support downtimes and comments for checkables with long names #8870
* Trigger fixed downtimes immediately if the current time matches
(instead of waiting for the timer) #8891
* Add configurable timeout for full connection handshake #8872
### Enhancements
* Replace existing downtimes on ScheduledDowntime change #8880
* Improve crashlog #8869
## 2.11.9 (2021-05-27)
Version 2.11.9 is a maintenance release that fixes some crashes, improves error handling
and adds compatibility for systems coming with newer Boost versions.
### Bugfixes
* Fix a crash when notification objects are deleted using the API #8780
* Fix crashes that might occur during downtime scheduling if host or downtime objects are deleted using the API #8784
* Fix an issue where notifications may incorrectly be skipped after a downtime ends #8772
* Fix an issue where attempting to create a duplicate object using the API
might result in the original object being deleted #8788
* IDO: prioritize program status updates #8810
* Improve exceptions handling, including a fix for an uncaught exception on Windows #8776
* Retry file rename operations on Windows to avoid intermittent locking issues #8770
### Enhancements
* Support Boost 1.74 (Ubuntu 21.04, Fedora 34) #8793 #8802
## 2.11.8 (2020-12-15)
Version 2.11.8 resolves a security vulnerability with revoked certificates being
renewed automatically ignoring the CRL.
This version also resolves issues with high load on Windows regarding the config sync
and not being able to disable/enable Icinga 2 features over the API.
### Security
* Fix that revoked certificates due for renewal will automatically be renewed ignoring the CRL (CVE-2020-29663)
When a CRL is specified in the ApiListener configuration, Icinga 2 only used it
when connections were established so far, but not when a certificate is requested.
This allows a node to automatically renew a revoked certificate if it meets the
other conditions for auto renewal (issued before 2017 or expires in less than 30 days).
Because Icinga 2 currently (v2.12.3 and earlier) uses a validity duration of 15 years,
this only affects setups with external certificate signing and revoked certificates
that expire in less then 30 days.
### Bugfixes
* Improve config sync locking - resolves high load issues on Windows #8510
* Fix runtime config updates being ignored for objects without zone #8550
* Use proper buffer size for OpenSSL error messages #8543
### Enhancements
* On checkable recovery: re-check children that have a problem #8560
## 2.11.7 (2020-12-01)
Version 2.11.7 fixes several issues to improve the reliability of the cluster functionality.
### Bugfixes
* Fix a connection leak with misconfigured agents #8482
* Properly sync changes of config objects in global zones done via the API #8473 #8457
* Prevent other clients from being disconnected when replaying the cluster log takes very long #8475
* Avoid duplicate connections between endpoints #8399
* Ignore incoming config object updates for unknown zones #8459
* Check timestamps before removing files in config sync #8486
### Enhancements
* Include HTTP status codes in log #8454
## 2.11.6 (2020-10-15)
Version 2.11.6 fixes several crashes, prevents unnecessary notifications
and addresses several bugs in IDO and API.
### Bugfixes
* Crashes
* Fix crashes during config update #8337 #8308
* Fix crash while removing a downtime #8226
* Ensure the daemon doesn't get killed by logrotate #8227
* IDO
* Prevent unnecessary IDO updates #8316 #8305
* Commit IDO MySQL transactions earlier #8298
* Make sure to insert IDO program status #8291
* Improve IDO queue stats logging #8270 #8325 #8378
* API
* Ensure API connections are closed properly #8292
* Fix open connections when agent waits for CA approval #8230
* Close connections without successful TLS handshakes within 10s #8224
* Misc
* Prevent unnecessary notifications #8300
* Fix Windows .exe version #8235
* Reset Icinga check warning after successful config update #8225
## 2.11.5 (2020-08-05)
Version 2.11.5 fixes file system race conditions
in the config update process occurring in large HA environments
and improves the cluster connection liveness mechanisms.
### Bugfixes
* Make the config update process mutually exclusive (Prevents file system race conditions) #8093
* Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094
* Send JsonRpcConnection heartbeat every 20s instead of 10s #8103
* Use JsonRpcConnection heartbeat only to update connection liveness (m\_Seen) #8097
## 2.11.4 (2020-06-18)
Version 2.11.4 fixes a crash during a heartbeat timeout with clients not yet signed. It also resolves
an issue with endpoints not reconnecting after a reload/deploy, which caused a lot of UNKNOWN states.
### Bugfixes
* Cluster
* Fix segfault during heartbeat timeout with clients not yet signed #7997
* Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043
* Setup
* Fix exception on trusted cert not readable during node setup #8044
* prepare-dirs: Only set permissions during directory creation #8046
* DSL
* Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054
## 2.11.3 (2020-03-02)
The 2.11.3 release fixes a critical crash in our JSON-RPC connections. This mainly affects large HA
enabled environments.
### Bugfixes
* Cluster
* JSON-RPC Crashes with 2.11 #7532
## 2.11.2 (2019-10-24)
2.11.2 fixes a problem where the newly introduced config sync "check-change-then-reload" functionality
could cause endless reload loops with agents. The most visible parts are failing command endpoint checks
with "not connected" UNKNOWN state. **Only applies to HA enabled zones with 2 masters and/or 2 satellites.**
### Bugfixes
* Cluster Config Sync
* Config sync checksum change detection may not work within high load HA clusters #7565
## 2.11.1 (2019-10-17)
This release fixes a hidden long lasting bug unveiled with 2.11 and distributed setups.
If you are affected by agents/satellites not accepting configuration
anymore, or not reloading, please upgrade.
### Bugfixes
* Cluster Config Sync
* Never accept authoritative config markers from other instances #7552
* This affects setups where agent/satellites are newer than the config master, e.g. satellite/agent=2.11.0, master=2.10.
* Configuration
* Error message for `command_endpoint` should hint that zone is not set #7514
* Global variable 'ActiveStageOverride' has been set implicitly via 'ActiveStageOverride ... #7521
### Documentation
* Docs: Add upgrading/troubleshooting details for repos, config sync, agents #7526
* Explain repository requirements for 2.11: https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#added-boost-166
* `command_endpoint` objects require a zone: https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#agent-hosts-with-command-endpoint-require-a-zone
* Zones declared in zones.d are not loaded anymore: https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#config-sync-zones-in-zones
## 2.11.0 (2019-09-19)
[Issue and PRs](https://github.com/Icinga/icinga2/issues?utf8=%E2%9C%93&q=milestone%3A2.11.0)
### Notes
Upgrading docs: https://icinga.com/docs/icinga2/snapshot/doc/16-upgrading-icinga-2/
Thanks to all contributors: [Obihoernchen](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3AObihoernchen), [dasJ](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3AdasJ), [sebastic](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Asebastic), [waja](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Awaja), [BarbUk](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3ABarbUk), [alanlitster](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Aalanlitster), [mcktr](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Amcktr), [KAMI911](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3AKAMI911), [peteeckel](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Apeteeckel), [breml](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Abreml), [episodeiv](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Aepisodeiv), [Crited](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3ACrited), [robert-scheck](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Arobert-scheck), [west0rmann](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Awest0rmann), [Napsty](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3ANapsty), [Elias481](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3AElias481), [uubk](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Auubk), [miso231](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Amiso231), [neubi4](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Aneubi4), [atj](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Aatj), [mvanduren-itisit](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Amvanduren-itisit), [jschanz](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Ajschanz), [MaBauMeBad](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3AMaBauMeBad), [markleary](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Amarkleary), [leeclemens](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Aleeclemens), [m4k5ym](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Am4k5ym)
### Enhancements
* Core
* Rewrite Network Stack (cluster, REST API) based on Boost Asio, Beast, Coroutines
* Technical concept: #7041
* Requires package updates: Boost >1.66 (either from packages.icinga.com, EPEL or backports). SLES11 & Ubuntu 14 are EOL.
* Require TLS 1.2 and harden default cipher list
* Improved Reload Handling (umbrella process, now 3 processes at runtime)
* Support running Icinga 2 in (Docker) containers natively in foreground
* Quality: Use Modern JSON for C++ library instead of YAJL (dead project)
* Quality: Improve handling of invalid UTF8 strings
* API
* Fix crashes on Linux, Unix and Windows from Nessus scans #7431
* Locks and stalled waits are fixed with the core rewrite in #7071
* schedule-downtime action supports `all_services` for host downtimes
* Improve storage handling for runtime created objects in the `_api` package
* Cluster
* HA aware features & improvements for failover handling #2941 #7062
* Improve cluster config sync with staging #6716
* Fixed that same downtime/comment objects would be synced again in a cluster loop #7198
* Checks & Notifications
* Ensure that notifications during a restart are sent
* Immediately notify about a problem after leaving a downtime and still NOT-OK
* Improve reload handling and wait for features/metrics
* Store notification command results and sync them in HA enabled zones #6722
* DSL/Configuration
* Add getenv() function
* Fix TimePeriod range support over midnight
* `concurrent_checks` in the Checker feature has no effect, use the global MaxConcurrentChecks constant instead
* CLI
* Permissions: node wizard/setup, feature, api setup now run in the Icinga user context, not root
* `ca list` shows pending CSRs by default, `ca remove/restore` allow to delete signing requests
* ITL
* Add new commands and missing attributes
* Windows
* Update bundled NSClient++ to 0.5.2.39
* Refine agent setup wizard & update requirements to .NET 4.6
* Documentation
* Service Monitoring: How to create plugins by example, check commands and a modern version of the supported plugin API with best practices
* Features: Better structure on metrics, and supported features
* Technical Concepts: TLS Network IO, Cluster Feature HA, Cluster Config Sync
* Development: Rewritten for better debugging and development experience for contributors including a style guide. Add nightly build setup instructions.
* Packaging: INSTALL.md was integrated into the Development chapter, being available at https://icinga.com/docs too.
## 2.11.0 RC1 (2019-07-25)
[Issue and PRs](https://github.com/Icinga/icinga2/issues?utf8=%E2%9C%93&q=milestone%3A2.11.0)
### Notes
**This is the first release candidate for 2.11.**
Upgrading docs: https://icinga.com/docs/icinga2/snapshot/doc/16-upgrading-icinga-2/
Thanks to all contributors: [BarbUk](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3ABarbUk), [alanlitster](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Aalanlitster), [mcktr](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Amcktr), [KAMI911](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3AKAMI911), [peteeckel](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Apeteeckel), [breml](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Abreml), [episodeiv](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Aepisodeiv), [Crited](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3ACrited), [robert-scheck](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Arobert-scheck), [west0rmann](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Awest0rmann), [Napsty](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3ANapsty), [Elias481](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3AElias481), [uubk](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Auubk), [miso231](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Amiso231), [neubi4](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Aneubi4), [atj](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Aatj), [mvanduren-itisit](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Amvanduren-itisit), [jschanz](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Ajschanz), [MaBauMeBad](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3AMaBauMeBad), [markleary](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Amarkleary), [leeclemens](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Aleeclemens), [m4k5ym](https://github.com/Icinga/icinga2/pulls?q=is%3Apr+author%3Am4k5ym)
### Enhancements
* Core
* Rewrite Network Stack (cluster, REST API) based on Boost Asio, Beast, Coroutines
* Technical concept: #7041
* Requires package updates: Boost >1.66 (either from packages.icinga.com, EPEL or backports). SLES11 & Ubuntu 14 are EOL.
* Require TLS 1.2 and harden default cipher list
* Improved Reload Handling (umbrella process, now 3 processes at runtime)
* Support running Icinga 2 in (Docker) containers natively in foreground
* Quality: Use Modern JSON for C++ library instead of YAJL (dead project)
* Quality: Improve handling of invalid UTF8 strings
* API
* Fix crashes and problems with permission filters from recent Namespace introduction #6785 (thanks Elias Ohm) #6874 (backported to 2.10.5)
* Locks and stalled waits are fixed with the core rewrite in #7071
* schedule-downtime action supports `all_services` for host downtimes
* Improve storage handling for runtime created objects in the `_api` package
* Cluster
* HA aware features & improvements for failover handling #2941 #7062
* Improve cluster config sync with staging #6716