Version 3.12
Version 3.12.5
- FEAT: Accounts can now configure custom CA certificate chain and root CA certificate for SSL verification
- FEAT: New CLI commands
rules export_all_rules and to export all syncer rules
- FEAT: New interactive syncer shell
flask cli or ./cmdbsyncer cli — with tab-completion and history for all registered syncer commands
Version 3.12.4
- FIX: Checkmk Log entry (error level) is now written when no pool folder is available for a host
- FEAT: CMDB Mode is now further Optimized
- FEAT: CMDB Mode now can auto match Tempaltes
- FEAT: Styling for Conditions and more Icons in Menues
- SEC: Hardcoded secrets (SECRET_KEY, CRYPTOGRAPHY_KEY) removed from codebase
- SEC: Database and file path settings moved to environment variables
- SEC: Debug mode and SSL verification disabled by default
- SEC: CSRF protection enabled for all web views
- SEC: API authentication now requires HTTPS for password-based auth
- SEC: Generic error messages for API authentication (prevents user enumeration)
- SEC: Dynamic Jinja rendering sandboxed against Server-Side Template Injection
- SEC: XSS protection added for all dynamic HTML values in admin views
- SEC: NoSQL injection prevention for MongoDB filter inputs
- SEC: SQL injection prevention for MySQL/ODBC plugins (custom_query restricted to SELECT)
- SEC: Unsafe statefile deserialization (eval) replaced with JSON
Version 3.12.3
- INCOMPATIBLE: Ansible Inventory does not longer bypass Objects which not have CMK Agent Problems. Create Filters if you need that feature
- FIX: Fixed Duplicate Path name in Fileadmin Fullpath row
- FEAT: Hidden /csv endpoint on Host Page to export all hosts in a csv. Just add it like this: /admin/host/csv
- FIX: Ansible Playbooks have now a option to turn on/off Certificate Verification
- FEAT: Ansible Playbooks can now create Hosts
- FEAT: Config Setting: CMK_WRITE_STATUS_BACK. If set, on all exports the syncer will write back the status of the host
- FEAT: Ansible CLI: Debug options for Filters
- FIX: Minor Fixes in multiple modules
Version 3.12.2
- FEAT: Checkmk Account Filters can be negagted with !
- FEAT: Ansible Site Updates can set Downtimes
- FEAT: Jinja Placeholder {{ACCOUNT:name:attribute}} is now global for every Jinja field
Version 3.12.1
- FIX: Focus for Username in Login Screen
- FIX: FIXed Design problem
- FEAT: Log Reasons for Rule Deletion in Checkmk
- FIX: Ansible Rest returns correct booleans
- FIX: No Autodelete Hosts send to syncer from API
- FEAT: Custom Attributes now support Jinja
Version 3.12.0
- INCOMPATIBLE: Better CSV Module with Logging (only works with Accounts, new Commandline Parameters, but with fallback)
- INCOMPATIBLE: Netbox Imports extra Attributes only when config switch is enabled
- FEAT: New HW/SW Inventory for Checkmk now works safely in big > 10k host environments.
- FEAT: Import of Configured Checkmk Sites as Objects
- FEAT: Rule-Based Syncer Rule Creation [sig]
- FEAT: SSO Support for External Authentication configured in Webserver like Keycloak
- FEAT: Host View now has a modal to see all log information for a host.
- FEAT: Host View won't show Cache as Default
- FEAT: Fileadmin shows the full path of files for easy copy into configuration.
- FIX: Debug Mode now checks User Rights.
- FEAT: Optimized Folder Pool Functions (Including a Sync command)
- FEAT: Improved Design and added Icons