Prepare Fleet v4.37.0 (#13821)
This commit is contained in:
Luke Heath
@@ -1,3 +1,83 @@
|
||||
## Fleet 4.37.0 (Sep 8, 2023)
|
||||
|
||||
### Changes
|
||||
|
||||
* Added `/scripts/run` and `scripts/run/sync` API endpoints to send a script to be executed on a host and optionally wait for its results.
|
||||
|
||||
* Added `POST /api/fleet/orbit/scripts/request` and `POST /api/fleet/orbit/scripts/result` Orbit-specific API endpoints to get a pending script to execute and send the results back, and added an Orbit notification to let the host know it has scripts pending execution.
|
||||
|
||||
* Improved performance at scale when applying hundreds of policies to thousands of hosts via `fleetctl apply`.
|
||||
- IMPORTANT: In previous versions of Fleet, there was a performance issue (thundering herd) when applying hundreds of policies on a large number of hosts. To avoid this, make sure to deploy this version of Fleet, and make sure Fleet is running for at least 1h (or the configured `FLEET_OSQUERY_POLICY_UPDATE_INTERVAL`) before applying the policies.
|
||||
|
||||
* Added pagination to the policies API to increase response time.
|
||||
|
||||
* Added policy count endpoints to support pagination on the frontend.
|
||||
|
||||
* Added an endpoint to report `fleetd` errors.
|
||||
|
||||
* Added logic to report errors during MDM migration.
|
||||
|
||||
* Added support in fleetd to execute scripts and send back results (disabled by default).
|
||||
|
||||
* Added an activity log when script execution was successfully requested.
|
||||
|
||||
* Automatically set the DEP profile to be the same as "no team" (if set) for teams created using the `/match` endpoint (used by Puppet).
|
||||
|
||||
* Added JumpCloud to the list of well-known MDM solutions.
|
||||
|
||||
* Added `fleetctl run-script` command.
|
||||
|
||||
* Made all table links right-clickable.
|
||||
|
||||
* Improved the layout of the MDM SSO pages.
|
||||
|
||||
* Stored user email when a user turned on MDM features with SSO enabled.
|
||||
|
||||
* Updated the copy and image displayed on the MDM migration modal.
|
||||
|
||||
* Upgraded Go to v1.19.12.
|
||||
|
||||
* Updated the macadmins/osquery-extension to v0.0.15.
|
||||
|
||||
* Updated nanomdm dependency.
|
||||
|
||||
### Bug Fixes
|
||||
|
||||
* Fixed a bug where live query UI and export data tables showed all returned columns.
|
||||
|
||||
* Fixed a bug where Jira and/or Zendesk integrations were being removed when an unrelated setting was changed.
|
||||
|
||||
* Fixed software ingestion to not re-insert software when incoming fields from hosts were longer than what Fleet supports. This bug caused some CVEs to be reported every time the vulnerability cron ran.
|
||||
- IMPORTANT: After deploying this fix, the vulnerability cron will report the CVEs one last time, and subsequent cron runs will not report the CVE (as expected).
|
||||
|
||||
* Fixed duplicate policy names in `ee/cis/win-10/cis-policy-queries.yml`.
|
||||
|
||||
* Fixed typos in policy queries in the Windows CIS policies YAML (`ee/cis/win-10/cis-policy-queries.yml`).
|
||||
|
||||
* Fixed a bug where query stats (aka `Performance impact`) were not being populated in Fleet.
|
||||
|
||||
* Added validation to `fleetctl apply` for duplicate policy names in the YAML file and attempting to change the team of an existing policy.
|
||||
|
||||
* Optimized host queries when using policy statuses.
|
||||
|
||||
* Changed the authentication method during Windows MDM enrollment to use `LoadHostByOrbitNodeKey` instead of `HostByIdentifier`.
|
||||
|
||||
* Fixed alignment on long label names on host details label filter dropdown.
|
||||
|
||||
* Added UI for script run activity and script details modal.
|
||||
|
||||
* Fixed queries navigation bar bug where if in query detail, you could not navigate back to the manage queries table.
|
||||
|
||||
* Made policy resolutions that include URLs clickable in the UI.
|
||||
|
||||
* Fixed Fleet UI custom query frequency display.
|
||||
|
||||
* Fixed live query filter icon and various other live query icons.
|
||||
|
||||
* Fixed Fleet UI tabs highlight while tabbing but not on multiple clicks.
|
||||
|
||||
* Fixed double scrollbar bug on dashboard page.
|
||||
|
||||
## Fleet 4.36.0 (Aug 17, 2023)
|
||||
|
||||
* Added the `fleetctl upgrade-packs` command to migrate 2017 packs to the new combined schedule and query concept.
|
||||
|
||||
@@ -1 +0,0 @@
|
||||
- Policy resolutions that include URLs are clickable in the UI
|
||||
@@ -1 +0,0 @@
|
||||
- Bug fix: Live query UI and Export data tables show all returned columns
|
||||
@@ -1,2 +0,0 @@
|
||||
- added validation to `fleetctl apply` for duplicate policy names in the yml file and attempting to change the team of an existing policy
|
||||
- added validation in `/api/latest/fleet/spec/policies` to error when attempting to change the team of an existing policy
|
||||
@@ -1 +0,0 @@
|
||||
- Fleet UI - Tabs highlight while tabbing but not on multiple clicks
|
||||
@@ -1,2 +0,0 @@
|
||||
- EXPERIMENTAL: Applying the environmental variable "FLEETD_SILENCE_ENROLL_ERROR"=1 will silence fleetd errors if not setting `--fleet-url` when generating an orbit installer.
|
||||
- Note: Set this variable before upgrading orbit, or restart the orbit service after setting it.
|
||||
@@ -1 +0,0 @@
|
||||
- UI fix double scroll bar bug on dashboard page
|
||||
@@ -1 +0,0 @@
|
||||
* Updated the copy and image displayed on the MDM migration modal
|
||||
@@ -1 +0,0 @@
|
||||
* Updated the macadmins/osquery-extension to v0.0.15
|
||||
@@ -1 +0,0 @@
|
||||
- More specific page titles shown in browser to match page of Fleet UI
|
||||
@@ -1 +0,0 @@
|
||||
* All table links are right-clickable
|
||||
@@ -1,2 +0,0 @@
|
||||
* Added an endpoint to report `fleetd` errors
|
||||
* Added logic to report errors during MDM migration
|
||||
@@ -1 +0,0 @@
|
||||
* Fixed a bug where query stats (aka `Performance impact`) were not being populated in Fleet.
|
||||
@@ -1 +0,0 @@
|
||||
- Fix queries nav bar bug where if in query detail could not navigate back to manage queries table
|
||||
@@ -1 +0,0 @@
|
||||
* Automatically set the DEP profile to be the same as "no team" (if set) for teams created using the `/match` endpoint (used by Puppet)
|
||||
@@ -1 +0,0 @@
|
||||
- Fleet UI: Fix custom query frequency display
|
||||
@@ -1 +0,0 @@
|
||||
* Store user email when an user turns on MDM features with SSO enabled.
|
||||
@@ -1 +0,0 @@
|
||||
- optimized hosts queries when using policy statuses
|
||||
@@ -1,2 +0,0 @@
|
||||
* Added pagination to policies API to increase response time
|
||||
* Added policy count endpoints to support pagination on frontend
|
||||
@@ -1 +0,0 @@
|
||||
- Host details page - Bug fix RBAC dropdown options on refresh
|
||||
@@ -1 +0,0 @@
|
||||
* Improved the layout of the MDM SSO pages
|
||||
@@ -1 +0,0 @@
|
||||
- Bug fix: Fix alignment on long label names on host details label filter dropdown
|
||||
@@ -1,4 +0,0 @@
|
||||
* Improved performance at scale when applying hundreds of policies to thousands of hosts via `fleetctl apply`.
|
||||
IMPORTANT: In previous versions of Fleet there's a performance issue (thundering herd) when applying hundreds of
|
||||
policies on a large number of hosts. To avoid this, make sure to deploy this version of Fleet, and make sure Fleet
|
||||
is running for at least 1h (or the configured `FLEET_OSQUERY_POLICY_UPDATE_INTERVAL`) before applying the policies.
|
||||
@@ -1 +0,0 @@
|
||||
- Fix live query filter icon and various other live query icons
|
||||
@@ -1 +0,0 @@
|
||||
* Upgrade Go to v1.19.12
|
||||
@@ -1 +0,0 @@
|
||||
* Added an activity log when an script execution is successfully requested.
|
||||
@@ -1 +0,0 @@
|
||||
- Added `fleetctl run-script` command.
|
||||
@@ -1 +0,0 @@
|
||||
* Add JumpCloud to the list of well-known MDM solutions
|
||||
@@ -1 +0,0 @@
|
||||
* Fix typos in policy queries in the Windows CIS policies yaml (`ee/cis/win-10/cis-policy-queries.yml`).
|
||||
@@ -1 +0,0 @@
|
||||
* Fix duplicate policy names in `ee/cis/win-10/cis-policy-queries.yml`.
|
||||
@@ -1,2 +0,0 @@
|
||||
* Fixed software ingestion to not re-insert software when incoming fields from hosts are longer than what Fleet supports. This bug caused some CVEs to be reported every time the vulnerability cron ran.
|
||||
IMPORTANT: After deploying this fix, the vulnerability cron will report the CVEs one last time, and subsequent cron runs will not report the CVE (as expected).
|
||||
@@ -1,2 +0,0 @@
|
||||
- change the authentication method during windows mdm enrollment to use `LoadHostByOrbitNodeKey`
|
||||
instead of `HostByIdentifier`
|
||||
@@ -1,2 +0,0 @@
|
||||
* Added `/scripts/run` and `scripts/run/sync` API endpoints to send a script to be executed on a host (and optionally wait for its results).
|
||||
* Added `POST /api/fleet/orbit/scripts/request` and `POST /api/fleet/orbit/scripts/result` Orbit-specific API endpoints to get a pending script to execute and send the results back, and added an orbit notification to let the host know it has scripts pending execution.
|
||||
@@ -1 +0,0 @@
|
||||
- add GET scripts/results/{id} endpoint to get the script result.
|
||||
@@ -1 +0,0 @@
|
||||
* Added support in fleetd to execute scripts and send back results (disabled by default).
|
||||
@@ -1 +0,0 @@
|
||||
- add UI for script run activity and script details modal
|
||||
@@ -1 +0,0 @@
|
||||
* Fixed a bug where Jira and/or Zendesk integrations were being removed when an unrelated setting was changed.
|
||||
@@ -1 +0,0 @@
|
||||
- Updated nanomdm dependency.
|
||||
@@ -8,4 +8,4 @@ version: v5.0.1
|
||||
home: https://github.com/fleetdm/fleet
|
||||
sources:
|
||||
- https://github.com/fleetdm/fleet.git
|
||||
appVersion: v4.36.0
|
||||
appVersion: v4.37.0
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
# All settings related to how Fleet is deployed in Kubernetes
|
||||
hostName: fleet.localhost
|
||||
replicas: 3 # The number of Fleet instances to deploy
|
||||
imageTag: v4.36.0 # Version of Fleet to deploy
|
||||
imageTag: v4.37.0 # Version of Fleet to deploy
|
||||
podAnnotations: {} # Additional annotations to add to the Fleet pod
|
||||
serviceAccountAnnotations: {} # Additional annotations to add to the Fleet service account
|
||||
resources:
|
||||
|
||||
@@ -56,7 +56,7 @@ variable "database_name" {
|
||||
|
||||
variable "fleet_image" {
|
||||
description = "the name of the container image to run"
|
||||
default = "fleetdm/fleet:v4.36.0"
|
||||
default = "fleetdm/fleet:v4.37.0"
|
||||
}
|
||||
|
||||
variable "software_inventory" {
|
||||
|
||||
@@ -68,5 +68,5 @@ variable "redis_mem" {
|
||||
}
|
||||
|
||||
variable "image" {
|
||||
default = "fleet:v4.36.0"
|
||||
default = "fleet:v4.37.0"
|
||||
}
|
||||
|
||||
@@ -206,7 +206,7 @@ resource "random_uuid" "jitprovisioner" {
|
||||
|
||||
# Use the local to make the trigger work.
|
||||
locals {
|
||||
fleet_tag = "v4.36.0"
|
||||
fleet_tag = "v4.37.0"
|
||||
}
|
||||
|
||||
resource "null_resource" "standard-query-library" {
|
||||
|
||||
@@ -165,7 +165,7 @@ resource "helm_release" "main" {
|
||||
|
||||
set {
|
||||
name = "imageTag"
|
||||
value = "v4.36.0"
|
||||
value = "v4.37.0"
|
||||
}
|
||||
|
||||
set {
|
||||
|
||||
@@ -13,7 +13,7 @@ variable "fleet_config" {
|
||||
type = object({
|
||||
mem = optional(number, 4096)
|
||||
cpu = optional(number, 512)
|
||||
image = optional(string, "fleetdm/fleet:v4.36.0")
|
||||
image = optional(string, "fleetdm/fleet:v4.37.0")
|
||||
family = optional(string, "fleet")
|
||||
sidecars = optional(list(any), [])
|
||||
depends_on = optional(list(any), [])
|
||||
|
||||
@@ -74,7 +74,7 @@ variable "fleet_config" {
|
||||
type = object({
|
||||
mem = optional(number, 4096)
|
||||
cpu = optional(number, 512)
|
||||
image = optional(string, "fleetdm/fleet:v4.36.0")
|
||||
image = optional(string, "fleetdm/fleet:v4.37.0")
|
||||
family = optional(string, "fleet")
|
||||
sidecars = optional(list(any), [])
|
||||
depends_on = optional(list(any), [])
|
||||
|
||||
@@ -17,7 +17,7 @@ provider "aws" {
|
||||
}
|
||||
|
||||
locals {
|
||||
fleet_image = "fleetdm/fleet:v4.36.0"
|
||||
fleet_image = "fleetdm/fleet:v4.37.0"
|
||||
}
|
||||
|
||||
resource "random_pet" "main" {}
|
||||
|
||||
@@ -163,7 +163,7 @@ variable "fleet_config" {
|
||||
type = object({
|
||||
mem = optional(number, 4096)
|
||||
cpu = optional(number, 512)
|
||||
image = optional(string, "fleetdm/fleet:v4.36.0")
|
||||
image = optional(string, "fleetdm/fleet:v4.37.0")
|
||||
family = optional(string, "fleet")
|
||||
sidecars = optional(list(any), [])
|
||||
depends_on = optional(list(any), [])
|
||||
|
||||
@@ -73,7 +73,7 @@ module "vulnprocessing" {
|
||||
ecs_cluster = module.main.byo-vpc.byo-db.byo-ecs.cluster.cluster_arn
|
||||
vpc_id = module.main.vpc.vpc_id
|
||||
fleet_config = {
|
||||
image = "fleetdm/fleet:v4.36.0"
|
||||
image = "fleetdm/fleet:v4.37.0"
|
||||
database = {
|
||||
password_secret_arn = module.main.byo-vpc.secrets.secret_arns["${var.rds_config.name}-database-password"]
|
||||
user = module.main.byo-vpc.rds.db_instance_username
|
||||
|
||||
@@ -215,7 +215,7 @@ variable "fleet_config" {
|
||||
type = object({
|
||||
mem = optional(number, 4096)
|
||||
cpu = optional(number, 512)
|
||||
image = optional(string, "fleetdm/fleet:v4.36.0")
|
||||
image = optional(string, "fleetdm/fleet:v4.37.0")
|
||||
family = optional(string, "fleet")
|
||||
sidecars = optional(list(any), [])
|
||||
depends_on = optional(list(any), [])
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"name": "fleetctl",
|
||||
"version": "v4.36.0",
|
||||
"version": "v4.37.0",
|
||||
"description": "Installer for the fleetctl CLI tool",
|
||||
"bin": {
|
||||
"fleetctl": "./run.js"
|
||||
|
||||
Reference in New Issue
Block a user