Merge branch 'main' into feat-automatic-migrate-windows-hosts

This commit is contained in:
Martin Angers
2024-12-03 11:07:25 -05:00
committed by GitHub
90 changed files with 919 additions and 268 deletions
-1
View File
@@ -1 +0,0 @@
* Added capability for Fleet to serve yara rules to agents over HTTPS authenticated via node key (requires osquery 5.14+).
@@ -1 +0,0 @@
* Improved memory usage of the Fleet server when uploading a large software installer file. Note that the installer will now use (temporary) disk space and sufficient storage space is required.
@@ -1 +0,0 @@
- Speed up adding and removing profiles to large teams by an order of magnitude
@@ -1 +0,0 @@
- add info banner for cloud customers to help with their windows autoenrollment setup
@@ -1 +0,0 @@
* Generate an activity when activity automations are enabled, edited, or disabled.
-1
View File
@@ -1 +0,0 @@
* Cancelled pending script executions when a script is edited or deleted.
+1
View File
@@ -0,0 +1 @@
* Replaced the internal use of the deprecated `go.mozilla.org/pkcs7` package with the maintained fork `github.com/smallstep/pkcs7`.
@@ -1 +0,0 @@
* Fixed the MDM configuration profiles deployment when based on excluded labels - prior to this fix, hosts were considered "not a member" of the label by default, even if they had not yet returned results for the excluded labels. The fix checks the label's creation time vs the host's last reported label results timestamp to prevent deploying a configuration profile if it does not yet know if the host is a member or not of those labels.
@@ -1 +0,0 @@
* GitOps: Fixed path resolution for installer queries and scripts to always be relative to where the query file or script is referenced. This change breaks existing YAML files that had to account for previous inconsistent behavior (e.g. installers in a subdirectory referencing scripts elsewhere).
-1
View File
@@ -1 +0,0 @@
- Creating a query allow users to turn on/off automations while being transparent of the current log destination
-1
View File
@@ -1 +0,0 @@
* Added indicator of how fresh a software title's host and version counts are on the title's details page
-2
View File
@@ -1,2 +0,0 @@
- Updates GitOps to return an error if the deprecated `apple_bm_default_team` key is used and there
are more than 1 ABM tokens in Fleet.
-2
View File
@@ -1,2 +0,0 @@
- Fixed issue where minimum OS version enforcement was not being applied during Apple ADE if MDM
IdP integration was enabled.
-1
View File
@@ -1 +0,0 @@
- Reboot linux machine on unlock to work around GDM bug on Ubuntu 24.04
-1
View File
@@ -1 +0,0 @@
- Users can view scripts in the UI (from both the scripts page and host details page) without downloading them
-2
View File
@@ -1,2 +0,0 @@
- add UI for allowing users to install custom profiles on hosts that include any of the defined
labels
-1
View File
@@ -1 +0,0 @@
- Add support for labels_include_any to gitops
-1
View File
@@ -1 +0,0 @@
- Adds DB support for "include any" label profile deployment
-1
View File
@@ -1 +0,0 @@
- Adds support for "include any" label/profile relationships to the profile reconciliation machinery.
-1
View File
@@ -1 +0,0 @@
- Fleet UI: Major improvements to keyboard accessibility throughout app (e.g. checkboxes, dropdowns, table navigation)
-1
View File
@@ -1 +0,0 @@
- Added UI features supporting disk encryption for Ubuntu and Fedora Linux.
-1
View File
@@ -1 +0,0 @@
- Fix some cases where Fleet Maintained Apps generated incorrect uninstall scripts
-1
View File
@@ -1 +0,0 @@
Added activity item for fleetd enrollment with host serial and display name.
-1
View File
@@ -1 +0,0 @@
- Add support for deb packages compressed with zstd
@@ -1 +0,0 @@
- Fleet UI: Disable accessibility via keyboard for forms that are disabled via a slider
@@ -1,2 +0,0 @@
* Set a more elegant minimum height for the Add hosts > ChromeOS > Policy for extension field,
avoiding a scrollbar.
-1
View File
@@ -1 +0,0 @@
- Download ABM public key as PEM format instead of CRT
@@ -1 +0,0 @@
* Allowed skipping computationally heavy population of vulnerability details when populating host software on hosts list endpoint (`GET /api/latest/fleet/hosts`) when using Fleet Premium (`populate_software=without_vulnerability_descriptions`)
@@ -1 +0,0 @@
- update a package used for testing (msw) to improve security
-2
View File
@@ -1,2 +0,0 @@
- Fixes a bug where a device that was removed from ABM and then added back wouldn't properly
re-enroll in Fleet MDM
-1
View File
@@ -1 +0,0 @@
Fixed issue with uploading macOS software packages that do not have a top level Distribution.xml, but do have a top level PackageInfo.xml. For example, Okta Verify.app
-2
View File
@@ -1,2 +0,0 @@
- Fixes a bug where users would be allowed to attempt an install of an App Store app on a host that
was not MDM enrolled.
@@ -0,0 +1 @@
- Display Windows MDM WSTEP flags in `fleet --help`.
-1
View File
@@ -1 +0,0 @@
* Updated software batch endpoint status code from 200 (OK) to 202 (Accepted)
-1
View File
@@ -1 +0,0 @@
Added better handling of timeout and insufficient permissions errors in NDES SCEP proxy.
-1
View File
@@ -1 +0,0 @@
Fixed name/version parsing issue with PE (EXE) installer self-extracting archives such as Opera.
@@ -1 +0,0 @@
* Fixed a bug where the create and update label endpoints could return outdated information in a deployment using a mysql replica.
-1
View File
@@ -1 +0,0 @@
- Fleet UI: Prompt user to reenter the password if SCEP/NDES url or username has changed
@@ -1 +0,0 @@
* Dismiss error flash on the my device page when navigating to another URL.
-2
View File
@@ -1,2 +0,0 @@
- Modifies the Fleet setup experience feature to not run if there is no software or script
configured for the setup experience.