cmdbsyncer 4.1.0.dev9__tar.gz → 4.1.0.dev11__tar.gz

{cmdbsyncer-4.1.0.dev9 → cmdbsyncer-4.1.0.dev11}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cmdbsyncer
-Version: 4.1.0.dev9
+Version: 4.1.0.dev11
 Summary: Rule-based modular synchronizer for Checkmk, Netbox, Ansible, I-DOIT, Jira CMDB and 15+ other CMDB/monitoring systems
 Author-email: Kuhn & Ruess GmbH <info@kuhn-ruess.de>
 Maintainer-email: Bastian Kuhn <mail@bastian-kuhn.de>

cmdbsyncer-4.1.0.dev11/application/buildinfo.txt

@@ -0,0 +1 @@
+BUILD_DATE=2026-05-11T11:52:21Z

{cmdbsyncer-4.1.0.dev9 → cmdbsyncer-4.1.0.dev11}/application/changelog/v4.1.md

@@ -53,10 +53,7 @@
 - FEAT: Quick-search on Rule Management matches name and ruleset
 - FIX: Saving a rule with outcomes that target different rulesets is rejected with a flash
 - FEAT: New "Manage Notification Rules" view exports notification rules to Checkmk 2.4 / 2.5 with `cmdbsyncer checkmk export_notifications`; admin edits are detected and corrected on the next run
-- FIX: Checkmk HW/SW inventorize multiprocessing pool initialises a fresh MongoDB connection per worker so writes no longer fail with an instant "Timeout error"
-- FIX: Checkmk HW/SW inventory worker errors show the failing hostname, exception type and full traceback instead of a misleading "Timeout error"
-- FIX: Checkmk API errors with a non-JSON body (HTML error page, auth redirect, disabled endpoint) report status code, URL and body snippet instead of the useless message "None NoneNone"
-- FIX: HW/SW inventorize sends `_username`/`_secret` query auth to the legacy `host_inv_api.py` endpoint so the per-host call no longer 401s with a login HTML page
+- FIX: HW/SW inventorize fetches the inventory tree via the REST API's `host_mk_inventory` Livestatus column instead of the legacy `host_inv_api.py` endpoint — works behind OIDC/SSO proxies that block the Multisite path. Each multiprocessing worker also gets its own MongoDB connection, and on failure the failing hostname, exception type and full traceback are reported instead of a misleading "Timeout error"
 
 ### API
 - FEAT: `/api/v1/objects/<hostname>/relations` reads, adds and removes typed Host relations (CMDB_MODE only)

{cmdbsyncer-4.1.0.dev9 → cmdbsyncer-4.1.0.dev11}/application/plugins/checkmk/inventorize.py

@@ -2,6 +2,9 @@
 Checkmk Inventorize
 """
 # pylint: disable=too-many-locals,too-many-branches,too-many-nested-blocks,duplicate-code
+import ast
+import base64
+import binascii
 import datetime
 import hashlib
 import json
@@ -79,20 +82,42 @@ class InventorizeHosts(CMK2):  # pylint: disable=too-many-instance-attributes
         IPC boundary; shipping a 100-500 KB blob per host through the
         result pipe was a runtime catastrophe at scale.
         """
-        # host_inv_api.py is the legacy Multisite endpoint, not the REST
-        # API — it ignores the Bearer header request() sets and expects
-        # the older ``_username``/``_secret`` query-parameter auth. Without
-        # them the call returns a 401 HTML login page and parsing dies.
-        inv_params = {
-            "host": hostname,
-            "output_format": "json",
-            "_username": self.config["username"],
-            "_secret": self.config["password"],
+        # Pull the inventory tree via the Livestatus column
+        # ``host_mk_inventory`` on the REST API. host_inv_api.py is the
+        # legacy Multisite endpoint and is unreachable behind OIDC/SSO
+        # proxies (they intercept it before Checkmk sees the Bearer
+        # token). The REST API stays Bearer-auth'd, so this path works
+        # behind any auth proxy the GUI is normally fronted by. The blob
+        # comes back base64-encoded as a Python ``repr()`` of the
+        # inventory tree — same key casing (Attributes/Nodes/Pairs/…) as
+        # host_inv_api.py, so flatten_inventory below works unchanged.
+        url = "domain-types/service/collections/all"
+        query = {
+            "op": "and",
+            "expr": [
+                {"op": "=", "left": "description", "right": "Check_MK"},
+                {"op": "=", "left": "host_name", "right": hostname},
+            ],
+        }
+        params = {
+            "query": json.dumps(query),
+            "columns": ['host_mk_inventory'],
         }
-        api_response = self.request(
-            "host_inv_api.py", method="GET", api_version="/", params=inv_params,
-        )
-        dict_inventory = api_response[0]['result'][hostname]
+        api_response = self.request(url, params=params, method="GET")
+        rows = api_response[0].get('value') or []
+        if not rows:
+            return hostname, None
+        raw = rows[0].get('extensions', {}).get('host_mk_inventory') or {}
+        encoded = raw.get('value') if isinstance(raw, dict) else None
+        if not encoded:
+            return hostname, None
+        try:
+            text = base64.b64decode(encoded).decode('utf-8', 'replace')
+            dict_inventory = ast.literal_eval(text) if text else None
+        except (binascii.Error, ValueError, SyntaxError) as exc:
+            raise CmkException(
+                f"host_mk_inventory parse failed for {hostname}: {exc}"
+            ) from exc
         if not dict_inventory:
             return hostname, None
 

{cmdbsyncer-4.1.0.dev9 → cmdbsyncer-4.1.0.dev11}/application/plugins/checkmk/tests/test_inventorize.py

@@ -2,6 +2,7 @@
 Unit tests for checkmk inventorize module
 """
 # pylint: disable=missing-function-docstring,protected-access,unused-argument,no-value-for-parameter
+import base64
 import hashlib
 import json
 import unittest
@@ -23,8 +24,7 @@ class TestInventorizeHosts(unittest.TestCase):
         def mock_init(self_param, account=False):
             base_mock_init(self_param,
                            account_name='Test Account', debug=False,
-                           config={'username': 'u', 'password': 'p',
-                                   'settings': {}},
+                           config={'settings': {}},
                            fields={}, found_hosts=set(),
                            status_inventory={}, hw_sw_inventory={},
                            service_label_inventory={}, config_inventory={},
@@ -98,21 +98,21 @@ class TestInventorizeHosts(unittest.TestCase):
         mock_host.objects.assert_called_once_with(hostname__in=['unknown_host'])
 
     def test_get_hw_sw_inventory_data_success(self):
+        inventory_tree = {
+            'Attributes': {'Pairs': {'model': 'PowerEdge'}},
+            'Nodes': {
+                'hardware': {
+                    'Attributes': {'Pairs': {'cpu_model': 'Xeon'}}
+                }
+            },
+        }
+        encoded = base64.b64encode(repr(inventory_tree).encode('utf-8')).decode('ascii')
         api_response = ({
-            'result': {
-                'host1': {
-                    'Attributes': {
-                        'Pairs': {'model': 'PowerEdge'}
-                    },
-                    'Nodes': {
-                        'hardware': {
-                            'Attributes': {
-                                'Pairs': {'cpu_model': 'Xeon'}
-                            }
-                        }
-                    }
+            'value': [{
+                'extensions': {
+                    'host_mk_inventory': {'value': encoded}
                 }
-            }
+            }]
         }, {})
 
         self.inv.fields = {'cmk_inventory': ['model*', 'hardware*']}
@@ -193,8 +193,13 @@ class TestInventorizeHosts(unittest.TestCase):
         validate_mongo_keys(self.inv.config_inventory['host1'], 'inventory')
 
     def test_get_hw_sw_inventory_data_empty(self):
+        # Host known but no inventory column populated yet — empty value
+        # string. The new REST path returns (hostname, None) without
+        # touching the side-doc.
         api_response = ({
-            'result': {'host1': None}
+            'value': [{
+                'extensions': {'host_mk_inventory': {'value': ''}}
+            }]
         }, {})
 
         self.inv.fields = {'cmk_inventory': ['model']}

{cmdbsyncer-4.1.0.dev9 → cmdbsyncer-4.1.0.dev11}/cmdbsyncer.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cmdbsyncer
-Version: 4.1.0.dev9
+Version: 4.1.0.dev11
 Summary: Rule-based modular synchronizer for Checkmk, Netbox, Ansible, I-DOIT, Jira CMDB and 15+ other CMDB/monitoring systems
 Author-email: Kuhn & Ruess GmbH <info@kuhn-ruess.de>
 Maintainer-email: Bastian Kuhn <mail@bastian-kuhn.de>

{cmdbsyncer-4.1.0.dev9 → cmdbsyncer-4.1.0.dev11}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "cmdbsyncer"
-version = "4.1.0.dev9"
+version = "4.1.0.dev11"
 description = "Rule-based modular synchronizer for Checkmk, Netbox, Ansible, I-DOIT, Jira CMDB and 15+ other CMDB/monitoring systems"
 readme = "README.md"
 license = { text = "MIT" }

cmdbsyncer-4.1.0.dev9/application/buildinfo.txt

@@ -1 +0,0 @@
-BUILD_DATE=2026-05-11T11:02:28Z