1 Mar
2023
1 Mar
'23
5:02 p.m.
Branch: refs/heads/master
Home: https://github.com/tribe29/checkmk
Commit: b2ff74b5eab2ff756eeff35ef0e4f57af1f19aea
https://github.com/tribe29/checkmk/commit/b2ff74b5eab2ff756eeff35ef0e4f57af…
Author: Solomon Jacobs <solomon.jacobs(a)tribe29.com>
Date: 2023-03-01 (Wed, 01 Mar 2023)
Changed paths:
M checks/agent_gcp_status
M cmk/base/plugins/agent_based/gcp_health.py
M cmk/gui/plugins/wato/check_parameters/gcp.py
M cmk/special_agents/agent_gcp_status.py
M tests/unit/agents/special/test_special_agent_args.py
M tests/unit/checks/test_agent_gcp_status.py
M tests/unit/cmk/base/plugins/agent_based/test_gcp_health.py
M tests/unit/cmk/special_agents/test_agent_gcp_status.py
Log Message:
-----------
remove rule: GCP Health
GCP, Azure and AWS should all be configured in the same way, when it
comes to monitoring the public feed available via their health
dashboards.
In this change, we delete the rule
- time_window option is permanently removed. This is superseded by
by simply checking whether the entries are older then 3 days.
- product_filter is permanently removed.
- regex mechanism is removed. This mechanism will be superseded by
a discovery rule, which only deals with a static set of regions.
- unit-tests are temporarily disabled, until the new behaviour is
implemented.
CMK-8322
Change-Id: I5e22ced60c4a62d88947c84f2622172255a53801
Commit: 6f7d0f90b62e7d501a7d2f39d4482a80a36bfc39
https://github.com/tribe29/checkmk/commit/6f7d0f90b62e7d501a7d2f39d4482a80a…
Author: Solomon Jacobs <solomon.jacobs(a)tribe29.com>
Date: 2023-03-01 (Wed, 01 Mar 2023)
Changed paths:
M cmk/base/plugins/agent_based/gcp_health.py
M cmk/special_agents/agent_gcp_status.py
M tests/unit/cmk/special_agents/test_agent_gcp_status.py
Log Message:
-----------
turn gcp_health section into JSON
GCP, Azure and AWS should all be configured in the same way, when it
comes to monitoring the public feed available via their health
dashboards.
In this change, we make the agent output more declaritive by using
pydantic. This is necessary to make the section more extendable.
CMK-8322
Change-Id: I0ec5d3121ca4300e021f9af6e7b0462f70fc9ec0
Commit: 57c2426c909a651c07d786cb87625f3c1c617d74
https://github.com/tribe29/checkmk/commit/57c2426c909a651c07d786cb87625f3c1…
Author: Solomon Jacobs <solomon.jacobs(a)tribe29.com>
Date: 2023-03-01 (Wed, 01 Mar 2023)
Changed paths:
M checkman/gcp_health
M checks/agent_gcp_status
M cmk/base/plugins/agent_based/gcp_health.py
M cmk/gui/plugins/wato/special_agents/gcp_status.py
M cmk/special_agents/agent_gcp_status.py
A cmk/utils/gcp_constants.py
M tests/unit/checks/test_agent_gcp_status.py
M tests/unit/cmk/special_agents/test_agent_gcp_status.py
Log Message:
-----------
gcp_status: add regions to monitor option
GCP, Azure and AWS should all be configured in the same way, when it
comes to monitoring the public feed available via their health
dashboards.
In this change, we re-enable region specific monitoring.
One service per region is discovered.
CMK-8322
Change-Id: I71dd1dcef2ae3ad8576997b495ef863d18e8c6d9
Commit: 0bd5533ca835981070635e82f39ad9890473876e
https://github.com/tribe29/checkmk/commit/0bd5533ca835981070635e82f39ad9890…
Author: Maximilian Wirtz <maximilian.wirtz(a)tribe29.com>
Date: 2023-03-01 (Wed, 01 Mar 2023)
Changed paths:
A .werks/15067
M cmk/gui/userdb/htpasswd.py
M tests/unit/cmk/gui/test_userdb.py
M tests/unit/cmk/gui/test_userdb_htpasswd_connector.py
Log Message:
-----------
15067 FIX Show if user is locked
With this Werk a user that is locked will be informed that the account is locked.
Previously it was only shown that the login was invalid and lead users to more login
attempts.
Change-Id: Ib0ce93636654c673413c316c68c66b629ec09428
Commit: f3da23157513fcbc3283164cbb56f6c074dfa5df
https://github.com/tribe29/checkmk/commit/f3da23157513fcbc3283164cbb56f6c07…
Author: Maximilian Wirtz <maximilian.wirtz(a)tribe29.com>
Date: 2023-03-01 (Wed, 01 Mar 2023)
Changed paths:
A .werks/15068
Log Message:
-----------
15068 SEC Fix improper certificate validation in agent updater
The compiled version of the agent-updater uses its own collection of trusted Certificate
Authorities.
This collection comes from the Python package certifi and is based on the collection of
Mozilla Firefox.
The used Python package and therefore the collection was outdated and is subject to
CVE-2022-23491.
This collection included a CA certificate of TrustCor which is not considered trustworthy
anymore.
(See:
https://security.googleblog.com/2023/01/sustaining-digital-certificate-secu…)
If an attacker was able to create certificates for arbitrary domains signed by this CA,
machine-in-the-middle attacks could be possible.
To mitigate this vulnerability please update and rollout the agent-updater (typical
agent-update is sufficient).
If an update is currently not possible one can set the <tt>Certificates for HTTPS
verification</tt> option for the agent updater.
If this option is set a custom list of trusted certificates is used to verify the HTTPS
connection instead of the CA collection.
All versions up to 1.6 are vulnerable.
This vulnerability was found internally.
We calculated a CVSS 3.1 score of 6.2 (medium) with the following vector:
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:R
Please note that we rate this rather low since this is more a hypothetical attack and no
wrong-doing of the CA was ever proven.
Change-Id: Ia23359a5fb9e3f1fd92b6d1d777e82d85229efe6
Commit: 093c0d532172270cf5eb23352d829ba3b080af63
https://github.com/tribe29/checkmk/commit/093c0d532172270cf5eb23352d829ba3b…
Author: Sven Panne <sven.panne(a)tribe29.com>
Date: 2023-03-01 (Wed, 01 Mar 2023)
Changed paths:
M livestatus/src/.gitignore
Log Message:
-----------
Sync .gitignore with Makefile.am again.
Change-Id: I4c6ff811a9873ed73c0911a0432cd620ee206b6b
Commit: 5c48d049a906e2123c029e95926d928f2d82285a
https://github.com/tribe29/checkmk/commit/5c48d049a906e2123c029e95926d928f2…
Author: Marcel Arentz <marcel.arentz(a)tribe29.com>
Date: 2023-03-01 (Wed, 01 Mar 2023)
Changed paths:
R .werks/13628
M tests/unit/cmk/gui/test_permissions.py
Log Message:
-----------
Revert "13628 Dashboards: New cloud dashboards for storage services on AWS, Azure
and GCP"
This reverts commit 29762bb071c250927361ddcf0b695fd6a1aa29f9.
Reason for revert: needed graph_definitions are not yet implemented
Change-Id: I8bff499814fc02a6e1c9ceee30f4a890c29c84b0
Commit: bdd41615acd24d874e3f37325cb7b35ed1bb6cd3
https://github.com/tribe29/checkmk/commit/bdd41615acd24d874e3f37325cb7b35ed…
Author: Solomon Jacobs <solomon.jacobs(a)tribe29.com>
Date: 2023-03-01 (Wed, 01 Mar 2023)
Changed paths:
R checkman/gcp_health
A checkman/gcp_status
R cmk/base/plugins/agent_based/gcp_health.py
A cmk/base/plugins/agent_based/gcp_status.py
M cmk/gui/plugins/wato/special_agents/gcp.py
M cmk/special_agents/agent_gcp_status.py
R tests/unit/cmk/base/plugins/agent_based/test_gcp_health.py
A tests/unit/cmk/base/plugins/agent_based/test_gcp_status.py
M tests/unit/cmk/special_agents/test_agent_gcp_status.py
Log Message:
-----------
GCP Health -> GCP Status
Also, delete a useless rulespec.
Change-Id: I38e262bf4f8409aac15cd26d04701169c35dec59
Commit: 8edc9e6ac867fa0f74b79672ee972a7324db6b87
https://github.com/tribe29/checkmk/commit/8edc9e6ac867fa0f74b79672ee972a732…
Author: Solomon Jacobs <solomon.jacobs(a)tribe29.com>
Date: 2023-03-01 (Wed, 01 Mar 2023)
Changed paths:
A .werks/14586
Log Message:
-----------
14586 gcp_status: Monitor GCP Status
With this werk, it is possible to monitor the GCP Health Dashboard,
available at https://status.cloud.google.com/. Since this
site is publicly available, no authentication is required for this
monitoring.
This feature consists of a special agent, agent_gcp_status, and a new
check, gcp_status. The special agent can be configured via the rule
Google Cloud Platform (GCP) Status.
Change-Id: I31aa028cbb508571f53ef9aaa42732aa09547641
Commit: 3d3de31ac26bd2f5e29a5d37a0d4a6c7ce1f2a73
https://github.com/tribe29/checkmk/commit/3d3de31ac26bd2f5e29a5d37a0d4a6c7c…
Author: Solomon Jacobs <solomon.jacobs(a)tribe29.com>
Date: 2023-03-01 (Wed, 01 Mar 2023)
Changed paths:
M .werks/14582
Log Message:
-----------
Update werk
CMK-8322
Change-Id: I1dfe096a0161110e5144830410832af7bcf48d71
Compare: https://github.com/tribe29/checkmk/compare/a48ca88c58f5...3d3de31ac26b