Commit Graph
16063 Commits
Author SHA1 Message Date
Sam Pfluger 09961d0dc9 Fix broken linke to GitLab handbook (#27532) 2025-03-26 11:27:35 -05:00
github-actions[bot]andjahzielv 843f24fe6b Update Fleet-maintained apps (#27527)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: jahzielv <19838370+jahzielv@users.noreply.github.com>
2025-03-26 09:59:19 -05:00
Noah Talerman 05fed30568 Product groups handbook: After a feature is prioritized (#27512) 2025-03-26 09:57:22 -05:00
Martin Angers 78c0d67e78 Bugfix: re-create deleted iOS/iPadOS host entries in Fleet if it checks in again via MDM (#27231) 2025-03-26 09:33:38 -04:00
github-actions[bot]andiansltx 193af722a3 Update Fleet-maintained apps (#27526)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: iansltx <472804+iansltx@users.noreply.github.com>
2025-03-25 17:43:41 -05:00
Noah Talerman f907d2e62b CIS Benchmarks guide (#27467) 2025-03-25 17:40:48 -04:00
github-actions[bot]andiansltx d4c7d4ab4e Update Fleet-maintained apps (#27525)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: iansltx <472804+iansltx@users.noreply.github.com>
2025-03-25 16:31:50 -05:00
github-actions[bot]andjahzielv 5b12525eab Update Fleet-maintained apps (#27524)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: jahzielv <19838370+jahzielv@users.noreply.github.com>
2025-03-25 16:29:39 -05:00
Martin Angers 2bb5efd25b Adjust delete host message for iDevices (#27513) 2025-03-25 15:33:24 -04:00
github-actions[bot] 072b2e5a73 Update Fleet-maintained apps (#27507) 2025-03-25 11:52:29 -06:00
Victor Lyuboslavsky 527428f0b4 Speeding up Go tests in CI. (#27434)
Using `go get .` (~3s) is faster than `go mod download` (~13s) in CI.
2025-03-25 12:03:24 -05:00
dependabot[bot] 8baa66a88c Bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 (#27426) 2025-03-25 11:51:59 -05:00
github-actions[bot]andjahzielv 173d5b37ac Update Fleet-maintained apps (#27502)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: jahzielv <19838370+jahzielv@users.noreply.github.com>
2025-03-25 11:29:58 -05:00
Marko Lisica 7b1462b56f Update OS updates guide (explain behavior when past deadline date is set) (#27492)
Related to:

- #27386
2025-03-25 12:03:27 -04:00
Allen Houchins f0ba5e81b4 Update enrollment-profile-up-to-date.yml (#27265)
Clearer end user instructions.
2025-03-25 10:16:29 -05:00
Jahziel Villasana-Espinoza 14bfe737a4 remove notion as it's not working yet (#27500)
> No issue, removing Notion until support is added later

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->
2025-03-25 10:40:59 -04:00
Victor Lyuboslavsky 075f5bf890 Add code comments and fix typo. No functional changes. (#27494)
For #27472
2025-03-25 09:08:47 -05:00
Gabriel Hernandez 5c56796403 update error message on os settings error details on host details (#27441)
For #27440

Updates showing the profile error message in os settings error cell to
show on a different error message from the API.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Added/updated automated tests
- [x] Manual QA for all new/changed functionality
2025-03-25 14:01:54 +00:00
Victor Lyuboslavsky 4b5cb913b7 Added explicit validation of FDEFileVaultOptions properties. (#27473)
For unreleased bug #27472 

# Checklist for submitter

- [x] Added/updated automated tests
- [x] Manual QA for all new/changed functionality
2025-03-24 19:36:36 -05:00
Victor Lyuboslavsky 09c2e2ff72 Added Apple Root Cert for gdmf request. (#27483)
I manually verified this fix by running the new
`github.com/fleetdm/fleet/v4/server/mdm/apple/gdmf/integrationtest` test
with and without the fix on a cloud Ubuntu server.

Without fix:
```
=== RUN   TestGetAssetMetadata
    gdmf_test.go:14:
        	Error Trace:	/root/fleet/server/mdm/apple/gdmf/integrationtest/gdmf_test.go:14
        	Error:      	Received unexpected error:
        	            	retrieving asset metadata: Get "https://gdmf.apple.com/v2/pmv": tls: failed to verify certificate: x509: certificate signed by unknown authority
        	Test:       	TestGetAssetMetadata
--- FAIL: TestGetAssetMetadata (3.53s)
FAIL
FAIL	github.com/fleetdm/fleet/v4/server/mdm/apple/gdmf/integrationtest	3.542s
FAIL
```

With fix:
```
=== RUN   TestGetAssetMetadata
--- PASS: TestGetAssetMetadata (0.39s)
PASS
ok  	github.com/fleetdm/fleet/v4/server/mdm/apple/gdmf/integrationtest	0.397s
```

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
- [x] Added/updated automated tests
- [x] Manual QA for all new/changed functionality
2025-03-24 19:26:36 -05:00
Benjamin Edwards b1cec4639e update gcp cloud run to use h2c networking by default (#27466)
I missed this setting in https://github.com/fleetdm/fleet/pull/26799
2025-03-24 15:43:14 -04:00
Jahziel Villasana-EspinozaandIan Littman 31362f74a3 use better columns in the exists queries for windows fma (#27452)
> follow up on windows FMA, #23118 

This improves the existence queries for FMA by using columns that do not
change in between versions.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Ian Littman <iansltx@gmail.com>
2025-03-24 15:37:55 -04:00
Robert Fairburn 3e3b773e38 Add athena to loadtesting (#27437) 2025-03-24 11:55:28 -05:00
Eric 11d7f51b7f Docs: Update vitals in queries.yml (#27373)
Closes: https://github.com/fleetdm/confidential/issues/10005

Changes:
- Updated the vitals in docs/queries.yml to have the latest changes from
docs/contributing/understanding-host-vitals.md (updated the software
vitals for Windows and macOS, added the host certificate vital, added
two python packages vitals)
2025-03-24 11:41:05 -05:00
jacobshandlingandJacob Shandling 67e5541140 GOM guide - improvements (#27425)
Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2025-03-24 10:23:20 -04:00
Ian Littman 768bdf21b3 Tweak FMA WinGet ingestion to ensure Box Drive installer URL is ingested properly (#27443)
Also updates other FMA manifests.

For the overall Windows FMA task. Treating as unreleased, hence no
issue.
2025-03-24 09:08:32 -05:00
Eric 458283f06a Website: small css fixes (#27427)
Closes: #27312

Changes:
- Updated the padding on text in the license dispenser form
- Updated the position of the platform icons on osquery table schema
pages
2025-03-21 18:48:45 -05:00
Joshua RoskosandEric 04a8339c14 Update alf.yml (#27416)
Corrected typo, by adding a period to the last sentence under Notes.

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2025-03-21 18:41:44 -05:00
jacobshandlingandJacob Shandling 82840ac141 Docs: Article for GitOps mode (#27414)
## For #27362

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2025-03-21 17:59:15 -04:00
Luke Heath b4f30a2154 Remove warn log from KPI script (#27418) 2025-03-21 16:49:45 -05:00
Luke Heath 472448f85c Handbook typo (#27421) 2025-03-21 16:49:17 -05:00
Ian Littman 1f42204002 Fix typo in "clean up duplicate Zoom" migration query (#27420) 2025-03-21 15:59:32 -05:00
Ian Littman 0d7b8c206c Fix migration function name (#27415) 2025-03-21 15:02:14 -05:00
Victor Lyuboslavsky b9ae1205c2 Different errors for configuration_profiles and batch endpoints. (#27411)
For #24862 

Unreleased bug.
Made disk encryption errors different between `configuration_profiles`
and `batch` endpoints.

# Checklist for submitter
- [x] Added/updated automated tests
- [x] A detailed QA plan exists on the associated ticket (if it isn't
there, work with the product group's QA engineer to add it)
- [x] Manual QA for all new/changed functionality
- [x] For unreleased bug fixes in a release candidate, confirmed that
the fix is not expected to adversely impact load test results or alerted
the release DRI if additional load testing is needed.
2025-03-21 14:24:52 -05:00
Dante Catalfamo 593df5d2d9 Fix deadlock: reduce number rows deleted at per iter, add retry (#27027)
#27002
2025-03-21 13:48:39 -04:00
Gabriel Hernandez 11dcb2dbf9 reset some form inputs if others are changed to force users to reenter their values (#27399)
For #26606

This makes a change to empty out the API token, Password, or Challange
inputs when other inputs on their form changes. This forces the user to
put in that value again so that their change can be authenticated.
2025-03-21 16:33:09 +00:00
beb7dfee99 Updated ListHostSoftware vulnerability filtering (#27020)
Include vulnerability filtering conditions on vpp apps and latest host
software installs/uninstalls

https://github.com/fleetdm/fleet/issues/26824

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] Added/updated automated tests
- [x] A detailed QA plan exists on the associated ticket (if it isn't
there, work with the product group's QA engineer to add it)
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: RachelElysia <rachel@fleetdm.com>
Co-authored-by: Jahziel Villasana-Espinoza <jahzielv@gmail.com>
2025-03-21 11:02:55 -05:00
Allen Houchinsandallenhouchins 431b38f1c4 Update 1Password macOS version number to 8.10.68 (#27398)
Co-authored-by: allenhouchins <allen@fleetdm.com>
2025-03-21 10:57:45 -05:00
Allen Houchins d2189acbd9 Update dogfood-policy-updater-latest-1password-macos.sh (#27395)
Script has been updated to ignore pre-release/beta version strings. 

More info here:
https://fleetdm.slack.com/archives/C071NNMSP2R/p1742568702131279
2025-03-21 10:52:35 -05:00
Gabriel HernandezandSarah Gillespie 174c389aae test and fixes for ca forms and modals (#27381)
For #26606

Test and fixes for CA forms

---------

Co-authored-by: Sarah Gillespie <73313222+gillespi314@users.noreply.github.com>
2025-03-21 15:00:30 +00:00
Victor Lyuboslavsky e7e9f54071 Updated FileVault and BitLocker error messages (#27365)
For #24862

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
- [x] Added/updated automated tests
- [x] A detailed QA plan exists on the associated ticket (if it isn't
there, work with the product group's QA engineer to add it)
- [x] Manual QA for all new/changed functionality
2025-03-21 09:56:50 -05:00
Scott GressandTim Lee bbe3f18b88 Dismiss old FMA PRs after creating a new one (#27359)
We have a scheduled action to create an "Update Fleet-maintained apps"
PR with the latest updates for FMAs. The bot creates a new PR each time,
even if the previous PRs haven't been merged. Since the latest PR will
always have all the latest updates, it's unnecessary to keep the old
ones around. We should have the bot close the old PRs once the new one
is opened. Additionally it was recommended that assignees be added to
the PR.

This PR updates the action to:

1. Find existing "Update Fleet-maintained apps" PRs created by the bot
2. Get the list of Github IDs of the devs on the software product team
3. Creates a new PR as usual, adding the devs as assignees
4. If the new PR is created successfully, closes the old PRs with
comments linking to the new PR

See a successful run
[here](https://github.com/fleetdm/fleet/actions/runs/13977643317/job/39135240445),
+ the resulting PR [here](https://github.com/fleetdm/fleet/pull/27357)

---------

Co-authored-by: Tim Lee <timlee@fleetdm.com>
2025-03-21 09:32:02 -05:00
Gabriel Hernandez 735328c1e7 UI cleanup for cert auth list header and list item descriptions (#27378) 2025-03-21 14:29:49 +00:00
Victor Lyuboslavsky 92dd9a7deb Another error message fix. (#27385)
Changed FLEET_VARS_ to FLEET_VAR_ in error message
2025-03-21 09:23:10 -05:00
Noah Talerman 102cc271bf Update product-design.rituals.yml (#27384) 2025-03-21 10:11:18 -04:00
Benjamin Edwards c6178c64cd add configuration setting for forcing h2c (#26799) 2025-03-21 09:38:21 -04:00
RachelElysia 0271390b4e Fleet UI: Do not allow clicking a button that doesn't work (#27364) 2025-03-21 09:35:59 -04:00
RachelElysia ea37ad6df3 Fleet UI: Surface Windows FMA (#27068) 2025-03-21 09:33:06 -04:00
Jahziel Villasana-EspinozaandIan Littman 3212ef442d add initial winget ingestion logic (#27371)
> For #26655

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [ ] Added/updated automated tests
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Ian Littman <iansltx@gmail.com>
2025-03-21 09:00:12 -04:00
Dan Tsekhanskiy e187b02c62 fix: Also set inValidNode when CSP starts with comment (#27376)
Addresses
https://github.com/fleetdm/fleet/issues/26443#issuecomment-2737439271
after https://github.com/fleetdm/fleet/pull/27176 was merged.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- I did this in https://github.com/fleetdm/fleet/pull/27176, same change
message.
- [x] Added/updated automated tests
- [x] Manual QA for all new/changed functionality
2025-03-21 07:34:12 -05:00