Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature: Adds support to offload service and JEA actions to scheduled tasks #657

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

LordHepipud
Copy link
Collaborator

This feature allows Icinga for Windows to offload all tasks regarding JEA-Profile generation as well as service management to be offloaded to a scheduled task instead of being run within the same shell instance.

This ensures that remote installation tasks are more easily configurable as well as prevents the Icinga Agent services of being stuck in the "Scheduled for deletion state" during upgrades of the Agent.

@cla-bot cla-bot bot added the cla/signed label Jul 31, 2023
@LordHepipud LordHepipud self-assigned this Jul 31, 2023
@LordHepipud LordHepipud added the Enhancement New feature or request label Jul 31, 2023
@LordHepipud LordHepipud added this to the v1.11.0 milestone Jul 31, 2023
@LordHepipud LordHepipud force-pushed the feature/task_offloader branch 4 times, most recently from d62f75d to 3029bca Compare July 31, 2023 18:58
@LordHepipud LordHepipud modified the milestones: v1.11.0, v1.12.0 Jul 31, 2023
@LordHepipud LordHepipud modified the milestones: v1.12.0, v2.0.0 Mar 12, 2024
@quidditchriddikulus
Copy link

I wanted to check whether there is a rough ETA on this? At the moment, it is incredibly frustrating to install IfW with JEA enabled in a larger environment, getting to a point where we might decide to completely ditch JEA, as it seems to behave differently after each update. If there is a solution that would enable us to more easily deploy and update IfW including JEA remotely in a larger environment, some pointers would also be appreciated.

@LordHepipud
Copy link
Collaborator Author

What do you mean by that? This offloader is only intended to work for remote installation by using WinRM for example.
Installing Icinga for Windows is on a regular basis easily done by enabling it on the wizard and embedding it in your installation JSON or by running

Install-IcingaSecurity

on those machines.

The only limitation at the moment, is by running the above command through a WinRM session. Because this will not work, as the WinRM service restarts during the installation and interrupts the profile registration.

@quidditchriddikulus
Copy link

That's exactly our problem. It is unfeasible/unreliable to install or even upgrade Icinga on multiple machines with JEA because WinRM restarts and the install fails. We currently have a very weird workaround which also involves tasks, but the script worked with 1.11 and now does not work anymore with 1.12 (we haven't investigated very thoroughly why). We are now installing Icinga without JEA and will enable it manually afterwards.

So in essence: having a way to reliably install icinga remotely on multiple machines with JEA enabled would make our lives a lot easier.

@LordHepipud
Copy link
Collaborator Author

Thanks for the update. Yes, this is something we are currently working on and should ship with v1.13

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
cla/signed Enhancement New feature or request
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants