Skip to content

v1.3.1 — 6 New APM Integrations, Forensic Ingestion Security & Resilience Hardening

Latest
Latest

Choose a tag to compare

View all tags
@Dushyant-rahangdale Dushyant-rahangdale released this 18 Aug 13:10
· 19 commits to main since this release
Immutable release. Only release title and notes can be modified.
v1.3.1
c343297
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

OpsKnight v1.3.1 introduces 6 new native observability and APM integrations, comprehensive forensic webhook security with constant-time HMAC validation, and core engine resilience hardening.

🚀 Added & Highlights

1. 🔌 6 New Native Observability & APM Integrations

Integration Protocol / Method Events Supported Auto-Recovery / Deduplication
Zabbix Webhook Media Type (JSON) PROBLEM, RESOLVED, UPDATE Native EVENT.ID / trigger_id deduplication & auto-close
PagerDuty Events API v2 REST (/api/v2/enqueue) trigger, acknowledge, resolve dedup_key mapping & drop-in routing key resolution
GitLab CI/CD Pipeline Webhook Pipeline failed, success, canceled Branch & Commit SHA tracking with auto-resolve on rerun
Vercel Deployments Deployment Webhook deployment.error, deployment.ready Project & Deployment ID auto-resolve on subsequent success
Nagios Core & XI Macro Webhook / Script Host/Service CRITICAL, WARNING, OK Macro parsing (DOWNTIMESTART, flapping, SERVICESTATE)
Icinga 2 Notification Webhook Host/Service State Transitions, ACK State transition mapping with auto-resolve on OK

2. 🔐 Forensic Ingestion Security & Authentication

  • Timing-Safe HMAC Verification: Constant-time crypto.timingSafeEqual signature checks and mandatory integration keys across all 24 webhook routes.
  • SHA-256 Deduplication Hashing: Collision-proof 32-character SHA-256 fingerprinting replaces legacy 100-character string slicing.
  • Replay Attack Defense: Outbound webhook timestamp binding (X-OpsKnight-Timestamp in HMAC payload) eliminates replay attack vectors.

3. 🛡️ Resilience Hardening & Runtime Core

  • Circuit Breaker Concurrency Locking: halfOpenRequestInFlight locking prevents thundering herd spikes during downstream service recovery.
  • 5-Minute Notification Deduplication: Rolling 5-minute window for alert and notification queue processing.
  • Sequential Multi-Channel Fallback: Automated escalation chain (push -> sms -> whatsapp -> email) for High & Critical incidents.
  • Server Action Navigation Handling: Clean Next.js navigation error propagation (isRedirectError, isNotFoundError) in server wrappers.
  • Safe RBAC Default: Unauthenticated sessions safely fallback to VIEWER role with authenticated: false.

4. 📦 Official Organization Migration

  • Repository and container packages migrated to ghcr.io/opsknight-labs/opsknight with public anonymous pull support.

Upgrading

Docker / Compose

docker pull ghcr.io/opsknight-labs/opsknight:v1.3.1
docker compose down && docker compose up -d

Kubernetes / Helm

helm upgrade opsknight opsknight/opsknight --set image.tag=v1.3.1
  1. Deploy — database migrations run automatically on start.
  2. Verify webhook endpoints in Settings → Integrations to ensure secret tokens / HMAC signatures are configured.

Full notes in CHANGELOG.md · Integrations Documentation

Assets 3
Loading