Update Orbit changelog (#13744)
Updating changelog to include previous changes that were not documented. --------- Co-authored-by: Roberto Dip <dip.jesusr@gmail.com>
This commit is contained in:
Luke Heath
co-authored by
Roberto Dip
Roberto Dip
parent
272cc8e88b
commit
90ca9b4c4e
@@ -1 +0,0 @@
|
||||
* Fixed an issue affecting macOS devices with MDM enabled that prevented Orbit for restarting if Nudge was still open.
|
||||
@@ -1 +0,0 @@
|
||||
* An update bug where orbit symlink was not present is now fixed
|
||||
@@ -1 +0,0 @@
|
||||
* Add table implementation `software_update` to check whether Apple software needs updating.
|
||||
@@ -1 +0,0 @@
|
||||
* Added version information and icon on orbit and fleet-desktop binaries
|
||||
@@ -1 +0,0 @@
|
||||
* Fixed an issue preventing Nudge to read the configuration file delivered by Fleet on some installations. This only affects you if Nudge was enabled and configured on a host using Orbit v1.8.0
|
||||
@@ -1 +0,0 @@
|
||||
* New table was added to support CIS audit process
|
||||
@@ -1 +0,0 @@
|
||||
* MDM: added support to enhance the DEP migration flow in macOS.
|
||||
@@ -1 +0,0 @@
|
||||
* Improve the logic to read enroll secrets from macOS configuration profiles to be compatible with different MDM providers.
|
||||
@@ -1,2 +0,0 @@
|
||||
* Removed automatic functionality to call `launchctl kickstart -k softwareupdated` periodically, which was causing issues on some macOS devices.
|
||||
The `--disable-kickstart-softwareupdated` flag is kept for backwards compatibility but it doesn't have any effect.
|
||||
@@ -1 +0,0 @@
|
||||
* Adjusted the dialog shown during MDM migration to close when the button to contact IT is pressed.
|
||||
@@ -1 +0,0 @@
|
||||
* Fixed a crash that happened when updates where disabled and certain conditions (Nudge configuration set or host elegible for MDM migration) were met.
|
||||
@@ -1 +0,0 @@
|
||||
* Ensure MDM migration modal is not shown, and enrollment commands are not run if the host is already enrolled into Fleet
|
||||
@@ -1 +0,0 @@
|
||||
* Replace the black and white Fleet desktop icons with a single colorful icon on Windows.
|
||||
@@ -1,3 +0,0 @@
|
||||
- Updated MDM migration flow to include checking the output of `profiles show -type enrollment`
|
||||
as a pre-condition for `profiles renew -type enrollment` to mitigate issues where caching or other
|
||||
unexpected delays in Apple DEP profile assignment could cause the wrong profile to be renewed.
|
||||
@@ -1 +0,0 @@
|
||||
* Fixed a bug that set a wrong Fleet URL in Windows installers.
|
||||
@@ -1,2 +0,0 @@
|
||||
* Add a `--enable-scripts` flag to `fleetctl package` to build a package capable of script execution
|
||||
* Allow script execution to be enabled by providing a configuration profile with `PayloadType` equal to `com.fleetdm.fleetd.config` and a key `ScriptsEnabled` set to `true`.
|
||||
@@ -1 +0,0 @@
|
||||
* Wait until the device is fully unenrolled from the previous MDM to close the migration dialog.
|
||||
@@ -1 +0,0 @@
|
||||
* Ensure migration dialog is not opened automatically if it was opened manually in the last 15 minutes
|
||||
@@ -1,2 +0,0 @@
|
||||
* Orbit now kills any pre-existing fleet desktop processes at startup.
|
||||
* Orbit now handles SIGTERM on unix.
|
||||
@@ -1,13 +0,0 @@
|
||||
* Orbit allows configuring osquery startup flags from Fleet, see [#7377](https://github.com/fleetdm/fleet/issues/7377).
|
||||
|
||||
Important note for existing deployments that use Orbit:
|
||||
This feature requires Orbit to communicate with Fleet. Orbit uses osquery's enroll secret to authenticate and enroll to Fleet.
|
||||
On environments where an enroll secret has been revoked, Orbit hosts that were deployed with such secret will fail to enroll to Fleet.
|
||||
This is not a regression, all existing features should work as expected, but we recommend to fix this issue given that we will be adding
|
||||
more features to Orbit that will use the new communication channel.
|
||||
|
||||
1. To determine which hosts need to be fixed, run the following query: `SELECT * FROM orbit_info WHERE enrolled = false`.
|
||||
Hosts not running Orbit will fail to execute such query because the table doesn't exist, those can be ignored.
|
||||
2. Generate Orbit packages with the new enroll secret.
|
||||
3. Deploy Orbit packages to the hosts returned in (1).
|
||||
|
||||
@@ -1 +0,0 @@
|
||||
- Added functionality to rotate device tokens every one hour
|
||||
@@ -1 +0,0 @@
|
||||
* Add support for mTLS to fleetd.
|
||||
@@ -1 +0,0 @@
|
||||
- Fixed a bug in Fleet Desktop causing it to spam servers without licenses for policies.
|
||||
@@ -1,2 +0,0 @@
|
||||
- On Unix systems, dump pprof data into a `profiles` directory in the orbit root dir
|
||||
when receiving a SIGUSR1. This is to assist debugging for memory leaks
|
||||
@@ -1,2 +0,0 @@
|
||||
- Embed augeas lenses into orbit on Unix platforms so that the `augeas`
|
||||
table works without further configuration
|
||||
@@ -1 +0,0 @@
|
||||
* Set `--database_path` in the shell osqueryd invocation to retrieve UUID and other fields.
|
||||
@@ -1 +0,0 @@
|
||||
* Add table implementation `sntp_request` to query NTP servers.
|
||||
@@ -1 +0,0 @@
|
||||
* Add `pmset` table extension to fleed for CIS check 2.9.1.
|
||||
@@ -1 +0,0 @@
|
||||
* Add `authdb` table for macOS CIS check 5.7.
|
||||
@@ -1 +0,0 @@
|
||||
* Add `dscl` table to Orbit for CIS check 5.6 on macOS.
|
||||
@@ -1 +0,0 @@
|
||||
* Add `firmware_eficheck_integrity_check` table for macOS CIS 5.9.
|
||||
@@ -1 +0,0 @@
|
||||
* Add `sudo_info` table to Orbit for CIS checks 5.4 and 5.5 on macOS.
|
||||
@@ -1 +0,0 @@
|
||||
* Adding support to query Windows MDM enrollment status and to enforce MDM commands through the mdm_bridge virtual table
|
||||
@@ -1 +0,0 @@
|
||||
* Allow `fleetd` to get an enroll secret and Fleet URL configuration from a configuration profile on macOS.
|
||||
@@ -1 +0,0 @@
|
||||
* Added a new flag, `--use-system-configuration` to make orbit read configuration values from the system. Currently this is only supported in macOS via configuration profiles.
|
||||
@@ -1 +0,0 @@
|
||||
- Added `launchctl bootstrap` retries in Orbit `pkg` installer to fix MDM deployments of Orbit (when pushed with `InstallEnterpriseApplication`).
|
||||
@@ -1 +0,0 @@
|
||||
* Windows MSI installer now uses custom actions to remove Orbit files
|
||||
@@ -1,2 +0,0 @@
|
||||
* Orbit lost communication with Fleet server
|
||||
when the certificate used for insecure mode gets deleted.
|
||||
@@ -1 +0,0 @@
|
||||
* Fixed an issue that prevented orbit shell to run when the osqueryd instance ran through orbit shell attempted to register the same named pipe name used by the osqueryd instance launched by orbit service
|
||||
@@ -1,3 +0,0 @@
|
||||
* When running on Windows, Fleet service was getting killed by the OS when
|
||||
service start takes longer than 30 secs due to missing calls to the
|
||||
Service Control Manager (SCM) APIs.
|
||||
@@ -1 +0,0 @@
|
||||
* Fleet-desktop app on windows now removes the tray icon when it exits
|
||||
@@ -1 +0,0 @@
|
||||
* When WMI call fails on Windows, UUID can now be retrieved by reading the SMBIOS interface.
|
||||
@@ -1,2 +0,0 @@
|
||||
* Orbit now restarts and switches channels when needed,
|
||||
even if the new channel is already installed
|
||||
@@ -1 +0,0 @@
|
||||
* Orbit service on windows is not creating the secret-orbit-node-key.txt with a restricted ACL to allow only privileged users to access its content
|
||||
@@ -1 +0,0 @@
|
||||
* Orbit now installs propery on Windows Server 2012 and 2016 environments with legacy Orbit or Osquery previously installed
|
||||
@@ -1 +0,0 @@
|
||||
- Fixed Orbit bug that caused it to restart repeatedly when Fleet agent options are configured with `command_line_flags: {}`.
|
||||
@@ -1 +0,0 @@
|
||||
* Fix a panic in `fleetd` that might occurr when concurrent requests are made to the server.
|
||||
@@ -1 +0,0 @@
|
||||
- Implement `icloud_private_relay` table to get iCloud Private Relay status.
|
||||
@@ -1 +0,0 @@
|
||||
* Added support to `fleetd` to run the necessary command to renew the MDM enrollment profile on the devices that are pending automatic enrollment into Fleet MDM.
|
||||
@@ -1 +0,0 @@
|
||||
* Added periodical restart of the `softwareupdated` service to work around a macOS bug where it sometimes hangs and prevents software updates.
|
||||
@@ -1 +0,0 @@
|
||||
- update fleetctl to generate installer flags that use a larger default file carving block size compatible with MySQL 8 & S3
|
||||
@@ -1 +0,0 @@
|
||||
- Implement autoupdate and deploy extensions via Orbit
|
||||
@@ -1 +0,0 @@
|
||||
- Implement table to hold csrutil_info extension via Orbit
|
||||
@@ -1 +0,0 @@
|
||||
- Implement table to hold nvram_info extension via Orbit
|
||||
@@ -1 +0,0 @@
|
||||
- Implement table to hold pwd_policy options extension via Orbit
|
||||
@@ -1 +0,0 @@
|
||||
- Implement table to hold user_login_settings options extension via Orbit
|
||||
@@ -1 +0,0 @@
|
||||
* Stop rendering errors as tooltips in Fleet Desktop. Errors can now be found in the Fleet Desktop logs.
|
||||
@@ -1 +0,0 @@
|
||||
* Orbit now re-enroll when encountering a 401/unauthenticated error when communicating with orbit endpoints on Fleet server
|
||||
@@ -1 +0,0 @@
|
||||
* Fix theme detection and icon coloring issues for Fleet Desktop on Windows.
|
||||
Reference in New Issue
Block a user