From 4bcd14dc83b348366a00df7fd064128869d126f2 Mon Sep 17 00:00:00 2001 From: Katheryn Satterlee Date: Mon, 1 Aug 2022 15:39:13 -0500 Subject: [PATCH] Fleet 4.18.0 changelog (#6951) --- CHANGELOG.md | 34 +++++++++++++++++++ changes/6365-global-enroll-secret | 1 - changes/6365-s3-config | 1 - changes/admin-user | 1 - changes/bug-6508-non-cve-entries | 1 - changes/bug-6708-soft-vuln-count | 1 - changes/issue-4094-frequency-units | 1 - changes/issue-5723-sandbox-expiry-time | 1 - ...ssue-5757-download-orbit-installer-sandbox | 1 - changes/issue-5902-sandbox-logout | 1 - changes/issue-5911-sandbox-homepage | 1 - .../issue-6021-host-details-policy-banners | 1 - changes/issue-6037-ellipses-in-tables | 1 - changes/issue-6349-device-user-error-state | 1 - changes/issue-6371-osquery-releases-updated | 1 - changes/issue-6448-stats-hosts-not-responding | 2 -- ...ssue-6521-convert-uptime-to-last-restarted | 1 - ...issue-6544-gating-features-in-sandbox-mode | 1 - changes/issue-6551-disk-space-host-details | 1 - changes/issue-6597-add-sandbox-config | 1 - changes/issue-6617-6835-spiffier-tooltips | 1 - changes/issue-6703-is-sandbox-mode | 1 - changes/issue-6706-double-quote-sql | 1 - changes/issue-6711-hosts-search-hint | 2 -- changes/issue-6761-align-checkboxes | 1 - .../issue-6776-prevent-horizontal-scrolling | 1 - changes/issue-6827-fix-alignments | 1 - changes/issue-6874-jumpy-action-button | 1 - changes/issue-6876-copy-button-alignment | 1 - changes/issue-6893-gravatar-opens-new-tab | 1 - changes/issue-6940-sentence-case | 1 - changes/issue-6956-welcome-to-fleet-card | 1 - changes/rate-limit-device-authed | 1 - charts/fleet/Chart.yaml | 5 +-- charts/fleet/values.yaml | 2 +- docs/Deploying/Server-Installation.md | 2 +- .../dogfood/terraform/aws/variables.tf | 4 +-- .../dogfood/terraform/gcp/variables.tf | 2 +- test/upgrade/README.md | 2 +- tools/fleetctl-npm/package.json | 2 +- 40 files changed, 44 insertions(+), 43 deletions(-) delete mode 100644 changes/6365-global-enroll-secret delete mode 100644 changes/6365-s3-config delete mode 100644 changes/admin-user delete mode 100644 changes/bug-6508-non-cve-entries delete mode 100644 changes/bug-6708-soft-vuln-count delete mode 100644 changes/issue-4094-frequency-units delete mode 100644 changes/issue-5723-sandbox-expiry-time delete mode 100644 changes/issue-5757-download-orbit-installer-sandbox delete mode 100644 changes/issue-5902-sandbox-logout delete mode 100644 changes/issue-5911-sandbox-homepage delete mode 100644 changes/issue-6021-host-details-policy-banners delete mode 100644 changes/issue-6037-ellipses-in-tables delete mode 100644 changes/issue-6349-device-user-error-state delete mode 100644 changes/issue-6371-osquery-releases-updated delete mode 100644 changes/issue-6448-stats-hosts-not-responding delete mode 100644 changes/issue-6521-convert-uptime-to-last-restarted delete mode 100644 changes/issue-6544-gating-features-in-sandbox-mode delete mode 100644 changes/issue-6551-disk-space-host-details delete mode 100644 changes/issue-6597-add-sandbox-config delete mode 100644 changes/issue-6617-6835-spiffier-tooltips delete mode 100644 changes/issue-6703-is-sandbox-mode delete mode 100644 changes/issue-6706-double-quote-sql delete mode 100644 changes/issue-6711-hosts-search-hint delete mode 100644 changes/issue-6761-align-checkboxes delete mode 100644 changes/issue-6776-prevent-horizontal-scrolling delete mode 100644 changes/issue-6827-fix-alignments delete mode 100644 changes/issue-6874-jumpy-action-button delete mode 100644 changes/issue-6876-copy-button-alignment delete mode 100644 changes/issue-6893-gravatar-opens-new-tab delete mode 100644 changes/issue-6940-sentence-case delete mode 100644 changes/issue-6956-welcome-to-fleet-card delete mode 100644 changes/rate-limit-device-authed diff --git a/CHANGELOG.md b/CHANGELOG.md index 65f98c9293..1c2cdb9211 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,37 @@ +## Fleet 4.18.0 (Aug 1, 2022) + +* Added a Call to Action to the failing policy banner in Fleet Desktop. This empowers end-users to manage their device's compliance. + +* Introduced rate limiting for device authorized endpoints to improve the security of Fleet Desktop. + +* Improved styling for tooltips, dropdowns, copied text, checkboxes and buttons. + +* Fixed a bug in the Fleet UI causing text to be truncated in tables. + +* Fixed a bug affecting software vulnerabilities count in Host Details. + +* Fixed "Select Targets" search box and updated to reflect currently supported search values: hostname, UUID, serial number, or IPv4. + +* Improved disk space reporting in Host Details. + +* Updated frequency formatting for Packs to match Schedules. + +* Replaced "hosts" count with "results" count for live queries. + +* Replaced "Uptime" with "Last restarted" column in Host Details. + +* Removed vulnerabilities that do not correspond to a CVE in Fleet UI and API. + +* Added standard password requirements when users are created by an admin. + +* Updated the regexp we use for detecting the major/minor version on OS platforms. + +* Improved calculation of battery health based on cycle count. “Normal” corresponds to cycle count < 1000 and “Replacement recommended” corresponds to cycle count >= 1000. + +* Fixed an issue with double quotes usage in SQL query, caused by enabling `ANSI_QUOTES` in MySQL. + +* Added automated tests for Fleet upgrades. + ## Fleet 4.17.1 (Jul 22, 2022) * Fixed a bug causing an error when converting users to SSO login. diff --git a/changes/6365-global-enroll-secret b/changes/6365-global-enroll-secret deleted file mode 100644 index 13789c5c94..0000000000 --- a/changes/6365-global-enroll-secret +++ /dev/null @@ -1 +0,0 @@ -* Added a Fleet server config to provide a default global enroll secret. diff --git a/changes/6365-s3-config b/changes/6365-s3-config deleted file mode 100644 index 876c063dad..0000000000 --- a/changes/6365-s3-config +++ /dev/null @@ -1 +0,0 @@ -* Added options to configure S3 for retrieval of pre-built Orbit packages. diff --git a/changes/admin-user b/changes/admin-user deleted file mode 100644 index 2f3e523118..0000000000 --- a/changes/admin-user +++ /dev/null @@ -1 +0,0 @@ -* Enforce the same password requirements when admins create users directly as are already applied for users created through invites. diff --git a/changes/bug-6508-non-cve-entries b/changes/bug-6508-non-cve-entries deleted file mode 100644 index 2f75d0c591..0000000000 --- a/changes/bug-6508-non-cve-entries +++ /dev/null @@ -1 +0,0 @@ -- Only include vulnerabilities (CVEs) in Fleet UI and API diff --git a/changes/bug-6708-soft-vuln-count b/changes/bug-6708-soft-vuln-count deleted file mode 100644 index d8ccb0e19a..0000000000 --- a/changes/bug-6708-soft-vuln-count +++ /dev/null @@ -1 +0,0 @@ -* Render correct software vulnerabilities count on host details page \ No newline at end of file diff --git a/changes/issue-4094-frequency-units b/changes/issue-4094-frequency-units deleted file mode 100644 index 3cc26b5a2e..0000000000 --- a/changes/issue-4094-frequency-units +++ /dev/null @@ -1 +0,0 @@ -* * Packs frequency units match Schedules frequency units \ No newline at end of file diff --git a/changes/issue-5723-sandbox-expiry-time b/changes/issue-5723-sandbox-expiry-time deleted file mode 100644 index 9e02f99d43..0000000000 --- a/changes/issue-5723-sandbox-expiry-time +++ /dev/null @@ -1 +0,0 @@ -* Add a sandbox expiry time message when in sandbox mode diff --git a/changes/issue-5757-download-orbit-installer-sandbox b/changes/issue-5757-download-orbit-installer-sandbox deleted file mode 100644 index 3b081fbc90..0000000000 --- a/changes/issue-5757-download-orbit-installer-sandbox +++ /dev/null @@ -1 +0,0 @@ -- Added Fleet Sandbox UI to download pre-packaged installers. diff --git a/changes/issue-5902-sandbox-logout b/changes/issue-5902-sandbox-logout deleted file mode 100644 index 12219277d9..0000000000 --- a/changes/issue-5902-sandbox-logout +++ /dev/null @@ -1 +0,0 @@ -* Redirect to fleetdm.com when logging out of sandbox \ No newline at end of file diff --git a/changes/issue-5911-sandbox-homepage b/changes/issue-5911-sandbox-homepage deleted file mode 100644 index 07842fdad1..0000000000 --- a/changes/issue-5911-sandbox-homepage +++ /dev/null @@ -1 +0,0 @@ -* Dashboard updates for app, Fleet Sandbox, and Fleet Preview \ No newline at end of file diff --git a/changes/issue-6021-host-details-policy-banners b/changes/issue-6021-host-details-policy-banners deleted file mode 100644 index a8c3ce87dd..0000000000 --- a/changes/issue-6021-host-details-policy-banners +++ /dev/null @@ -1 +0,0 @@ -* Update failing policy banner to include CTA for device user, hide no response banner from device user \ No newline at end of file diff --git a/changes/issue-6037-ellipses-in-tables b/changes/issue-6037-ellipses-in-tables deleted file mode 100644 index 7a65e05fea..0000000000 --- a/changes/issue-6037-ellipses-in-tables +++ /dev/null @@ -1 +0,0 @@ -* Table ellipses only appear if text reaches end of cell \ No newline at end of file diff --git a/changes/issue-6349-device-user-error-state b/changes/issue-6349-device-user-error-state deleted file mode 100644 index 6218a64a5d..0000000000 --- a/changes/issue-6349-device-user-error-state +++ /dev/null @@ -1 +0,0 @@ -* Convert uptime column to last restarted on the Manage hosts page \ No newline at end of file diff --git a/changes/issue-6371-osquery-releases-updated b/changes/issue-6371-osquery-releases-updated deleted file mode 100644 index 6218a64a5d..0000000000 --- a/changes/issue-6371-osquery-releases-updated +++ /dev/null @@ -1 +0,0 @@ -* Convert uptime column to last restarted on the Manage hosts page \ No newline at end of file diff --git a/changes/issue-6448-stats-hosts-not-responding b/changes/issue-6448-stats-hosts-not-responding deleted file mode 100644 index edf8ff70d8..0000000000 --- a/changes/issue-6448-stats-hosts-not-responding +++ /dev/null @@ -1,2 +0,0 @@ -- Added statistics for number of hosts per deployment that have not submitted results for distibuted - queries to statistics payload delivered to fleetdm.com diff --git a/changes/issue-6521-convert-uptime-to-last-restarted b/changes/issue-6521-convert-uptime-to-last-restarted deleted file mode 100644 index 6218a64a5d..0000000000 --- a/changes/issue-6521-convert-uptime-to-last-restarted +++ /dev/null @@ -1 +0,0 @@ -* Convert uptime column to last restarted on the Manage hosts page \ No newline at end of file diff --git a/changes/issue-6544-gating-features-in-sandbox-mode b/changes/issue-6544-gating-features-in-sandbox-mode deleted file mode 100644 index a38a88c72a..0000000000 --- a/changes/issue-6544-gating-features-in-sandbox-mode +++ /dev/null @@ -1 +0,0 @@ -- Add gating of features on org settings, users mangament, user settings, and manage hosts pages diff --git a/changes/issue-6551-disk-space-host-details b/changes/issue-6551-disk-space-host-details deleted file mode 100644 index f63346c3d2..0000000000 --- a/changes/issue-6551-disk-space-host-details +++ /dev/null @@ -1 +0,0 @@ -* Host details page shows new disk space tooltip and 3 status levels \ No newline at end of file diff --git a/changes/issue-6597-add-sandbox-config b/changes/issue-6597-add-sandbox-config deleted file mode 100644 index f89516ae2a..0000000000 --- a/changes/issue-6597-add-sandbox-config +++ /dev/null @@ -1 +0,0 @@ - * Added a new Fleet serve configuration to define whether Fleet is running in sandbox mode or not. diff --git a/changes/issue-6617-6835-spiffier-tooltips b/changes/issue-6617-6835-spiffier-tooltips deleted file mode 100644 index 9499f47b74..0000000000 --- a/changes/issue-6617-6835-spiffier-tooltips +++ /dev/null @@ -1 +0,0 @@ -* Spiffier tooltip styling \ No newline at end of file diff --git a/changes/issue-6703-is-sandbox-mode b/changes/issue-6703-is-sandbox-mode deleted file mode 100644 index dc2180f514..0000000000 --- a/changes/issue-6703-is-sandbox-mode +++ /dev/null @@ -1 +0,0 @@ -- Added `isSandboxMode` to `AppContext` diff --git a/changes/issue-6706-double-quote-sql b/changes/issue-6706-double-quote-sql deleted file mode 100644 index 05d1b26b31..0000000000 --- a/changes/issue-6706-double-quote-sql +++ /dev/null @@ -1 +0,0 @@ -* Fixed an issue with double quotes usage in SQL query, caused by enabling `ANSI_QUOTES` in MySQL. diff --git a/changes/issue-6711-hosts-search-hint b/changes/issue-6711-hosts-search-hint deleted file mode 100644 index 70b71ca166..0000000000 --- a/changes/issue-6711-hosts-search-hint +++ /dev/null @@ -1,2 +0,0 @@ -- Removed MAC address from placeholder text for the select targets search box and updated text to -reflect currently supported search values: hostname, UUID, serial number, or IPv4. \ No newline at end of file diff --git a/changes/issue-6761-align-checkboxes b/changes/issue-6761-align-checkboxes deleted file mode 100644 index 9bf6d4f2c5..0000000000 --- a/changes/issue-6761-align-checkboxes +++ /dev/null @@ -1 +0,0 @@ -* Clean up checkbox alignment \ No newline at end of file diff --git a/changes/issue-6776-prevent-horizontal-scrolling b/changes/issue-6776-prevent-horizontal-scrolling deleted file mode 100644 index 5e234a959c..0000000000 --- a/changes/issue-6776-prevent-horizontal-scrolling +++ /dev/null @@ -1 +0,0 @@ -* Use responsive design to prevent tooltip from horizontally overflowing off viewport \ No newline at end of file diff --git a/changes/issue-6827-fix-alignments b/changes/issue-6827-fix-alignments deleted file mode 100644 index 44beb67051..0000000000 --- a/changes/issue-6827-fix-alignments +++ /dev/null @@ -1 +0,0 @@ -* Spiffier UI: Pixel perfect search dropdowns, button alignment \ No newline at end of file diff --git a/changes/issue-6874-jumpy-action-button b/changes/issue-6874-jumpy-action-button deleted file mode 100644 index d7fbcff634..0000000000 --- a/changes/issue-6874-jumpy-action-button +++ /dev/null @@ -1 +0,0 @@ -* Fix "jumpy" action dropdown \ No newline at end of file diff --git a/changes/issue-6876-copy-button-alignment b/changes/issue-6876-copy-button-alignment deleted file mode 100644 index 0807f36adf..0000000000 --- a/changes/issue-6876-copy-button-alignment +++ /dev/null @@ -1 +0,0 @@ -* Readable copy message, fix modal CTA button alignment \ No newline at end of file diff --git a/changes/issue-6893-gravatar-opens-new-tab b/changes/issue-6893-gravatar-opens-new-tab deleted file mode 100644 index 12b82c90b2..0000000000 --- a/changes/issue-6893-gravatar-opens-new-tab +++ /dev/null @@ -1 +0,0 @@ -* Gravatar link opens in new tab \ No newline at end of file diff --git a/changes/issue-6940-sentence-case b/changes/issue-6940-sentence-case deleted file mode 100644 index 2a469f9701..0000000000 --- a/changes/issue-6940-sentence-case +++ /dev/null @@ -1 +0,0 @@ -* Fix sentence casing in Fleet UI \ No newline at end of file diff --git a/changes/issue-6956-welcome-to-fleet-card b/changes/issue-6956-welcome-to-fleet-card deleted file mode 100644 index 540424a11a..0000000000 --- a/changes/issue-6956-welcome-to-fleet-card +++ /dev/null @@ -1 +0,0 @@ -* Welcome to Fleet and Learn Fleet card only shows on All teams for users that have permission to enroll hosts \ No newline at end of file diff --git a/changes/rate-limit-device-authed b/changes/rate-limit-device-authed deleted file mode 100644 index 87bc17ccdb..0000000000 --- a/changes/rate-limit-device-authed +++ /dev/null @@ -1 +0,0 @@ -* Rate limit device authenticated endpoints when there's a failure diff --git a/charts/fleet/Chart.yaml b/charts/fleet/Chart.yaml index b13cb3cb1a..2c4c8764b3 100644 --- a/charts/fleet/Chart.yaml +++ b/charts/fleet/Chart.yaml @@ -4,8 +4,9 @@ name: fleet keywords: - fleet - osquery -version: v4.17.1 +version: v4.18.0 home: https://github.com/fleetdm/fleet sources: - https://github.com/fleetdm/fleet.git -appVersion: v4.17.1 +appVersion: v4.18.0 + diff --git a/charts/fleet/values.yaml b/charts/fleet/values.yaml index 135614b2e2..003247a19c 100644 --- a/charts/fleet/values.yaml +++ b/charts/fleet/values.yaml @@ -2,7 +2,7 @@ # All settings related to how Fleet is deployed in Kubernetes hostName: fleet.localhost replicas: 3 # The number of Fleet instances to deploy -imageTag: v4.17.1 # Version of Fleet to deploy +imageTag: v4.18.0 # Version of Fleet to deploy createIngress: true # Whether or not to automatically create an Ingress ingressAnnotations: {} # Additional annotation to add to the Ingress podAnnotations: {} # Additional annotations to add to the Fleet pod diff --git a/docs/Deploying/Server-Installation.md b/docs/Deploying/Server-Installation.md index 19697a539a..b7b17d3d9b 100644 --- a/docs/Deploying/Server-Installation.md +++ b/docs/Deploying/Server-Installation.md @@ -445,7 +445,7 @@ spec: spec: containers: - name: fleet - image: fleetdm/fleet:4.17.1 + image: fleetdm/fleet:4.18.0 env: - name: FLEET_MYSQL_ADDRESS valueFrom: diff --git a/infrastructure/dogfood/terraform/aws/variables.tf b/infrastructure/dogfood/terraform/aws/variables.tf index d18a3b9d00..2d46608a68 100644 --- a/infrastructure/dogfood/terraform/aws/variables.tf +++ b/infrastructure/dogfood/terraform/aws/variables.tf @@ -56,7 +56,7 @@ variable "database_name" { variable "fleet_image" { description = "the name of the container image to run" - default = "fleetdm/fleet:v4.17.1" + default = "fleetdm/fleet:v4.18.0" } variable "software_inventory" { @@ -121,7 +121,7 @@ variable "extra_security_group_cidrs" { default = [] type = list(string) validation { - condition = alltrue([for cidr in var.extra_security_group_cidrs: can(cidrhost(cidr, 32))]) + condition = alltrue([for cidr in var.extra_security_group_cidrs : can(cidrhost(cidr, 32))]) error_message = "The extra security groups must be a list of valid CIDRs." } } diff --git a/infrastructure/dogfood/terraform/gcp/variables.tf b/infrastructure/dogfood/terraform/gcp/variables.tf index 7715276f9f..6b068a8229 100644 --- a/infrastructure/dogfood/terraform/gcp/variables.tf +++ b/infrastructure/dogfood/terraform/gcp/variables.tf @@ -68,5 +68,5 @@ variable "redis_mem" { } variable "image" { - default = "fleet:v4.17.1" + default = "fleet:v4.18.0" } diff --git a/test/upgrade/README.md b/test/upgrade/README.md index c3561c0cd6..f7ba1e1b2c 100644 --- a/test/upgrade/README.md +++ b/test/upgrade/README.md @@ -4,7 +4,7 @@ The tests located in `test/upgrade` are intended to test fleet upgrades with onl To run the tests, you need to specify the from and to versions. For example ``` -$ FLEET_VERSION_A=v4.16.0 FLEET_VERSION_B=v4.17.0 go test ./test/upgrade +$ FLEET_VERSION_A=v4.16.0 FLEET_VERSION_B=v4.18.0 go test ./test/upgrade ``` Ensure that Docker is installed with Compose V2. diff --git a/tools/fleetctl-npm/package.json b/tools/fleetctl-npm/package.json index 7178678da4..e723da4b23 100644 --- a/tools/fleetctl-npm/package.json +++ b/tools/fleetctl-npm/package.json @@ -1,6 +1,6 @@ { "name": "fleetctl", - "version": "v4.17.1", + "version": "v4.18.0", "description": "Installer for the fleetctl CLI tool", "bin": { "fleetctl": "./run.js"