diff --git a/articles/deploy-fleet-on-render.md b/articles/deploy-fleet-on-render.md index 890554af7f..80373864a7 100644 --- a/articles/deploy-fleet-on-render.md +++ b/articles/deploy-fleet-on-render.md @@ -33,7 +33,7 @@ Render is a cloud hosting service that makes it easy to get up and running fast, > **Add a license key:** After successful deployment, navigate to the environment variables section of the Render blueprint to manually add your license key. -> Support for add/install software features is coming soon. Get [commmunity support](https://chat.osquery.io/c/fleet). +> Support for add/install software features is coming soon. Get [community support](https://chat.osquery.io/c/fleet). diff --git a/docs/Configuration/fleet-server-configuration.md b/docs/Configuration/fleet-server-configuration.md index 936594350b..27cfc45254 100644 --- a/docs/Configuration/fleet-server-configuration.md +++ b/docs/Configuration/fleet-server-configuration.md @@ -927,7 +927,7 @@ to the amount of time it takes for Fleet to give the host the label queries. ### osquery_enable_async_host_processing -**Experimental feature**. Enable asynchronous processing of hosts' query results. Currently, asyncronous processing is only supported for label query execution, policy membership results, hosts' last seen timestamp, and hosts' scheduled query statistics. This may improve the performance and CPU usage of the Fleet instances and MySQL database servers for setups with a large number of hosts while requiring more resources from Redis server(s). +**Experimental feature**. Enable asynchronous processing of hosts' query results. Currently, asynchronous processing is only supported for label query execution, policy membership results, hosts' last seen timestamp, and hosts' scheduled query statistics. This may improve the performance and CPU usage of the Fleet instances and MySQL database servers for setups with a large number of hosts while requiring more resources from Redis server(s). Note that currently, if both the failing policies webhook *and* this `osquery.enable_async_host_processing` option are set, some failing policies webhooks could be missing (some transitions from succeeding to failing or vice-versa could happen without triggering a webhook request). diff --git a/docs/Configuration/yaml-files.md b/docs/Configuration/yaml-files.md index 1edb232c2b..8605d59ad9 100644 --- a/docs/Configuration/yaml-files.md +++ b/docs/Configuration/yaml-files.md @@ -509,8 +509,6 @@ Currently, for Fleet-maintained apps and App Store (VPP) apps, the `labels_` and - `self_service` specifies whether or not end users can install from **Fleet Desktop > Self-service**. - `categories` is an array of categories. See [supported categories](#labels-and-categories). -> Without specifying a hash, Fleet downloads each installer for each team on each GitOps run. - #### Example ##### URL @@ -1093,7 +1091,7 @@ org_settings: Can only be configured for all teams (`org_settings`). -Unlike other options, ommitting `smtp_settings` or leaving it blank won't reset the values back to the default. +Unlike other options, omitting `smtp_settings` or leaving it blank won't reset the values back to the default. diff --git a/docs/Contributing/architecture/mdm/apple-declarative-device-management.md b/docs/Contributing/architecture/mdm/apple-declarative-device-management.md index f84ad3e224..2290bb5184 100644 --- a/docs/Contributing/architecture/mdm/apple-declarative-device-management.md +++ b/docs/Contributing/architecture/mdm/apple-declarative-device-management.md @@ -31,7 +31,7 @@ Via the API (which is used by the UI), the following endpoints support DDM profi Note that the following endpoints do _not_ support DDM profiles: * `GET /api/latest/fleet/hosts/{id}/configuration_profiles` lists only the Apple `.mobileconfig` profiles of the host, not the DDM profiles nor the Windows profiles. See [the API reference](https://fleetdm.com/docs/rest-api/rest-api#get-configuration-profiles-assigned-to-a-host). -* `POST /api/_version_/fleet/configuration_profiles/resend/batch` batch-resends a specific configuration profile to all hosts where it is in a specific satus (e.g. "failed"). Does not support re-sending a DDM profile. See [the API reference](https://fleetdm.com/docs/rest-api/rest-api#batch-resend-custom-os-setting-configuration-profile). +* `POST /api/_version_/fleet/configuration_profiles/resend/batch` batch-resends a specific configuration profile to all hosts where it is in a specific status (e.g. "failed"). Does not support re-sending a DDM profile. See [the API reference](https://fleetdm.com/docs/rest-api/rest-api#batch-resend-custom-os-setting-configuration-profile). Via `fleetctl gitops`, the following YAML section can be used to manage profiles: @@ -79,7 +79,7 @@ The [various endpoint operations are handled in the Fleet implementation](https: * `strings.HasPrefix(Endpoint, "declaration/activation")`: sends the full JSON of the corresponding activation (identified by the "Endpoint"). Activations can be used to conditionally apply configurations based on predicates, but we currently don't use that feature and send an unconditional activation. * `Endpoint == "status"`: receives the status report of the DDM profiles on the host. If the declaration is active and valid, it is marked as "verified", and if it is invalid it is marked as "failed". Other rare cases are handled in this code, but those are the main ones. Note that [according the Roberto's research at the time](https://github.com/fleetdm/fleet/blob/afc37124eedde3a226137cca613adf3a0ff799c7/server/service/apple_mdm.go#L6084-L6093), the host will not send "remove" statuses, instead we detect removal by the fact that the declaration is not in the status report. -Note that the "status" endpoint [can carry other information](https://developer.apple.com/documentation/devicemanagement/status-reports), like changes in dynamic device state (e.g. if a declaration had a subscription requesting that information, such as battery healty, certificates, etc.). We currently only use it to update the declaration's status. +Note that the "status" endpoint [can carry other information](https://developer.apple.com/documentation/devicemanagement/status-reports), like changes in dynamic device state (e.g. if a declaration had a subscription requesting that information, such as battery health, certificates, etc.). We currently only use it to update the declaration's status. In addition to verifying the DDM profiles from the status response of the DDM protocol, we also [update the statuses from the response of the traditional `DeclarativeManagement` command](https://github.com/fleetdm/fleet/blob/afc37124eedde3a226137cca613adf3a0ff799c7/server/service/apple_mdm.go#L3486) to do the initial transition from "pending" to "verifying" or "failed" depending on the result of the command. This batch-affects all declarations for the host. diff --git a/docs/Contributing/architecture/software/vulnerability-processing.md b/docs/Contributing/architecture/software/vulnerability-processing.md index 8fb2b25913..252860a1b8 100644 --- a/docs/Contributing/architecture/software/vulnerability-processing.md +++ b/docs/Contributing/architecture/software/vulnerability-processing.md @@ -315,7 +315,7 @@ The following CPE translation rule is used to reduce false positives when ruby i This is needed because ruby is commonly included in the title in the CPE database. This rule matches the software name `ruby` matching a regular expression pattern and installed on the host using `homebrew`. -When searching for [CPEs](https://en.wikipedia.org/wiki/Common_Platform_Enumeration), the specifed `product` and `vendor` will be added to the filter criteria. +When searching for [CPEs](https://en.wikipedia.org/wiki/Common_Platform_Enumeration), the specified `product` and `vendor` will be added to the filter criteria. ```json [ @@ -382,11 +382,11 @@ The CPE translation rule. The CPE translation software match criteria. Used to match software collected from hosts. Fields are are AND'd together. Values inside each field are OR'd together. -| Name | Type | Description | -| --- | --- | --- | -| `name` | array[string] | The software name to match. Enclose within `/` to specify a regular expression pattern. | -| `bundle_identifer` | array[string] | The software bundle identifier (MacOS apps only) to match. Enclose within `/` to specify a regular expression pattern. | -| `source` | array[string] | The software source to match. Enclose within `/` to specify a regular expression pattern. | +| Name | Type | Description | +| --- | --- | --- | +| `name` | array[string] | The software name to match. Enclose within `/` to specify a regular expression pattern. | +| `bundle_identifier` | array[string] | The software bundle identifier (MacOS apps only) to match. Enclose within `/` to specify a regular expression pattern. | +| `source` | array[string] | The software source to match. Enclose within `/` to specify a regular expression pattern. | ##### CPE Translation (object) diff --git a/docs/Contributing/guides/ui/design-qa-considerations.md b/docs/Contributing/guides/ui/design-qa-considerations.md index 94d3f0a22e..f0f6c218da 100644 --- a/docs/Contributing/guides/ui/design-qa-considerations.md +++ b/docs/Contributing/guides/ui/design-qa-considerations.md @@ -85,7 +85,7 @@ This is meant to be a helpful checklist of 'events' or 'transactions' to help ca - Remove Manual label - Add host to an existing label - Remove a host from a label -- Label selecion (policy / profile / software) +- Label selection (policy / profile / software) - Include all - Include any - Exclude all diff --git a/docs/Contributing/product-groups/mdm/android-mdm.md b/docs/Contributing/product-groups/mdm/android-mdm.md index ef2e2d972d..bbdaa705c2 100644 --- a/docs/Contributing/product-groups/mdm/android-mdm.md +++ b/docs/Contributing/product-groups/mdm/android-mdm.md @@ -59,7 +59,7 @@ There's also a command-line tool in `tools/android` that can list/delete/etc. en ## Known issues and limitations - The Fleet server URL must be public for pub/sub to work properly. - The Fleet server URL cannot change -- pub/sub is set up with one URL. See issue [Allow Fleet server URL update when using Android](https://github.com/fleetdm/fleet/issues/29878) -- Network reliability issues may leave the Android enterprise flow in a broken state. For example, if fleetdm.com proxy creates an Android enteprise but Fleet server goes offline and does not receive the secret key. +- Network reliability issues may leave the Android enterprise flow in a broken state. For example, if fleetdm.com proxy creates an Android enterprise but Fleet server goes offline and does not receive the secret key. ## Architecture diagrams diff --git a/docs/Contributing/product-groups/orchestration/understanding-host-vitals.md b/docs/Contributing/product-groups/orchestration/understanding-host-vitals.md index d555b5cc7a..b1019e9873 100644 --- a/docs/Contributing/product-groups/orchestration/understanding-host-vitals.md +++ b/docs/Contributing/product-groups/orchestration/understanding-host-vitals.md @@ -292,7 +292,7 @@ WITH registry_keys AS ( -- in order to account for hosts that might not have this -- key, and servers WHERE COALESCE(e.state, '0') IN ('0', '1', '2', '3') - -- old enrollments that aren't completely cleaned up may still be aronud + -- old enrollments that aren't completely cleaned up may still be around -- in the registry so we want to make sure we return the one with an actual -- discovery URL set if there is one. LENGTH is used here to prefer those -- with actual URLs over empty string/null if there are multiple diff --git a/docs/Contributing/reference/audit-logs.md b/docs/Contributing/reference/audit-logs.md index e1a80b637c..09ea6bfb46 100644 --- a/docs/Contributing/reference/audit-logs.md +++ b/docs/Contributing/reference/audit-logs.md @@ -1947,7 +1947,7 @@ This activity contains the following fields: ## added_conditional_access_integration_microsoft -Generated when Microsoft Entra is connected for conditonal access. +Generated when Microsoft Entra is connected for conditional access. This activity does not contain any detail fields. diff --git a/docs/Contributing/reference/patterns-backend.md b/docs/Contributing/reference/patterns-backend.md index 374232ce8f..92a65490d8 100644 --- a/docs/Contributing/reference/patterns-backend.md +++ b/docs/Contributing/reference/patterns-backend.md @@ -27,9 +27,9 @@ Inputs corresponding to sortable or indexed DB fields should be preprocessed (tr Invalid inputs should NOT log a server error. Server errors should be reserved for unexpected/serious issues. [`InvalidArgumentError` implements `IsClientError`](https://github.com/fleetdm/fleet/blob/529f4ed725117d99d668318aad23c9e1575fa7ee/server/fleet/errors.go#L134) method to indicate that it is a client error. [Backend sync where discussed](https://us-65885.app.gong.io/call?id=6515110653090875786&highlights=%5B%7B%22type%22%3A%22SHARE%22%2C%22from%22%3A340%2C%22to%22%3A1578%7D%5D). -### JSON unmarshaling +### JSON unmarshalling -`PATCH` API calls often need to distinguish between a field being set to `null` and a field not being present in the JSON. Use the structs from `optjson` package to handle this. [Backend sync where discussed](https://us-65885.app.gong.io/call?id=4055688254267958899). [JSON unmarshaling article and example](https://victoronsoftware.com/posts/go-json-unmarshal/). +`PATCH` API calls often need to distinguish between a field being set to `null` and a field not being present in the JSON. Use the structs from `optjson` package to handle this. [Backend sync where discussed](https://us-65885.app.gong.io/call?id=4055688254267958899). [JSON unmarshalling article and example](https://victoronsoftware.com/posts/go-json-unmarshal/). ## Go diff --git a/docs/Contributing/research/software/software-version-extract.md b/docs/Contributing/research/software/software-version-extract.md index b3d83f2d76..3de3c520ce 100644 --- a/docs/Contributing/research/software/software-version-extract.md +++ b/docs/Contributing/research/software/software-version-extract.md @@ -95,7 +95,7 @@ dmg contents on the server, from Wikipedia: > Hierarchical File System (HFS), HFS Plus (HFS+), File Allocation Table (FAT), > ISO9660, and Universal Disk Format (UDF). -Becuse we can't mount a `dmg` image in the server, and unless we find a +Because we can't mount a `dmg` image in the server, and unless we find a creative way to hack around this, we'll need to implement the logic to in Go. The only [library I could find](https://github.com/blacktop/go-apfs) is a WIP, diff --git a/docs/Deploy/Reference-Architectures.md b/docs/Deploy/Reference-Architectures.md index 4a6b8900e3..64291a8de6 100644 --- a/docs/Deploy/Reference-Architectures.md +++ b/docs/Deploy/Reference-Architectures.md @@ -299,7 +299,7 @@ GCP reference architecture can be found in [the Fleet repository](https://github - Cloud SQL MySQL 8.0 (Fleet database) - Memorystore Redis (Fleet cache & live query orchestrator) -GCP support for add/install software and file carve features is coming soon. Get [commmunity support](https://chat.osquery.io/c/fleet). +GCP support for add/install software and file carve features is coming soon. Get [community support](https://chat.osquery.io/c/fleet). ##### Example configuration breakpoints ###### [Up to 1000 hosts](https://cloud.google.com/products/calculator/#id=59670518-9af4-4044-af4a-cc100a9bed2f) @@ -338,7 +338,7 @@ GCP support for add/install software and file carve features is coming soon. Get #### Azure -Coming soon. Get [commmunity support](https://chat.osquery.io/c/fleet). +Coming soon. Get [community support](https://chat.osquery.io/c/fleet). #### Render diff --git a/docs/Get started/anatomy.md b/docs/Get started/anatomy.md index 9d153414e4..57d20d7120 100644 --- a/docs/Get started/anatomy.md +++ b/docs/Get started/anatomy.md @@ -5,7 +5,7 @@ This page details the core concepts you need to know to use Fleet. Fleet UI is the GUI (graphical user interface) used to control Fleet. [Learn more](https://youtu.be/1VNvg3_drow?si=SWyQSEQMoHUYDZ8C). ## Fleetctl -Fleetctl (pronouced “fleet control”) is a CLI (command line interface) tool for managing Fleet from the command line. [Docs](https://fleetdm.com/docs/using-fleet/fleetctl-cli). +Fleetctl (pronounced “fleet control”) is a CLI (command line interface) tool for managing Fleet from the command line. [Docs](https://fleetdm.com/docs/using-fleet/fleetctl-cli). ## Fleetd Fleetd is a bundle of agents provided by Fleet to gather information about your devices. Fleetd includes: diff --git a/docs/queries.yml b/docs/queries.yml index ba4af83a9c..3314a8f6a9 100644 --- a/docs/queries.yml +++ b/docs/queries.yml @@ -323,7 +323,7 @@ spec: -- in order to account for hosts that might not have this -- key, and servers WHERE COALESCE(e.state, '0') IN ('0', '1', '2', '3') - -- old enrollments that aren't completely cleaned up may still be aronud + -- old enrollments that aren't completely cleaned up may still be around -- in the registry so we want to make sure we return the one with an actual -- discovery URL set if there is one. LENGTH is used here to prefer those -- with actual URLs over empty string/null if there are multiple @@ -382,7 +382,7 @@ kind: built-in spec: name: Munki info platform: darwin - description: Retrives information about the last Munki run on a macOS device. + description: Retrieves information about the last Munki run on a macOS device. query: | SELECT version, errors, warnings @@ -397,7 +397,7 @@ kind: built-in spec: name: Network interfaces (Chrome) platform: chrome - description: Retrives information about a ChromeOS device's current network. + description: Retrieves information about a ChromeOS device's current network. query: | SELECT ipv4 AS address, mac @@ -546,7 +546,7 @@ kind: built-in spec: name: Orbit information platform: darwin, linux, windows - description: Retreives configuration information the osquery version and configuration manager running on a device. + description: Retrieves configuration information the osquery version and configuration manager running on a device. query: SELECT * FROM orbit_info purpose: Informational tags: built-in diff --git a/server/fleet/activities.go b/server/fleet/activities.go index 2715457fa6..fdcceabcc1 100644 --- a/server/fleet/activities.go +++ b/server/fleet/activities.go @@ -2705,7 +2705,7 @@ func (a ActivityTypeAddedConditionalAccessIntegrationMicrosoft) ActivityName() s } func (a ActivityTypeAddedConditionalAccessIntegrationMicrosoft) Documentation() (string, string, string) { - return "Generated when Microsoft Entra is connected for conditonal access.", + return "Generated when Microsoft Entra is connected for conditional access.", "This activity does not contain any detail fields.", "" } diff --git a/server/service/osquery_utils/queries.go b/server/service/osquery_utils/queries.go index 3e4a8e6b3e..f98f4142df 100644 --- a/server/service/osquery_utils/queries.go +++ b/server/service/osquery_utils/queries.go @@ -552,7 +552,7 @@ var extraDetailQueries = map[string]DetailQuery{ -- in order to account for hosts that might not have this -- key, and servers WHERE COALESCE(e.state, '0') IN ('0', '1', '2', '3') - -- old enrollments that aren't completely cleaned up may still be aronud + -- old enrollments that aren't completely cleaned up may still be around -- in the registry so we want to make sure we return the one with an actual -- discovery URL set if there is one. LENGTH is used here to prefer those -- with actual URLs over empty string/null if there are multiple