Commit Graph
11352 Commits
Author SHA1 Message Date
Sarah Gillespie 03bd837c9c Add backend to resend host MDM profiles (#18212)
Issue #17897 

# Checklist for submitter

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-04-12 14:34:54 -05:00
EricandMike Thomas a389822f42 Website: Add steps to /start questionnaire (#18074)
Closes: #18047

Changes:
- Added three steps to the /start questionnaire
- Updated the contact page to prefill information for logged-in users by
default
- Updated the layout of the f/leetctl-preview page for users navigating
to it from the /start page.
- Updated the quote for vulnerability management on the /start and
/contact pages to have a logo (There will be a separate PR, to add it to
testimonials.yml)

---------

Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
2024-04-08 19:39:19 +09:00
Eric 14c312361b Website: update <parallax-city> component to conditionally disable animation (#17816)
Closes: #17482

Changes:
- Updated the `<parallax-city>` component to display a static image if a
user's browser has hardware/graphics acceleration disabled.
2024-04-05 19:09:58 -05:00
Sam PflugerandJason Lewis f0e3259765 Add CSE role (#17990)
Co-authored-by: Jason Lewis <57552211+Patagonia121@users.noreply.github.com>
2024-04-05 17:46:35 -05:00
Victor Lyuboslavsky e8487fae53 In kubequery, updating golang.org/x/net dependency to fix GO-2024-2687 (#18108)
#17903
In kubequery, updating golang.org/x/net dependency to fix GO-2024-2687
2024-04-05 17:43:10 -05:00
Eric e21be6d275 Handbook: fix duplicate ritual description in digital experience rituals (#18090)
Changes: 
- Updated the description and moreInfoUrl for the "Check browser
compatibility for fleetdm.com" ritual.
2024-04-05 17:37:04 -05:00
Eric d6036b181b Schema: Remove unused and outdated schema/fleet_schema.json (#18092)
Changes:
- Deleted `schema/fleet_schema.json` (This file was previously used when
merging the osquery schema with Fleet's overrides before we switched to
using YAML override files).
- Updated the description of the `generate-merged-schema` script.
2024-04-05 17:13:32 -05:00
Victor Lyuboslavsky ffc2d9f68a Fixing frontend code scanning vulnerability alerts (#18042)
#17903

- Fixing https://osv.dev/vulnerability/GHSA-crh6-fp67-6883 by updating
@xmldom/xmldom@0.8.3 to @xmldom/xmldom@0.8.4
- Fixing https://osv.dev/vulnerability/GHSA-wf5p-g6vw-rhxx by overriding
axios@0.21.1 to axios@0.28.0
- Fixing https://osv.dev/vulnerability/GHSA-p6mc-m468-83gw by removing
lodash.set dependency by updating nock@13.2.4 to nock@13.5.4
- Fixing https://osv.dev/vulnerability/GHSA-4wf5-vphf-c2xc by updating
terser from 5.12.1 to 5.14.2
- Fixing https://osv.dev/vulnerability/GHSA-566m-qj78-rww5 and
https://osv.dev/vulnerability/GHSA-7fh5-64p2-3v2j by:
- Updating to autoprefixer@10.4.19, node-sass-glob-importer@5.3.3, and
postcss-loader@4.3.0
- Overriding css-selector-extract@3.3.6 to css-selector-extract@4.0.1
- Overriding css-node-extract@2.1.3 to css-node-extract@3.0.4 and
overriding its postcss dependency to ^8.4.31
2024-04-05 16:45:22 -05:00
Victor Lyuboslavsky c19ebfee46 Update golang.org/x/net dependency to fix GO-2024-2687 (#18086)
#17903 
Update golang.org/x/net dependency to fix GO-2024-2687
2024-04-05 16:45:07 -05:00
Lucas Manuel Rodriguez 5a02624f27 Add support for pre-release on Windows orbit builder (#18102)
We need to support semantic versioning with pre-releases to comply with
semantic versioning required by goreleaser allowing us to build orbit
pre-releases.
2024-04-05 18:41:46 -03:00
Eric 766d08e767 Schema: remove requires_user_context related code, regenerate schema json. (#18091)
Changes:
- Updated the `build-static-content` script to remove support for the
`requires_user_context` column attribute
- Updated `get-extended-osquery-schema` to not set a
`requires_user_context` value in the merged schema json.
- Regenerated `schema/osquery_fleet_schema.json`
2024-04-05 15:39:02 -05:00
Brock WaltersandVictor Lyuboslavsky 8d0d309a1f Update macos-install-wine.sh with codesign warning (#17982)
The Wine developer does have an Apple Develeoper certificate but the
"Wine Stable" app bundle is not code-signed or notarized post-install &
disables Gatekeeper for the install. This adds a warning to the script
user about the app not being signed. post-install

---------

Co-authored-by: Victor Lyuboslavsky <victor.lyuboslavsky@gmail.com>
2024-04-05 16:14:57 -04:00
Rachael Shaw 7bf3157fef Add redirects for calendar integration setup (#18094)
Adds redirects used in the Fleet UI for [calendar integration
setup](https://www.figma.com/file/p81nWodxL04YD7iNyr9xVa/%2317230-Fleet-in-your-calendar?type=design&node-id=362%3A3864&mode=design&t=p2gszo7V6sbbI2nF-1).
2024-04-05 14:00:04 -05:00
Jacob ShandlingandJacob Shandling 9e2be0028c UI: Restore missing JavaScript context in HQR config (#18087)
## Addresses #18083 
![Screenshot 2024-04-05 at 9 37
20 AM](https://github.com/fleetdm/fleet/assets/61553566/b683d30c-9af2-4cbb-8cea-b4a6e2422464)



- [x] Changes file added for user-visible changes in `changes/` 
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-04-05 11:47:42 -07:00
Victor Lyuboslavsky 5a6c407e1b Calendar webhook will retry if it receives response 429 (#18067)
#18044 
Calendar webhook will retry if it receives response 429 Too Many
Requests. Webhook request will retry for 30 minutes with a 1 minute max
delay between retries.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-04-05 12:44:56 -05:00
George Karr 6f78531280 Small changes to release and adding start of README (#18012) 2024-04-05 11:13:58 -05:00
Rachael ShawandEric 55df14a23e Update schema overrides to clarify which tables require joining against users (#18045)
For #16784.

These tables require joining against `users`:
+ `chrome_extension_content_scripts`
+ `chrome_extensions`
+ `firefox_addons`
+ `vscode_extensions`
+ `browser_plugins`
+ `crashes`
+ `preferences`
+ `safari_extensions`
+ `ssh_configs`
+ `user_ssh_keys`
+ `authorized_keys`
+ `known_hosts`
+ `shell_history`

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-04-05 11:11:18 -05:00
Eric 51c59e59b8 Website: update personalization (#18075)
Changes:
- updated the custom hook to support clearing the
`primaryBuyingSituation` with a query string (`?utm_content=clear`)
- Updated the pricing page to pre-select a pricing table mode based on a
user's `primaryBuyingSituation`
- reordered content on and updated the /support page to personalize/hide
community slack links based on a user's `primaryBuyingSituation`
- Updated the meta description of the product category landing pages
- updated personalization based on `primaryBuyingSituation` on the
/contact page.
- Updated the title of the /queries page based on the user's
`primaryBuyingSituation`
- Added personalization to the product category landing pages.
2024-04-05 12:57:45 +09:00
Eric 58db642f0a Website: remove /imagine policy and route. (#18076)
Changes:
- Removed `/imagine/*` policies.
2024-04-04 21:05:00 -05:00
Eric bb932c4659 Website: remove /imagine pages (#18073)
Changes:
- Removed /imagine pages
2024-04-04 19:18:38 -05:00
Eric 505084f790 Website: add "EDR health checks" to /endpoint-ops (#18059)
Closes: https://github.com/fleetdm/confidential/issues/5722

changes:
- updated the /endpoint-ops page to match the latest wireframes.
2024-04-05 08:40:11 +09:00
Dave HerderandSam Pfluger dda58e3dba Update README.md (#18011)
added 'Process a security questionnaire' responsibility

---------

Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2024-04-04 16:28:49 -05:00
Dave HerderandSam Pfluger 4671eb22d3 Update communications.md (#18040)
added link to trust portal under vendor questionnaires section

---------

Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2024-04-04 16:28:42 -05:00
Victor Lyuboslavsky f476ddcfd6 Fix panic due to nil calendar config. (#18065)
#18063

Fixing potential server panic when events are created with calendar
integration, but then global calendar integration is disabled.

Could not do a PR directly from
[fleet-v4.48.0](https://github.com/fleetdm/fleet/releases/tag/fleet-v4.48.0)
due to merge conflicts.

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-04-04 16:18:41 -05:00
JD 068670d8e3 Article: Fleet 4.48.0 release (#18062)
Article: Fleet 4.48.0 release and capitalization fixes to CHANGELOG.
#17531
2024-04-04 14:17:17 -07:00
Isabell Reedy a8fce3455a Add Award to digital experience page (#18049) 2024-04-04 16:02:25 -05:00
Noah Talerman 8042c9cec4 Head of Product Design is DRI for features table (#18052) 2024-04-04 16:01:44 -05:00
Noah Talerman 9bf9a162fc Run script modal: Update copy (#18068)
For the following story: #16460
2024-04-04 16:55:25 -04:00
Noah Talerman 842c258d7c Update workstations-canary.yml (#18051)
- Remove "chromeOS/macOS - Screenlock enabled"
2024-04-04 16:54:16 -04:00
Sam Pfluger c1752c9cfd Fix sentence case (#18069) 2024-04-04 15:06:15 -05:00
RachelElysia b7296ce4f9 Fleet UI: Surface orbit version and fleetd version to host details page (#18013) 2024-04-04 15:18:04 -04:00
Marko Lisica 4585a6e2c2 API design: Pre-fill and lock local account creation screen during out-of-the-box macOS setup (#17118)
API design for:
- #9147
2024-04-04 14:38:42 -04:00
Lucas Manuel Rodriguez 8194459ee9 Use osqueryd edge on servers canary team (#18058)
I copied `it-and-security/lib/servers.agent-options.yml` and added the
`update_channels` key.
2024-04-04 14:24:16 -04:00
Lucas Manuel Rodriguez e8ca959888 Add enterprise integration test for calendar events (#17900)
Integration tests for the calendar feature: #17441.

Adding coverage screenshots for the calendar cron and the osquery
distributed/write coverage:

![Screenshot 2024-03-27 at 14 20
44](https://github.com/fleetdm/fleet/assets/2073526/40d394ab-2208-4bec-981b-fe22fae8b5c1)
![Screenshot 2024-03-27 at 14 21
20](https://github.com/fleetdm/fleet/assets/2073526/1e4c8611-21ba-48a6-82f8-a163594f7f01)
2024-04-04 14:58:31 -03:00
Jacob ShandlingandJacob Shandling 77c8adf4bb Add frontend dev pattern for handlers (#18061)
Pattern doc updates per today's frontend sync

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-04-04 10:16:19 -07:00
Jacob ShandlingandJacob Shandling 74761b75d8 Update carve request block id mismatch error code from 500 –> 400 (#17974)
## Addresses #16951

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`
- [x] Added/updated tests
- [ ] Manual QA for all new/changed functionality – @ksatter can you
please add reproduction steps to the issue to aid in manual QA?

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-04-04 09:38:10 -07:00
Victor Lyuboslavsky 63c096b102 Waiving CVE-2023-32698 (#18056)
#17359 
Waiving CVE-2023-32698
2024-04-04 11:24:54 -05:00
Eric a0d1172f89 Website Update /start signup flow. (#18027)
Closes: #17958

Changes:
- Updated the primary and secondary CTAs site-wide
- Updated the /start page to have a multi-stage form that users can fill
out to personalize their onboarding experience
- Updated the signup action to not set a `primaryBuyingSituation` on new
user records (This will now be set when users progress through the
/start form)
- Added two new attributes to the `User` model:
`currentGetStartedQuestionnarieStep` and
`getStartedQuestionnarieAnswers` that save user's progress in the /start
form.


Before this PR can be merged we will need to:
- [x] Update the Zapier webhook that runs when new users sign up to no
longer expect a `primaryBuyingSituation` value
- [ ] Update the User table in the website's database
- [ ] Migrate the existing user records
2024-04-04 11:13:53 -05:00
RachelElysia 0db1c225f4 Fleet UI: Fix several flows where team ID is not being preserved (#17968) 2024-04-04 11:34:07 -04:00
Luke Heath 80b1f1f78f Prepare Fleet v4.48.0 (#18022) 2024-04-04 10:01:46 -05:00
Victor LyuboslavskyandNoah Talerman 5a3c54c0b6 Updated 1Password policy to only search 1 level deep for performance reasons. (#18003)
#17827 

Updated 1Password policy to only search one level deep for performance
reasons.

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2024-04-04 09:33:17 -05:00
Joanne Stableford 3de9a160ed Add info on how Fleeties can update benefit coverage for QLEs (#17998)
...Adding to our institutional knowledge.
2024-04-04 02:24:29 -05:00
Joanne StablefordandSam Pfluger a5c0224f42 Add process for reporting customer revenue status (#17965)
...

---------

Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2024-04-04 02:07:58 -05:00
Mike McNeilandEric f8157ce679 Website: personalize contact form (#18026)
Co-authored-by: Eric <eashaw@sailsjs.com>
2024-04-03 19:40:15 -05:00
Victor Lyuboslavsky 746309ca47 Waive 3 Go code scanning vulnerability alerts. (#18007)
Waiving 3 Go code scanning alerts flagged by osv-scanner.
2024-04-03 16:04:01 -05:00
Rachael Shaw 1d80aa7668 When flagging a parameter as premium-only, always include a period. (#18038)
For better readability: add periods as separation between the Fleet
Premium message and parameter descriptions.
   _Available in Fleet Premium_. Description text.
 _Available in Fleet Premium_ Description text.
2024-04-03 11:48:22 -05:00
Gabriel Hernandez 3decb68220 revert accidental merge for FE lint warning fixes (#18036)
This reverts commit a3f3230aa9.

I accidentally merged to main so am reverting this change.
2024-04-03 17:25:16 +01:00
Zach Wasserman e3deceeb6d Add parse_json, parse_jsonl, parse_xml, and parse_ini tables to fleetd (#18035)
For #17577

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [x] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux. (performed only on macOS)
2024-04-03 09:13:04 -07:00
Lucas Manuel Rodriguez 3d260fa9ab Bump osqueryd version to 5.12.1 (#18028)
Bumping version of osqueryd for releasing 5.12.1 to the `edge` channel.
2024-04-03 10:57:28 -03:00
Gabriel Hernandez a3f3230aa9 fix up some lint warning that show in github (#17997)
quick PR to clean up some of the warning that show up in github PRs.
2024-04-03 12:33:38 +01:00