icinga2 to ignore "hidden" directories like .git

[btrnka63]

Hello team, we noticed the "hidden" directories like .git are processed by the icinga2 service during the configuration distribution and so copied to all sub-zones.
Even the service state in the logs the files are not supported, they are still copied/sync to other endpoints.

Would it be possible to simply exclude the directories starting with "." (like: .git) from any parsing, synchronization?
Thanks.

Here a snipped from the log:

...
[2025-03-14 05:36:56 +0000] critical/ApiListener: Ignoring file '/etc/icinga2/zones.d/global-templates/templates/.git/objects/e6/9de29bb2d1d6434b8b29ae775ad8c2e48c5391' for cluster config sync: Does not contain valid UTF8. Binary fi
les are not supported.
        (0) Creating config update for file '/etc/icinga2/zones.d/global-templates/templates/.git/objects/e6/9de29bb2d1d6434b8b29ae775ad8c2e48c5391'
[2025-03-14 05:36:56 +0000] critical/ApiListener: Ignoring file '/etc/icinga2/zones.d/global-templates/templates/.git/objects/eb/8cf69d68d6fe5e72cff44bfefa4f589cf4f024' for cluster config sync: Does not contain valid UTF8. Binary fi
les are not supported.
        (0) Creating config update for file '/etc/icinga2/zones.d/global-templates/templates/.git/objects/eb/8cf69d68d6fe5e72cff44bfefa4f589cf4f024'
[2025-03-14 05:36:56 +0000] information/ApiListener: Copying 179 zone configuration files for zone 'global-templates' to '/var/lib/icinga2/api/zones/global-templates'.
[2025-03-14 05:36:56 +0000] information/ApiListener: Updating configuration file: /var/lib/icinga2/api/zones/global-templates//_etc/EU/.git/COMMIT_EDITMSG
[2025-03-14 05:36:56 +0000] information/ApiListener: Updating configuration file: /var/lib/icinga2/api/zones/global-templates//_etc/EU/.git/FETCH_HEAD
[2025-03-14 05:36:56 +0000] information/ApiListener: Updating configuration file: /var/lib/icinga2/api/zones/global-templates//_etc/EU/.git/HEAD
[2025-03-14 05:36:56 +0000] information/ApiListener: Updating configuration file: /var/lib/icinga2/api/zones/global-templates//_etc/EU/.git/ORIG_HEAD
[2025-03-14 05:36:56 +0000] information/ApiListener: Updating configuration file: /var/lib/icinga2/api/zones/global-templates//_etc/EU/.git/config
...

[oxzi]

Thanks for your report.

As you experienced in your setup, everything within a zone directory is currently being included recursively. This works as expected under the assumption that only Icinga configuration files are being present there.

In general, nothing speaks against some exclusions. However, I would not start excluding all hidden directories since someone out there might be using this feature.

For git usage, I would recommend creating the repository in /etc/icinga2. Otherwise, you can use some config management tool to automatically populate the zone sub-directory.

[btrnka63]

Hi, thanks for the feedback and understand that someone could actually use the "hidden" directories ...
What about to add "exclude" as there is already "include" ("include_recursive") statement in the icinga configuration?
For example:

• icinga2.conf:
  include "features-enabled/*.conf"
  include_recursive "conf.d"

to add:
exclude "conf.d/.git"
exclude_recursive "zones.d/*/.git"