Commit Graph
1820 Commits
Author SHA1 Message Date
Noah Talerman 84a1c84244 Update docs: Best practice infra for deploy security agents (#19251)
- Add S3 to AWS reference architecture docs
- Add note that GCP support for add/install software (deploy security
agents) and file carves is coming soon
- Add note that Render support for add/install software (deploy security
agents) is coming soon
- Update links to best practice Terraform example
2024-05-28 14:41:54 -04:00
Eric 7bd7c023e2 Docs: Fix broken relative link on SSO docs page (#19216)
Changes:
- Fixed a broken relative link
2024-05-24 16:57:29 -05:00
Noah Talerman 95910d3e43 Update docs: Maintenance windows (Fleet in your calendar) (#19232)
Doc updates for the "Maintenance windows (Fleet in your calendar)" story
(#17230)
2024-05-23 17:07:53 -04:00
Noah Talerman 27cc943a4b Sever config docs: Deploy security agents (#19236)
Server configuration doc changes for "Deploy security agents" story
(#14921)
2024-05-23 17:07:28 -04:00
Noah Talerman 23e80f2ce4 API design: Deploy security agents to macOS, Windows, and Linux hosts (#19245)
API changes for:
- #14921
2024-05-23 17:07:07 -04:00
1dc53cfa93 Update Fleet-UI.md (#19135)
Added a note to warn UI users against using dot notation for column
names in their queries.

Closes https://github.com/fleetdm/confidential/issues/6506

(@dherder, please check my interpretation of the issue.)

---------

Co-authored-by: Dave Herder <27025660+dherder@users.noreply.github.com>
Co-authored-by: Rachael Shaw <r@rachael.wtf>
2024-05-23 15:45:27 -05:00
Noah TalermanandRachael Shaw 7bb215a0b1 Cleanup docs: Pre-fill and lock local account creation screen during out-of-the-box macOS setup (#19225)
Docs changes for "Pre-fill and lock local account creation screen during
out-of-the-box macOS setup" story (#9147)

See comment here for more context:
https://github.com/fleetdm/fleet/issues/9147#issuecomment-2127391460

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
2024-05-23 10:33:09 -05:00
Noah Talerman 2406ab28cf Update Supported host operating systems (#19217)
- At least 2 of Fleet's largest customers use Windows Server 2012
2024-05-22 17:56:28 -04:00
Luke Heath cb419de31d Update releasing Fleet contributor docs (#19188) 2024-05-21 16:50:13 -05:00
Benjamin Edwards 677835e2c3 support external id in STS Assume Role calls (#18901) 2024-05-21 13:19:35 -04:00
Noah Talerman 54cca7b28a Docs: Fix broken links & add redirects (#19066) 2024-05-17 11:24:33 -05:00
Mike Thomas 665b5d0929 Text improvements and added "Deploy to Render" button (#19101)
- Text and style updates
- Added a Render's "Deploy to Render" button for clarity
2024-05-17 11:17:01 -05:00
Jahziel Villasana-Espinoza c4923ffecd Feature: software installers (#19050)
for https://github.com/fleetdm/fleet/issues/14921

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] Added/updated tests
- [x] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [x] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [x] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [x] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
- [x] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [x] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [x] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-05-17 10:37:45 -04:00
Mike Thomas 21b1aac24f Update why-fleet.md (#19064)
Removed the following sections to make way for the [new docs
CTA](https://github.com/fleetdm/fleet/pull/19062):

- What's next
- Try it out
2024-05-17 08:07:17 +09:00
Roberto Dip 8d9dcafbbc Merge remote-tracking branch 'origin/main' into feat-software-installers 2024-05-16 17:23:39 -03:00
Noah Talerman 1077255791 Vulnerability processing docs: Add VS Code extensions (#19070)
- Document that Fleet now detects vulns on VS Code extensions
2024-05-16 15:41:17 -04:00
Lucas Manuel Rodriguez bb310e685d Support Ubuntu 24.04 with Xorg (by detecting user's DISPLAY environment variable) (#18996)
#18925 (Should also fix #17660.)

Tests:
- Ubuntu 22.04.2
	- Wayland
		- Works with chrome  
		- Doesn't work with Firefox. 
	- Xorg
		- Works with Chrome.  
		- Works with Firefox. 
- Ubuntu 24.04
	- Wayland
		- Doesn't work with Chrome. 
		- Doesn't work with Firefox. 
- Xorg (when using Xorg it defaults to `DISPLAY=:1`, and with the
changes in this PR it works):
		- Works with Chrome.  
		- Works with Firefox.  
---

How to change between Wayland and Xorg:

- Set `WaylandEnable=false` in `/etc/gdm3/custom.conf` and reboot.

---

How to determine what's running:
```sh
$ loginctl
SESSION  UID USER SEAT  TTY 
      2 1000 luk  seat0 tty2
     c2 1000 luk        

$ loginctl show-session 2 -p Type
# will output
Type=wayland
or
Type=x11
```
---

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [X] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [x] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-05-16 08:39:30 -03:00
Roberto Dip 1ef19e4ff2 Merge remote-tracking branch 'origin/main' into feat-software-installers 2024-05-15 19:55:02 -03:00
Mike ThomasandEric f506e85fbc Style and typo fixes (#19008)
I fixed a couple of typos, corrected a couple of header tags, and
tightened up a couple of margins.

# Checklist for submitter

- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-05-16 07:49:39 +09:00
9802ccc37a Migrate deployment guides to articles (#19007)
This PR is a follow-up to https://github.com/fleetdm/fleet/issues/16660
to:

- Move all (non-recommended) deployment guides from the docs into
`/articles` under the `guides` category
    - AWS ECS
    - CentOS
    - Cloud.gov
    - AWS with Terraform
    - Hetzner Cloud
    - Render
    - Kubernetes
- Set up redirects for migrated articles
- Add article thumbnail and cover images

# Checklist for submitter

- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
Co-authored-by: Eric <eashaw@sailsjs.com>
2024-05-16 07:29:51 +09:00
Noah Talerman bddfb2271b SSO docs: Fix typo (#19042)
- Fix numbered steps
2024-05-15 17:55:04 -04:00
Noah Talerman af6129cc16 Update Windows MDM setup article and MDM setup docs (#18981)
- Update docs to reflect that, in order to use Autopilot, you must have
one Intune license per host (from #fleetdm/confidential#6283)
- Make "MDM setup" doc page cross platform
- Cut content
2024-05-15 15:34:58 -04:00
EricandMike Thomas 2dd7b6e564 Website: add "Deploy Fleet" docs page. (#18992)
https://github.com/fleetdm/fleet/issues/16660

Changes:
- Added a new page (deploy-fleet.md) to the deploying docs
- Moved the content from the following pages to the
deploy/reference-architectures page:
  - Systemd
  - Proxies
  - Public IPs
  - Monitoring Fleet
  - Introduction
- Reordered the pages in the Deploy docs folder
- Added a redirect: `/docs/deploy/introduction »
/docs/deploy/deploy-fleet`

---------

Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
2024-05-15 13:56:36 +09:00
Sam Pfluger 1b44927968 Fix broken markdown formatting (#18999)
Closes #18985 
...
2024-05-14 17:40:05 -05:00
Luke Heath 9cdd9be308 Update deploy on Render documentation (#18964) 2024-05-14 12:54:37 -05:00
Luke Heath 15ba5f3a20 Update supported browsers (#18960) 2024-05-13 17:10:21 -05:00
Rachael ShawandGeorge Karr 7ca3bda4a4 Recategorize & reorganize /mdm/ REST API endpoints (#18886)
Original PR for API design: https://github.com/fleetdm/fleet/pull/16728

---------

Co-authored-by: George Karr <georgekarrv@users.noreply.github.com>
2024-05-10 16:57:06 -05:00
db070837c8 API design: Create API endpoint to turn disk encryption for teams crossplatform (#18885)
Original PR: https://github.com/fleetdm/fleet/pull/16129

---------

Co-authored-by: Marko Lisica <83164494+marko-lisica@users.noreply.github.com>
Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2024-05-09 13:57:38 -05:00
Rachael Shaw d1791518a4 Docs: Reduce words in a note (#18884)
published to nvd -> published
2024-05-09 13:43:11 -05:00
Jahziel Villasana-EspinozaandMartin Angers c88a7cf6b0 feat: software added and deleted global activities (#18798)
> Related issue: #18330 

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality

## Notes
- ~I added an `includeTitle bool` parameter to
`ds.GetSoftwareInstallerMetadata`. This allows for the title of the
software (from the `software_titles` page) to be fetched in
`svc.DeleteSoftwareInstaller` without an additional call to the DB.~ We
wound up deciding to just fetch the title every time.

---------

Co-authored-by: Martin Angers <martin.n.angers@gmail.com>
2024-05-08 10:08:28 -04:00
Marko Lisica 643a3eb34a Docs: Reminder for APNs and ABM renewal (#16919)
Improve docs for APNs renewal:
- Learn users that they should check that Common name (CN) of
certificate in APNs portal should match one used in Fleet
2024-05-07 14:04:06 -04:00
Roberto Dip e5283ef2a8 Merge remote-tracking branch 'origin/main' into feat-software-installers 2024-05-07 13:37:29 -03:00
Martin Angers 7bb726ba8e Create and return upcoming/past host activities for software installs (#18772) 2024-05-07 11:28:16 -04:00
Rachael ShawandMarko Lisica 6fa8763714 API design: Add declaration (DDM) profiles for macOS (#18718)
Fresh PR to avoid product design PRs messing with the PR open time KPI
(original here: https://github.com/fleetdm/fleet/pull/17369)

---------

Co-authored-by: Marko Lisica <83164494+marko-lisica@users.noreply.github.com>
2024-05-02 17:33:06 -05:00
e213ebde45 API design: Resend configuration profile (#18717)
Fresh PR to avoid product design PRs messing with the PR open time KPI
(previously https://github.com/fleetdm/fleet/pull/17711)

---------

Co-authored-by: Marko Lisica <83164494+marko-lisica@users.noreply.github.com>
Co-authored-by: George Karr <georgekarrv@users.noreply.github.com>
2024-05-02 17:08:22 -05:00
Rachael ShawandMarko Lisica 0bd2f00495 Permissions: Resend a configuration profile (#18724)
Fresh PR to avoid product design PRs messing with the PR open time KPI
(previously https://github.com/fleetdm/fleet/pull/17841)

Co-authored-by: Marko Lisica <83164494+marko-lisica@users.noreply.github.com>
2024-05-02 17:06:36 -05:00
Rachael ShawandMarko Lisica 080d466121 API design: Add manual labels via UI and API (#18716)
Fresh PR to avoid product design PRs messing with the PR open time KPI
(previously https://github.com/fleetdm/fleet/pull/17670)

---------

Co-authored-by: Marko Lisica <83164494+marko-lisica@users.noreply.github.com>
2024-05-02 16:59:03 -05:00
Rachael ShawandNoah Talerman 74eb6c4f01 API design: Add critical policy and resolution data to device health API (#18715)
Fresh PR to avoid product design PRs messing with the PR open time KPI
(original: https://github.com/fleetdm/fleet/pull/16982)

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2024-05-02 16:28:34 -05:00
Rachael Shaw 7cfb7721b3 FAQ: Add doc link to "How do I contact Fleet for support?" (#18654)
Add doc link to "How do I contact Fleet for support?"
2024-04-30 15:21:32 -05:00
Rachael Shaw 2e2137129a Simplify "Is Fleet MIT licensed?" answer (#18653)
Simplify the language in "Is Fleet MIT licensed?"
2024-04-30 15:09:59 -05:00
Tim Lee 0a27843b83 bump golangci-lint to 1.55.2 (#18604) 2024-04-30 08:59:14 -06:00
Michael PintoandRobert Fairburn 373e9153b7 Add 2023 penetration test (#18375)
Co-authored-by: Robert Fairburn <8029478+rfairburn@users.noreply.github.com>
2024-04-29 14:39:28 -05:00
Rachael ShawandEric 895d4bc2f7 Use "Fleet's agent (fleetd)" naming in the docs (#18138)
For #16512

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-04-29 11:12:03 -05:00
Marko LisicaandRachael Shaw a0a8579b56 API design: API endpoint for updating a host's manual labels (#16979)
API design for: 
- #16767

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
2024-04-25 15:53:01 -05:00
Rachael ShawandVictor Lyuboslavsky 1657b38eba #17361 API changes: Add fleetd version to host details (#17814)
For #17361.

---------

Co-authored-by: Victor Lyuboslavsky <victor@fleetdm.com>
2024-04-25 13:26:28 -05:00
Rachael Shaw de26973953 #17148 API changes: See if scripts are enabled for a host (#17813)
For #17148.
2024-04-25 13:20:01 -05:00
Marko Lisica 28e501cd3c Docs change: Use new Software Update (DDM) for macOS Sonoma (14) and higher (#17487)
Docs changes related to:

- #17295
2024-04-25 13:19:03 -05:00
Grant BilstadandRachael Shaw 414c27d53b Add link to file carve contributor docs (#18309)
File carves were moved to their own section in contributor docs
https://github.com/fleetdm/fleet/pull/16877
Fixed link on API page

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
2024-04-25 10:19:33 -06:00
Rachael Shaw 63d91526d2 A few capitalization fixes in the docs (#18416)
Sentence-casing.
2024-04-18 16:45:55 -05:00
Lucas Manuel Rodriguez d0b02fa985 Add sequence diagram for NVD vulnerability processing (#18216)
#17966

Better view here:
https://github.com/fleetdm/fleet/blob/17966-add-sequence-diagram-oncall/docs/Contributing/Vulnerability-processing.md#cpe-and-cve-data-generation-workflow

Added these docs during my oncall time (and also during the VulnCheck PR
review).

@mostlikelee Let me know if I got this right.
2024-04-17 13:28:39 -03:00