Commit Graph
12659 Commits
Author SHA1 Message Date
Jahziel Villasana-Espinoza fdee411b58 fix: don't allow observer and observer+ to download software installers (#19938)
> Related issue: https://github.com/fleetdm/confidential/issues/6979

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-06-25 16:22:51 -04:00
Zach Wasserman b2dec6de57 Fix anchor link for agent uninstall (#19937)
For #19936

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Manual QA for all new/changed functionality
2024-06-25 13:06:03 -07:00
Victor Lyuboslavsky 918773bc53 Fixing DB issue with vuln counts. (#19989)
#18115 
Fixing issue saw in load test:
```
level=error ts=2024-06-25T17:09:08.230514976Z cron=vulnerabilities schedule=vulnerabilities instanceID="5boTc/PamsSp8Jsh4kiEOpECmPu+bmOAJaVX4XV7ZOG4vgO4U6peHyxH8mFQhBXYJt+roRpwNuGmUoEI8n/otg==" err="running job" details="get critical vulnerabilities count: Error 1114 (HY000): The table '/rdsdbdata/tmp/#sql127_6b4b_ad107' is full" jobID=update_host_issues_vulnerabilities_counts
```
2024-06-25 14:10:51 -05:00
Zach WassermanandRobert Fairburn e4c9712b61 MDM proxy for seamless migrations (#19779)
Implementation for the proxy described in #19387.

---------

Co-authored-by: Robert Fairburn <8029478+rfairburn@users.noreply.github.com>
2024-06-25 09:31:48 -07:00
github-actions[bot]andlucasmrod 89e3d11954 Update versions of fleetd components in Fleet's TUF [automated] (#19983)
Automated change from [GitHub
action](https://github.com/fleetdm/fleet/actions/workflows/fleetd-tuf.yml).

Co-authored-by: lucasmrod <lucasmrod@users.noreply.github.com>
2024-06-25 13:05:25 -03:00
Victor Lyuboslavsky 246c6d1641 Fixing MySQL thread stack error during host issues update. (#19956)
#18115 
Fixing unreleased bug found when load testing host issues update.
2024-06-25 10:41:15 -05:00
Victor Lyuboslavsky cdb0d78245 Updated fleetctl get queries/labels/hosts descriptions. (#19908)
#19577 
Updated fleetctl get queries/labels/hosts descriptions.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-06-25 09:32:05 -05:00
Roberto Dip 2a9be32ffa update Go to go1.22.4 (#19958)
for #19844

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
2024-06-25 10:55:36 -03:00
Roberto Dip 8f7e2f5214 improve extraction of name and version, and add bundle identifier for pkg installers (#19838)
part 1 of #19144
2024-06-25 10:55:24 -03:00
dependabot[bot] 2500894c06 Bump github.com/hashicorp/go-retryablehttp from 0.6.8 to 0.7.7 (#19981)
Bumps
[github.com/hashicorp/go-retryablehttp](https://github.com/hashicorp/go-retryablehttp)
from 0.6.8 to 0.7.7.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/hashicorp/go-retryablehttp/blob/main/CHANGELOG.md">github.com/hashicorp/go-retryablehttp's
changelog</a>.</em></p>
<blockquote>
<h2>0.7.7 (May 30, 2024)</h2>
<p>BUG FIXES:</p>
<ul>
<li>client: avoid potentially leaking URL-embedded basic authentication
credentials in logs (<a
href="https://redirect.github.com/hashicorp/go-retryablehttp/issues/158">#158</a>)</li>
</ul>
<h2>0.7.6 (May 9, 2024)</h2>
<p>ENHANCEMENTS:</p>
<ul>
<li>client: support a <code>RetryPrepare</code> function for modifying
the request before retrying (<a
href="https://redirect.github.com/hashicorp/go-retryablehttp/issues/216">#216</a>)</li>
<li>client: support HTTP-date values for <code>Retry-After</code> header
value (<a
href="https://redirect.github.com/hashicorp/go-retryablehttp/issues/138">#138</a>)</li>
<li>client: avoid reading entire body when the body is a
<code>*bytes.Reader</code> (<a
href="https://redirect.github.com/hashicorp/go-retryablehttp/issues/197">#197</a>)</li>
</ul>
<p>BUG FIXES:</p>
<ul>
<li>client: fix a broken check for invalid server certificate in go
1.20+ (<a
href="https://redirect.github.com/hashicorp/go-retryablehttp/issues/210">#210</a>)</li>
</ul>
<h2>0.7.5 (Nov 8, 2023)</h2>
<p>BUG FIXES:</p>
<ul>
<li>client: fixes an issue where the request body is not preserved on
temporary redirects or re-established HTTP/2 connections (<a
href="https://redirect.github.com/hashicorp/go-retryablehttp/issues/207">#207</a>)</li>
</ul>
<h2>0.7.4 (Jun 6, 2023)</h2>
<p>BUG FIXES:</p>
<ul>
<li>client: fixing an issue where the Content-Type header wouldn't be
sent with an empty payload when using HTTP/2 (<a
href="https://redirect.github.com/hashicorp/go-retryablehttp/issues/194">#194</a>)</li>
</ul>
<h2>0.7.3 (May 15, 2023)</h2>
<p>Initial release</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/hashicorp/go-retryablehttp/commit/1542b31176d3973a6ecbc06c05a2d0df89b59afb"><code>1542b31</code></a>
v0.7.7</li>
<li><a
href="https://github.com/hashicorp/go-retryablehttp/commit/defb9f441dcf67a2a56fae733482836ea83349ac"><code>defb9f4</code></a>
v0.7.7</li>
<li><a
href="https://github.com/hashicorp/go-retryablehttp/commit/a99f07beb3c5faaa0a283617e6eb6bcf25f5049a"><code>a99f07b</code></a>
Merge pull request <a
href="https://redirect.github.com/hashicorp/go-retryablehttp/issues/158">#158</a>
from dany74q/danny/redacted-url-in-logs</li>
<li><a
href="https://github.com/hashicorp/go-retryablehttp/commit/8a28c574da4098c0612fe1c7135f1f6de113d411"><code>8a28c57</code></a>
Merge branch 'main' into danny/redacted-url-in-logs</li>
<li><a
href="https://github.com/hashicorp/go-retryablehttp/commit/86e852df43aa0d94150c4629d74e5116d1ff3348"><code>86e852d</code></a>
Merge pull request <a
href="https://redirect.github.com/hashicorp/go-retryablehttp/issues/227">#227</a>
from hashicorp/dependabot/github_actions/actions/chec...</li>
<li><a
href="https://github.com/hashicorp/go-retryablehttp/commit/47fe99e6460cddc5f433aad2b54dcf32281f8a53"><code>47fe99e</code></a>
Bump actions/checkout from 4.1.5 to 4.1.6</li>
<li><a
href="https://github.com/hashicorp/go-retryablehttp/commit/490fc06be0931548d3523a4245d15e9dc5d9214d"><code>490fc06</code></a>
Merge pull request <a
href="https://redirect.github.com/hashicorp/go-retryablehttp/issues/226">#226</a>
from testwill/ioutil</li>
<li><a
href="https://github.com/hashicorp/go-retryablehttp/commit/f3e9417dbfcd0dc2b4a02a1dfdeb75f1e636b692"><code>f3e9417</code></a>
chore: remove refs to deprecated io/ioutil</li>
<li><a
href="https://github.com/hashicorp/go-retryablehttp/commit/d969eaa9c97860482749df718a35b4a269361055"><code>d969eaa</code></a>
Merge pull request <a
href="https://redirect.github.com/hashicorp/go-retryablehttp/issues/225">#225</a>
from hashicorp/manicminer-patch-2</li>
<li><a
href="https://github.com/hashicorp/go-retryablehttp/commit/2ad8ed4a1d9e632284f6937e91b2f9a1d30e8298"><code>2ad8ed4</code></a>
v0.7.6</li>
<li>Additional commits viewable in <a
href="https://github.com/hashicorp/go-retryablehttp/compare/v0.6.8...v0.7.7">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/hashicorp/go-retryablehttp&package-manager=go_modules&previous-version=0.6.8&new-version=0.7.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts page](https://github.com/fleetdm/fleet/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-06-25 10:34:28 -03:00
Gabriel Hernandez c14c67c604 dont show SQL errors in the UI (#19898)
relates to #19731

This is a quick fix for not showing DB detail in the UI when showing an
API error message.

> This is temporary and the real fix should be on the server, as you can
still see these error messages in the API response. This is tracked in
[this issue here](https://github.com/fleetdm/fleet/issues/19896)

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
2024-06-25 11:38:40 +01:00
George Karr 2106767860 Adding changes for Fleet v4.52.0 (#19916) 2024-06-24 15:58:58 -05:00
Eric de89f470ba Website: Update customer dashboard for users who have billing information removed. (#19976)
Closes: #19668
Closes: #19666 

Changes:
- Updated the customer dashboard to add a state for users who have had
their billing information removed.
2024-06-24 15:29:08 -05:00
Sarah Gillespie 7b4b9cb858 Update CLI help to document usage of --end-user-email flag (#19959) 2024-06-24 15:13:04 -05:00
RachelElysia 566cc38e93 Fleet UI: Hide CTA on inherited queries/policies from team level users, and related unexpected UI fixes (#19523) 2024-06-24 15:59:06 -04:00
RachelElysia 5ccb6800cc Fleet UI: Hide delete checkboxes from team observer (#19934) 2024-06-24 15:58:27 -04:00
github-actions[bot]andlucasmrod ee69436974 Update versions of fleetd components in Fleet's TUF [automated] (#19944)
Automated change from [GitHub
action](https://github.com/fleetdm/fleet/actions/workflows/fleetd-tuf.yml).

Co-authored-by: lucasmrod <lucasmrod@users.noreply.github.com>
2024-06-24 16:24:47 -03:00
Robert Fairburn 40d5a84e84 Support different port/targetPort for service in helm chart (#19889) 2024-06-24 10:43:47 -05:00
Sarah Gillespie 74db826a52 Add option to exclude software from device details API response (#19874) 2024-06-24 10:43:16 -05:00
Rachael Shaw 1604010c66 Update story issue template (#19953)
Add note about manually requesting reviews on API design draft PRs,
because reviews aren't automatically requested until PRs are marked
ready for review.

cc @marko-lisica @noahtalerman
2024-06-24 10:23:59 -05:00
Eric 057781b5e4 Website: Update primary tagline partial (#19948)
Changes:
- Added a typeof check to the primary tagline partial to prevent
warnings from being logged when requests are sent to URLs that are seen
as assets but don't exist on the server.
2024-06-23 21:26:13 -05:00
Mike McNeil 970f8ea7ca Website: Standardize <title> and social unfurl taglines (#19945) 2024-06-22 12:42:58 -05:00
Eric 223e1f2362 Website: Update contact record creation (#19922)
Closes: https://github.com/fleetdm/confidential/issues/6929

Changes:
- Updated the update-or-create-contact-and-account helper to search for
an existing contact by email address before searching for an account
with the information provided by the get-enriched helper. This change
will allow us to change the account that a contact is associated with in
the CRM without duplicate records getting (re)created.
2024-06-21 17:12:01 -05:00
Eric 8aa55549ad Website: update bannedEmailDomainsForWebsiteSubmissions config variable. (#19939)
Changes:
- Added a domain to the bannedEmailDomainsForWebsiteSubmissions array
2024-06-21 17:03:42 -05:00
Victor Lyuboslavsky 7b751fa50a Additional debug info and speculative fix for TestUpdateStatsOnReplica (#19901)
Additional debug info and speculative fix for TestUpdateStatsOnReplica
CI fails
2024-06-21 14:50:12 -05:00
Isabell Reedy 2ec3bf4080 Include check for upcoming invoices in weekly ritual (#19849)
Noticed whilst doing the weekly revenue report that we are due to
invoice Reddit for year 2 in 5 days. Thought it is probably a good idea
to check for upcoming invoices every time as part of this process. ...
2024-06-21 14:43:36 -05:00
dependabot[bot] 971b25cfaf Bump golang.org/x/net from 0.21.0 to 0.23.0 in /tools/terraform (#19911) 2024-06-21 12:27:48 -07:00
Matthew Ahrenstein e796e49650 Add fleet license as an optional helm value (#19923) 2024-06-21 12:25:40 -07:00
Victor Lyuboslavsky 2e2d0fb983 Removed duplicate os_versions results in /api/latest/fleet/vulnerabilities/:cve endpoint (#19912)
#19819
Removed duplicate `os_versions` results in
/api/latest/fleet/vulnerabilities/:cve endpoint

Could not manually test since I do not have an Intel mac. We will need
to QA on dogfood.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Added/updated tests
- [ ] Manual QA for all new/changed functionality
2024-06-21 14:14:56 -05:00
Lucas Manuel RodriguezandGeorge Karr 3a64c83145 Release fleetd 1.27.0 (#19933)
- **Release fleetd 1.27.0**

---------

Co-authored-by: George Karr <georgekarrv@users.noreply.github.com>
2024-06-21 16:00:13 -03:00
Sam Pfluger 58619114f5 Fix broken sentence structure (#19932)
...
2024-06-21 11:50:13 -05:00
Roberto Dip 685e1f8557 Fixed a server panic in /mdm/apple/mdm (#19929)
for #19928

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-06-21 12:20:51 -03:00
Tim Lee cb5fb65c5e fix app vuln false positives (#19905) 2024-06-21 08:05:18 -06:00
Victor Lyuboslavsky 0dd620e61b Added character validation to /api/fleet/orbit/device_token endpoint (#19919)
https://github.com/fleetdm/confidential/issues/6978
Added character validation to /api/fleet/orbit/device_token endpoint

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-06-21 08:43:08 -05:00
Gabriel Hernandez 8d064065d7 Dont send 500 for every call to /debug/errors endpoint (#19827)
relates to #15197

This updates the handler for `/debug/errors` so that we no longer always
send a 500 response.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Added/updated tests
2024-06-21 13:12:06 +01:00
Eric 477e46a96d Website: Update SF helper to search for existing account records by name (#19918)
Closes: #19895

Changes:
- Updated the `update-or-create-account-and-contact` helper to search
for an existing account record by name before searching by website. This
additional search adds ~1.5 seconds to the time the helper runs in the
background but greatly reduces the chances of creating duplicate
accounts.
2024-06-20 17:02:00 -05:00
Eric 19a4e07b94 Website: Add LinkedIn conversion tracking (#19921)
Related to: #19603

Changes:
- Added LinkedIn conversion tracking to the signup page, swag request
form, and contact forms.
2024-06-20 16:43:43 -05:00
Lucas Manuel Rodriguez addb665c8b Dogfood iPhones team GitOps (#19897)
Changes to dogfood GitOps for #18866.
2024-06-20 17:13:24 -03:00
Mike YoderandBrock Walters c7ea0125d6 Support for Terraforming Fleet Teams (#18750)
This project adds support for terraforming teams in Fleet. If you have
100+ teams, managing them is is prone to error, mistakes, lost
configuration, and general pain. An industry standard tool like
terraform can unify this configuration as code.

In order to do this, I wrote a terraform provider that on one end talks
to the Fleet api, and on the other end implements an interface for
terraform. More information is in the README.

A small sample `main.tf` file is supplied.

---------

Co-authored-by: Brock Walters <153771548+nonpunctual@users.noreply.github.com>
2024-06-20 12:47:35 -07:00
Roberto Dip 03dd4721b6 proper fix for renew enrollment profile requests (#19909)
# Checklist for submitter

- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-06-20 16:35:23 -03:00
Noah Talerman c7dfaf45f7 Update docs: Vulnerability Processing page (#19861)
- Fleet detects vulns (CVEs) for Linux kernels: #18053
2024-06-20 12:55:45 -05:00
RachelElysia e134e740ef [unreleased. bug] Fleet UI: Grey empty cell --- for host issues (#19900) 2024-06-20 13:40:57 -04:00
5555f7c651 Design for TCC access fleetd table (#19719)
Table design for:  #18222

Old PR: #18224

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
Co-authored-by: Eric <eashaw@sailsjs.com>
Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2024-06-20 11:53:15 -05:00
Eric b2e9e0a055 Website: Update Github helper (#19892)
Closes: #19891

Changes:
- Updated the `get-is-pr-handbook-only-changes` helper to return false
if a PR contains no changed files.
2024-06-20 11:23:50 -05:00
jacobshandlingandJacob Shandling ebc6e2fc60 UI – Software pages, treat dropdown filters as search criteria for empty states (#19888)
## Follow-up to #19181  

<img width="1480" alt="Screenshot 2024-06-19 at 2 56 04 PM"
src="https://github.com/fleetdm/fleet/assets/61553566/303703e8-8be4-4ef5-866f-48edadc16d9f">
<img width="1480" alt="Screenshot 2024-06-19 at 2 51 28 PM"
src="https://github.com/fleetdm/fleet/assets/61553566/56cde02b-2fee-4313-b7af-c328da1a2934">


- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-06-20 09:20:10 -07:00
Victor Lyuboslavsky accf7b5ae7 windows_updates doc update (#19899)
#19057 
windows_updates doc update
2024-06-20 10:18:39 -05:00
Eric 5794810bc5 Update image in deploy Fleet on ubuntu guide. (#19903)
Closes: https://github.com/fleetdm/confidential/issues/7028

Changes:
- Updated the position of the Internews logo in the "Deploy Fleet on
Ubuntu with Elastic" guide to prevent text from getting squished on
mobile devices
2024-06-20 10:14:28 -05:00
Eric d2d12c888e Website: Update language in calendar section on homepage and landing pages (#19902)
Related to: https://github.com/fleetdm/confidential/issues/7000

Changes:
- Updated the calendar section ("Use AI to explain why your security
policies matter." » "Auto-explain why your security policies matter."
2024-06-20 09:52:58 -05:00
Victor Lyuboslavsky e3510cdcf6 Add exclude_software query param to hosts endpoint. (#19617)
API docs change for #19348
2024-06-20 08:06:46 -05:00
Brock Walters 60b376581c Update registry.yml (#19713)
minify long query. see if it does any better. Is it possible to add
explicit line breaks where I want them? thanks.
2024-06-19 18:20:00 -04:00