ID: 11787
Title: Kubernetes: add support for newer versions
Component: Checks & agents
Level: 2
Class: Bug fix
Version: 2.1.0i1
This werk adds support for new versions of Kubernetes.
Filesystem and interface check plugins are not available
at the moment and will result in vanished services. We
are working on an alternative solution to fix this issue.
ID: 11469
Title: Windows agent removes legacy agent on install if this is requested by WATO
Component: Checks & agents
Level: 2
Class: Bug fix
Version: 2.1.0i1
Previously, Windows agent tried to remove the legacy agent too early, i.e. before full config file from WATO
had been deployed in the target system, thus ignoring the rule "Remove legacy agent".
With this release the error has been fixed.
ID: 11747
Title: Fix stored XSS triggered by received syslog messages
Component: Event Console
Level: 2
Class: Security fix
Version: 2.1.0i1
You are only affected by this issue in case you use the Event Console.
An attacker could send messages to the Event Console, e.g. via syslog,
containing arbitrary HTML code. This was executed in the browser context of any
user viewing the event in the Checkmk user interface.
The information is now properly escaped in a generic way to prevent these
issues.
ID: 10129
Title: Fixed WaitObject regression in Livestatus queries
Component: Livestatus
Level: 3
Class: Bug fix
Version: 2.1.0i1
There are 2 Livestatus tables consisting only of a single row:
"status" and "eventconsolestatus". You can't specify a WaitObject
for them (they have no primary key), so you leave this header out
when using WaitCondition/WaitTimeout/... on these single-row tables.
This special case was broken in early 2.0 versions and has been fixed.
ID: 10292
Title: REST-API: fixed endpoints issuing LiveStatus commands
Component: Core & setup
Level: 2
Class: Bug fix
Version: 2.0.0i2
The endpoints didn't use the correct site before, so they
resorted to a default site named "local", which most probably
doesn't exist. The endpoints now take the correct site to
send the commands to. No further action is required.
ID: 11709
Title: New Inline SNMP Backend
Component: inline-snmp
Level: 2
Class: New feature
Version: 2.0.0i2
We introduce a new SNMP Backend now called Inline SNMP Backend.
If you are using the Enterprise Edition it is active by default.
This new Backend supersedes the old Inline SNMP Backend which used the
NetSNMP Python Bindings, now we use the PySNMP library.
Note: The old Inline SNMP Backend is still available and can be selected
via "Inline (legacy)" but please inform us if you have issues with the new
Backend so we can resolve them. The Legacy Inline SNMP Backend will be
removed sooner or later.
ID: 11675
Title: Developer option: --detect-plugins
Component: Checks & agents
Level: 2
Class: New feature
Version: 2.0.0i2
This werk adds the new commandline option "<tt>--detect-plugins</tt>" to the <tt>cmk -I my_host</tt>,
<tt>cmk -i my_host</tt> and <tt>cmk my_host</tt> commands.
It is compatible to the previous "--checks" option, which will still work.
Setting this option to a comma separated list of plugin names will have the effect that the specified
command (that is, checking, inventory or discovery) will only be done for the provided plugins,
in the same way "--plugins" would.
In addition, checkmk makes a besst effort guess which sections should be fetched, that is:
It sets the "--detect-sections" option to all sections that may be needed for the provided plugins.
ID: 11674
Title: Developer option: --plugins
Component: Checks & agents
Level: 2
Class: New feature
Version: 2.0.0i2
This werk adds the new commandline option "<tt>--plugins</tt>" to the <tt>cmk -I my_host</tt>,
<tt>cmk -i my_host</tt> and <tt>cmk my_host</tt> commands.
Setting this option to a comma separated list of pluing names will have the effect that the specified
command (that is, checking, inventory or discovery) will only be done for the provided plugins.
Unlike the deprecated "--checks" option (see werk 11675) this will have no effect on the fetching
process whatsoever.
For instance if you execute <tt>cmk -i --plugins mem my_host</tt>, the inventory plugin <i>mem</i>
will be executed (and nothing else).
ID: 11673
Title: Developer option: --detect-sections
Component: Checks & agents
Level: 2
Class: New feature
Version: 2.0.0i2
This werk adds the new commandline option "<tt>--detect-sections</tt>" to the <tt>cmk -I my_host</tt>,
<tt>cmk -i my_host</tt> and <tt>cmk my_host</tt> commands.
It is mainly a debugging feature for check and inventory plugin developers; regular users are most unlikely
to ever need it.
Setting this option to a comma separated list of section names will have the effect that no more than the
passed sections are available to the check or inventory plugins (depending on the command).
SNMP sections will be fetched without SNMP detection.
For instance if you execute <tt>cmk -II --detect-sections=hr_mem,uptime my_host</tt>, a rediscovery
on <i>my_host</i> will be done, with (only) the sections <i>hr_mem</i> and <i>uptime</i> available.
Note that the SNMP table corresponding to the <i>hr_mem</i> section will be fetched from the host,
regardles of whether this host supports this MIB.
ID: 11466
Title: Windows Agent supports environment variables in registry entries
Component: Checks & agents
Level: 2
Class: New feature
Version: 2.0.0i2
Previously Windows Agnet can't process registry entries with type
REG_EXPAND_SZ containing environment variable(s).
For example ImagePath="%ProgramFiles(x86)%\checkmk\service\check_mk_agent.exe"
had not been expanded to the "c:\Program Files (x86)\checkmk..."
This may lead to Agent malfunction on some Windows installation.
With this release Windows agent fully supports einvironment variables
embedded in registry entries thus eliminating the problem.