Prepare for 4.21.0 (#8011)
This PR addresses the instructions under number (1) in the releasing Fleet steps: https://fleetdm.com/docs/contributing/releasing-fleet#what-to-do - Update CHANGELOG - Bump versions
This commit is contained in:
Noah Talerman
@@ -1,3 +1,38 @@
|
||||
## Fleet 4.21.0 (Sep 28, 2022)
|
||||
|
||||
* Fleet Premium: Added the ability to know how many hosts and which hosts, on a team, are failing a global policy.
|
||||
|
||||
* Added validation to the `config` and `teams` configuration files. Fleet can be managed with [configuration files (YAML syntax)](https://fleetdm.com/docs/using-fleet/configuration-files) and the fleetctl command line tool.
|
||||
|
||||
* Added the ability to manage osquery flags remotely. This requires [Orbit, Fleet's agent manager](https://fleetdm.com/announcements/introducing-orbit-your-fleet-agent-manager). If at some point you revoked an old enroll secret, this feature won't work for hosts that were added to Fleet using this old enroll secret. To manage osquery flags on these hosts, we recommend deploying a new package. Check out the instructions [here on GitHub](https://github.com/fleetdm/fleet/issues/7377).
|
||||
|
||||
* Added a `/api/v1/fleet/device/{token}/desktop` API route that returns only the number of failing policies for a specific host.
|
||||
|
||||
* Added support for kubequery.
|
||||
|
||||
* Added support for an `AC_TEAM_ID` environment variable when creating [signed installers for macOS hosts](https://fleetdm.com/docs/using-fleet/adding-hosts#signing-installers).
|
||||
|
||||
* Made cards on the **Home** page clickable.
|
||||
|
||||
* Added es_process_file_events, password_policy, and windows_update_history tables to osquery.
|
||||
|
||||
* Added activity items to capture when, and by who, agent options are edited.
|
||||
|
||||
* Added logging to capture the user’s email upon successful login.
|
||||
|
||||
* Increased the size of placeholder text from extra small to small.
|
||||
|
||||
* Fixed an error that cleared the form when adding a new integration.
|
||||
|
||||
* Fixed an error generating Windows packages with the fleetctl package on non-English localizations of Windows.
|
||||
|
||||
* Fixed a bug that showed the small screen overlay when trying to print.
|
||||
|
||||
* Fixed the UI bug that caused the label filter dropdown to go under the table header.
|
||||
|
||||
* Fixed side panel tooltips to not be wider than side panel causing scroll bug.
|
||||
|
||||
|
||||
## Fleet 4.20.1 (Sep 15, 2022)
|
||||
|
||||
**This is a security release.**
|
||||
|
||||
@@ -1 +0,0 @@
|
||||
* Fix an error generating Windows packages with `fleetctl package` on non-English localizations of Windows.
|
||||
@@ -1 +0,0 @@
|
||||
* Users cannot save host status webhook without choosing required percent of hosts and days count in the app settings page
|
||||
@@ -1 +0,0 @@
|
||||
* Fix side panel tooltips to not be wider than side panel causing scroll bug
|
||||
@@ -1 +0,0 @@
|
||||
* Fix error in adding a new integration to not clear form
|
||||
@@ -1 +0,0 @@
|
||||
* Fixes bug which small screen overlay is shown when trying to print
|
||||
@@ -1 +0,0 @@
|
||||
- Update dogfood mysql to mysql8. Customer consumers of dogfood should upgrade by taking a snapshot of their database, and restoring it to a new database via the snapshot_identifier parameter.
|
||||
@@ -1,21 +0,0 @@
|
||||
* Orbit allows configuring osquery startup flags from Fleet, see [#7377](https://github.com/fleetdm/fleet/issues/7377).
|
||||
|
||||
Important note for existing deployments that use Orbit:
|
||||
This feature requires Orbit to communicate with Fleet. Orbit uses osquery's enroll secret to authenticate and enroll to Fleet.
|
||||
On environments where an enroll secret has been revoked, Orbit hosts that were deployed with such secret will fail to enroll to Fleet.
|
||||
This is not a regression, all existing features should work as expected, but we recommend to fix this issue given that we will be adding
|
||||
more features to Orbit that will use the new communication channel.
|
||||
|
||||
## Solution 1 (generate new packages)
|
||||
|
||||
1. To determine which hosts need to be fixed, run the following query: `SELECT * FROM orbit_info WHERE enrolled = false`.
|
||||
Hosts not running Orbit will fail to execute such query because the table doesn't exist, those can be ignored.
|
||||
2. Generate Orbit packages with the new enroll secret.
|
||||
3. Deploy Orbit packages to the hosts returned in (1).
|
||||
|
||||
## Deploy new secret
|
||||
|
||||
Alternatively, instead of generating new packages, the administrator can push the new enroll secret to hosts with revoked enroll secrets:
|
||||
- macOS: Push new secret to `/opt/orbit/secret.txt`.
|
||||
- Windows: Push new secret to `C:\Program Files\Orbit\secret.txt`.
|
||||
- Linux: Update the new secret set in the configuration file `/etc/default/orbit`.
|
||||
@@ -1,2 +0,0 @@
|
||||
Added new EE endpoint at '/api/_version_/fleet/device/{token}/desktop' to be used by Fleet Desktop
|
||||
to get the number of failing policies.
|
||||
@@ -1 +0,0 @@
|
||||
* Dashboard summary tiles now clickable
|
||||
@@ -1 +0,0 @@
|
||||
Use MSRC parser to generate security bulletin artifacts to be used for detecting Windows OS vulnerabilities.
|
||||
@@ -1 +0,0 @@
|
||||
* Added validation to raise errors if unknown keys or invalid values are passed to update the organization settings (including the agent options) or the team's agent options.
|
||||
@@ -1 +0,0 @@
|
||||
- keep policy filter on Manage Hosts Page changes across a team changes
|
||||
@@ -1 +0,0 @@
|
||||
* Indicate hoverable text on host details/ device user details
|
||||
@@ -1 +0,0 @@
|
||||
* Added logic to retry notarization and codesigning when using `FLEETCTL_NATIVE_TOOLING`
|
||||
@@ -1 +0,0 @@
|
||||
- adds a custom activity details text for edit agent options for global and team contexts.
|
||||
@@ -1 +0,0 @@
|
||||
* Added `low_disk_space_count` field to the `GET /host_summary` endpoint response that returns the number of hosts with less disk space available than the `low_disk_space` number provided as query parameter, available in Fleet Premium.
|
||||
@@ -1 +0,0 @@
|
||||
* Added option to filter hosts by low available disk space.
|
||||
@@ -1 +0,0 @@
|
||||
* Add es_process_file_events, password_policy and windows_update_history to osquery tables
|
||||
@@ -1 +0,0 @@
|
||||
* Placeholder text size small not extra small
|
||||
@@ -1 +0,0 @@
|
||||
* Updated team and organization settings' "agent options" validations from osquery 5.4.0 to osquery 5.5.1.
|
||||
@@ -1 +0,0 @@
|
||||
* Added logging to capture user email upon successful login
|
||||
@@ -1 +0,0 @@
|
||||
* Added logging to capture user email upon successful SSO login
|
||||
@@ -1 +0,0 @@
|
||||
- This fixes the UI bug where the label filter dropdown goes under the table header and add a "no custom labels" state that shows when the user has not created any custom labels yet.
|
||||
@@ -1,2 +0,0 @@
|
||||
- update SSO form values in Fleet UI so that they are trimmed before being sent to the server and
|
||||
show UI error when sso login fails
|
||||
@@ -1 +0,0 @@
|
||||
* Global agent options renders backend errors in UI
|
||||
@@ -1 +0,0 @@
|
||||
* Add support for [kubequery](https://github.com/Uptycs/kubequery).
|
||||
@@ -1 +0,0 @@
|
||||
* Add support for Apple Team ID in Notarization workflows via `AC_TEAM_ID` environment variable.
|
||||
@@ -4,9 +4,9 @@ name: fleet
|
||||
keywords:
|
||||
- fleet
|
||||
- osquery
|
||||
version: v4.20.1
|
||||
version: v4.21.0
|
||||
home: https://github.com/fleetdm/fleet
|
||||
sources:
|
||||
- https://github.com/fleetdm/fleet.git
|
||||
appVersion: v4.20.1
|
||||
appVersion: v4.21.0
|
||||
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
# All settings related to how Fleet is deployed in Kubernetes
|
||||
hostName: fleet.localhost
|
||||
replicas: 3 # The number of Fleet instances to deploy
|
||||
imageTag: v4.20.1 # Version of Fleet to deploy
|
||||
imageTag: v4.21.0 # Version of Fleet to deploy
|
||||
createIngress: true # Whether or not to automatically create an Ingress
|
||||
ingressAnnotations: {} # Additional annotation to add to the Ingress
|
||||
podAnnotations: {} # Additional annotations to add to the Fleet pod
|
||||
|
||||
@@ -264,7 +264,7 @@ spec:
|
||||
spec:
|
||||
containers:
|
||||
- name: fleet
|
||||
image: fleetdm/fleet:4.20.1
|
||||
image: fleetdm/fleet:4.21.0
|
||||
env:
|
||||
# if running Fleet behind external ingress controller that terminates TLS
|
||||
- name: FLEET_SERVER_TLS
|
||||
|
||||
@@ -56,7 +56,7 @@ variable "database_name" {
|
||||
|
||||
variable "fleet_image" {
|
||||
description = "the name of the container image to run"
|
||||
default = "fleetdm/fleet:v4.20.1"
|
||||
default = "fleetdm/fleet:v4.21.0"
|
||||
}
|
||||
|
||||
variable "software_inventory" {
|
||||
|
||||
@@ -68,5 +68,5 @@ variable "redis_mem" {
|
||||
}
|
||||
|
||||
variable "image" {
|
||||
default = "fleet:v4.20.1"
|
||||
default = "fleet:v4.21.0"
|
||||
}
|
||||
|
||||
@@ -157,7 +157,7 @@ resource "helm_release" "main" {
|
||||
|
||||
set {
|
||||
name = "imageTag"
|
||||
value = "v4.20.1"
|
||||
value = "v4.21.0"
|
||||
}
|
||||
|
||||
set {
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"name": "fleetctl",
|
||||
"version": "v4.20.1",
|
||||
"version": "v4.21.0",
|
||||
"description": "Installer for the fleetctl CLI tool",
|
||||
"bin": {
|
||||
"fleetctl": "./run.js"
|
||||
|
||||
Reference in New Issue
Block a user