Commit Graph
10941 Commits
Author SHA1 Message Date
Roberto Dip 1be3aa2ffb improve MDM detection with enrollment state checks (#17494)
for #17489
2024-03-08 12:21:07 -03:00
RachelElysia cbce4621ec [unreleased bugs] Fleet UI: Missing vulnerability filter block / incorrect link param (#17473) 2024-03-08 09:22:25 -05:00
RachelElysia 563aa1e9bf Fleet UI/docs: Update notes about public IP address (#17383) 2024-03-08 09:21:56 -05:00
Eric 954634c6fe Website: Update vulnerability management image on homepage (#17483) 2024-03-07 21:08:26 -06:00
Noah Talerman d52643b3eb Add OS updates to permissions table (#17384)
- Maintainers and up can edit OS udpates
2024-03-07 17:47:54 -05:00
RachelElysia 7e264b386f [P1] Fleet UI: Hide bulk selection when unsupported filter (#17463) 2024-03-07 16:38:25 -05:00
Luke Heath 70d369dcf7 Update Releasing-Fleet.md (#17436) 2024-03-07 15:17:37 -06:00
Victor Lyuboslavsky 165917b492 Doc changes for running live queries with team_id=0 (No team) (#17267)
Doc changes for #16350
2024-03-07 14:23:18 -06:00
Sharon KatzandLuke Heath 2be6a32295 Update Releasing-Fleet.md (#17233)
Swap steps 1 and 3

---------

Co-authored-by: Luke Heath <luke@fleetdm.com>
2024-03-07 15:07:00 -05:00
Tim Lee 2e67ef61d4 Bugfix: Revert host filters fix (#17390) (#17464)
This reverts commit 4b2ebdc8dc.
2024-03-07 12:57:27 -07:00
Eric 447baf32d3 Website: Update "Talk to us" form redirect (#17465)
Changes:
- Updated the "Talk to us" form on the /contact page to redirect users
who have <700 hosts to the "Lets get you set up" Calendly event
(https://calendly.com/fleetdm/chat)
2024-03-07 13:47:28 -06:00
RachelElysia 6b73816548 Fleet UI: Fix host summary data styling bug (#17421) 2024-03-07 14:46:13 -05:00
Eric dcaf2d0a4c Website: update relative link validation in markdown content (#17213)
Closes: #16797

Changes:
- Updated `build-static-content` to throw an error if an extensionless
Markdown link containing a hash link is found.
- Fixed two broken relative links in the contributing documentation
2024-03-07 13:45:41 -06:00
Victor Lyuboslavsky e01c79ca7f Updating server config docs. (#17214)
Server config doc updates for:
https://github.com/fleetdm/fleet/issues/16331
2024-03-07 13:22:03 -06:00
Victor Lyuboslavsky 58f30aaf99 Allowing GitOps role to read org configs -- doc change. (#17238)
Allowing GitOps role to read org configs.

Docs for https://github.com/fleetdm/fleet/pull/17223
2024-03-07 13:21:14 -06:00
Victor Lyuboslavsky a173be8f52 For fleetctl gitops, when MDM configs are not explicitly defined in gitops yml file, they are now set to default values. (#17223)
For fleetctl gitops, when MDM configs are not explicitly defined in
gitops yml file, they are now set to default values.
#17209

Gitops role can now read org config/settings. This is used to determine
whether license is Premium.
Doc changes for permission access:
https://github.com/fleetdm/fleet/pull/17238

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Documented any permissions changes (docs/Using
Fleet/manage-access.md)
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-03-07 13:20:14 -06:00
Drew BakerandSam Pfluger 6e31da558b Update handbook for LinkedIn promoted posts. (#17236)
Added LinkedIn promoted posts to communications page and demand. ...

---------

Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2024-03-07 12:36:12 -06:00
Brock WaltersandJD b112626874 Update apple-developer-certificates-on-linux-for-configuration-profil… (#17461)
…e-signing.md

Changed a typo in the SCP instruction for username & domain & one
sentence near the end.

---------

Co-authored-by: JD <spokanemac@users.noreply.github.com>
2024-03-07 08:45:59 -08:00
Roberto Dip 53c270e3cd add webserver to unmanage Jamf devices for MDM migration (#17458)
# Checklist for submitter

- [x] Manual QA for all new/changed functionality
2024-03-07 12:52:02 -03:00
Sarah Gillespie 06d5c9cada Fix UI styling of host name in ran script activity item (#17437) 2024-03-07 09:28:24 -06:00
Roberto Dip e8b7ce81dc don't run SCEP test in parallel to avoid race in dependency (#17457)
The https://pkg.go.dev/go.mozilla.org/pkcs7 package uses an unguarded
package-level variable:


https://github.com/mozilla-services/pkcs7/blob/33d05740a3526e382af6395d3513e73d4e66d1cb/ber.go#L19-L21

This was causing this data race during tests:

```
==================
WARNING: DATA RACE
Read at 0x0000009b89b0 by goroutine 22:
  go.mozilla.org/pkcs7.asn1Structured.EncodeTo()
      /home/runner/go/pkg/mod/go.mozilla.org/pkcs7@v0.0.0-20210826202110-33d05740a352/ber.go:21 +0x56
  go.mozilla.org/pkcs7.(*asn1Structured).EncodeTo()
      <autogenerated>:1 +0xa5
  go.mozilla.org/pkcs7.ber2der()
      /home/runner/go/pkg/mod/go.mozilla.org/pkcs7@v0.0.0-20210826202110-33d05740a352/ber.go:68 +0xdb
  go.mozilla.org/pkcs7.Parse()
      /home/runner/go/pkg/mod/go.mozilla.org/pkcs7@v0.0.0-20210826202110-33d05740a352/pkcs7.go:160 +0x12f
  github.com/fleetdm/fleet/v4/server/mdm/scep/scep.ParsePKIMessage()
      /home/runner/work/fleet/fleet/server/mdm/scep/scep/scep.go:234 +0x1d2
  github.com/fleetdm/fleet/v4/server/mdm/scep/scep_test.testParsePKIMessage()
      /home/runner/work/fleet/fleet/server/mdm/scep/scep/scep_test.go:21 +0x56
  github.com/fleetdm/fleet/v4/server/mdm/scep/scep_test.TestNewCSRRequest.func1()
      /home/runner/work/fleet/fleet/server/mdm/scep/scep/scep_test.go:198 +0x7e5
  testing.tRunner()
      /opt/hostedtoolcache/go/1.21.7/x64/src/testing/testing.go:1595 +0x261
  testing.(*T).Run.func1()
      /opt/hostedtoolcache/go/1.21.7/x64/src/testing/testing.go:1648 +0x44

Previous write at 0x0000009b89b0 by goroutine 23:
  go.mozilla.org/pkcs7.asn1Structured.EncodeTo()
      /home/runner/go/pkg/mod/go.mozilla.org/pkcs7@v0.0.0-20210826202110-33d05740a352/ber.go:21 +0x6e
  go.mozilla.org/pkcs7.(*asn1Structured).EncodeTo()
      <autogenerated>:1 +0xa5
  go.mozilla.org/pkcs7.ber2der()
      /home/runner/go/pkg/mod/go.mozilla.org/pkcs7@v0.0.0-20210826202110-33d05740a352/ber.go:68 +0xdb
  go.mozilla.org/pkcs7.Parse()
      /home/runner/go/pkg/mod/go.mozilla.org/pkcs7@v0.0.0-20210826202110-33d05740a352/pkcs7.go:160 +0x12f
  github.com/fleetdm/fleet/v4/server/mdm/scep/scep.(*PKIMessage).DecryptPKIEnvelope()
      /home/runner/work/fleet/fleet/server/mdm/scep/scep/scep.go:344 +0xde
  github.com/fleetdm/fleet/v4/server/mdm/scep/scep_test.TestNewCSRRequest.func1()
      /home/runner/work/fleet/fleet/server/mdm/scep/scep/scep_test.go:199 +0x7fa
  testing.tRunner()
      /opt/hostedtoolcache/go/1.21.7/x64/src/testing/testing.go:1595 +0x261
  testing.(*T).Run.func1()
      /opt/hostedtoolcache/go/1.21.7/x64/src/testing/testing.go:1648 +0x44

Goroutine 22 (running) created at:
  testing.(*T).Run()
      /opt/hostedtoolcache/go/1.21.7/x64/src/testing/testing.go:1648 +0x845
  github.com/fleetdm/fleet/v4/server/mdm/scep/scep_test.TestNewCSRRequest()
      /home/runner/work/fleet/fleet/server/mdm/scep/scep/scep_test.go:165 +0x3ac
  testing.tRunner()
      /opt/hostedtoolcache/go/1.21.7/x64/src/testing/testing.go:1595 +0x261
  testing.(*T).Run.func1()
      /opt/hostedtoolcache/go/1.21.7/x64/src/testing/testing.go:1648 +0x44

Goroutine 23 (running) created at:
  testing.(*T).Run()
      /opt/hostedtoolcache/go/1.21.7/x64/src/testing/testing.go:1648 +0x845
  github.com/fleetdm/fleet/v4/server/mdm/scep/scep_test.TestNewCSRRequest()
      /home/runner/work/fleet/fleet/server/mdm/scep/scep/scep_test.go:165 +0x3ac
  testing.tRunner()
      /opt/hostedtoolcache/go/1.21.7/x64/src/testing/testing.go:1595 +0x261
  testing.(*T).Run.func1()
      /opt/hostedtoolcache/go/1.21.7/x64/src/testing/testing.go:1648 +0x44
==================
    testing.go:1465: race detected during execution of test
=== NAME  TestNewCSRRequest/KeyEncipherment_not_set_with_NOP_certificates_selector
```
2024-03-07 12:01:52 -03:00
Noah Talerman d0467de86e Update features.yml w/ new timelines (#17323)
- Add "Fleet gets in your calendar" (#17230)
- "Declaration (DDM) profiles" (#14550) before "App deployment" (#14921)
  - Deploy apps => Deploy security agents
  - Pushes deploy security agents to Q2 (2024-04-22)

Note: Upcoming activity (unified queue) won't guarantee
first-in-first-out in Q1
...
2024-03-06 21:48:57 -06:00
Mike Thomas a55c7a397d Updated text content (#17389)
Mike, let me know what you think of these text and order changes based
on your screen recording.
Also updated the hero image to match the updated color palette.

> I think we need to be leading with report what matters.

>And I think followed by deep context from the environment with the eye
to rewriting that section a bit later.

>I think we close out with up to date scans because it engages with the
problem, but it doesn’t really, right. We could swap that out later with
we look at the actual content.

![Image from
iOS](https://github.com/fleetdm/fleet/assets/78363703/551c8262-7cee-4f45-ad03-fd9f1bbf9917)
2024-03-06 21:46:55 -06:00
Noah Talerman 7143887e15 Disk encryption is the same as “Encrypt macOS hard disks with FileVault” (#17358)
- Remove "Encrypt macOS hard disks with FileVault" because it's the same
thing as disk encryption
- Update "Disk encryption" to Fleet Premium
...
2024-03-06 21:44:52 -06:00
Noah Talerman 854faa0c3d Update pricing page (#17382)
- Fix double asterisk

<img width="348" alt="Screenshot 2024-03-05 at 3 44 18 PM"
src="https://github.com/fleetdm/fleet/assets/47070608/5e447437-8588-4f62-a64e-a38735476b9f">

...
2024-03-06 21:43:22 -06:00
Noah Talerman e4766ad27e Update features.yml (#17398)
- Clarify "Native macOS update reminders"...
2024-03-06 21:41:14 -06:00
Jacob ShandlingandJacob Shandling e957292746 Update reference in mdm integration test (#17452)
Add one missed update

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-03-06 23:01:21 -03:00
Eric 4a1e202acb Website: Update contact page and CTAs (#17450)
Changes:
- Updated the contact page to have a second form that users can fill out
to schedule a Calendly meeting with Fleet.
- Updated CTAs on all landing pages, product category pages, article
pages, pricing page, and license dispenser.
- Updated the CTAs on the landing page generator template
- Removed the function that opens the hubspot chat widget from page
scripts.
- Updated `deliver-contact-form-message` to send a request to a Zapier
webhook
- Created a new action: `deliver-talk-to-us-form-submission` that sends
form submissions to a Zapier webhook.
2024-03-07 10:07:50 +09:00
JD c9f1d3dff0 Article: Developer certificate image md fix (#17451)
Fix image markdown.
2024-03-06 16:26:04 -08:00
JD c4a9a522e9 Article: Developer certificates on Linux (#17431)
Article: Apple developer certificates on Linux for configuration profile
signing https://github.com/fleetdm/fleet/issues/17169
2024-03-06 15:51:52 -08:00
Rachael Shaw 6f7fd8f881 Docs: Fix some links in the hosts API section (#17449)
Noticed a few links in the hosts section of the REST API docs that were
out-of-date or missing.
2024-03-06 16:34:29 -06:00
George Karr 33bb67b7af update changelog 4.46.2 (#17337)
- Updating changelog for 4.46.2
2024-03-06 15:41:55 -06:00
Roberto Dip 9c5b59df0d prevent redundant ADE profile assignment (#17427)
For #17291, this prevent re-assigning profiles to ABM hosts that already
have the right one.

This was happening very frequently for hosts that are in the last page
of the `/sync` request, as there's no indication that the cursor was
exhausted and we keept on assigning profiles to those hosts.

This caused profile assignment to eventually fail, presumably due to
rate limiting.
2024-03-06 18:16:10 -03:00
Tim Lee 4b2ebdc8dc 17257 host filters fix (#17390) 2024-03-06 14:15:53 -07:00
RachelElysia ceaa6d13fa Transfer/Delete bug fix: fix low_disk_space (#17434) 2024-03-06 16:15:34 -05:00
Jahziel Villasana-Espinoza babf4e17c8 fix: return bad request error during MDM migration when appropriate (#16551)
> Related issue: https://github.com/fleetdm/confidential/issues/5138

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-03-06 15:38:44 -05:00
github-actions[bot]andzwass 91f2f11f9c Update versions of fleetd components in Fleet's TUF [automated] (#17429)
Automated change from [GitHub
action](https://github.com/fleetdm/fleet/actions/workflows/fleetd-tuf.yml).

Co-authored-by: zwass <zwass@users.noreply.github.com>
2024-03-06 17:32:28 -03:00
Lucas Manuel RodriguezandZach Wasserman 1fceb19ad0 Automate osqueryd release to edge (#17425)
Automation and documentation for releasing osqueryd to `edge`

---------

Co-authored-by: Zach Wasserman <zach@fleetdm.com>
2024-03-06 17:31:49 -03:00
Jahziel Villasana-Espinoza c808bba438 fix: don't show windows hosts when filtering by bootstrap package status (#17386)
> Related issue: #17341

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-03-06 15:07:48 -05:00
Zach Wasserman 549c66cb32 Generate osqueryd targets for 5.12.0 (#17403) 2024-03-06 10:46:27 -08:00
RachelElysia fe4a6c8aca [tiny released bug] Fleet UI: Fix Munki issues tooltip wrapping (#17415) 2024-03-06 13:43:09 -05:00
Benjamin Edwards fc567cea2a osquery carve update (#17426) 2024-03-06 13:38:35 -05:00
RachelElysia dfcca55b80 [released bugs] Fleet FE: Bulk host transfer and delete respects all UI page filters (#17263) 2024-03-06 13:29:14 -05:00
EricandMike Thomas 30a36b0b3a Website: enable parallax animation on cloud city image (#17104)
Changes:
- Merged two layers of the parallax cloud city image & updated
filenames.
- Added a transition property to the parallax cloud city image to make
the animation smoother when scrolling with a mouse wheel.
- Updated the z-index of the website's footer to prevent the content
from being hidden by the parallax image when it is at its starting
position

---------

Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
2024-03-06 16:28:11 +09:00
Jacob ShandlingandJacob Shandling fa093203df UI – Simpler edit icon solution, applied to Edit query and Edit policy forms (#17364)
## ➡️ #17224  

- Replace the [solution merged
here](https://github.com/fleetdm/fleet/pull/17086) with a simpler and
more easily extendable one
- Apply same approach to the Edit policies form.

Edit query demo:

https://www.loom.com/share/589d3bfedc754f62b31c39bc517c2382?sid=ce65e5a5-e13f-4446-a37c-991a09cc8960

Edit query:
<img width="1791" alt="Screenshot 2024-03-04 at 5 34 35 PM"
src="https://github.com/fleetdm/fleet/assets/61553566/6727bd9e-ad05-45b0-a65c-e01487d7d923">

Edit policy:
<img width="2550" alt="Screenshot 2024-03-05 at 11 47 34 AM"
src="https://github.com/fleetdm/fleet/assets/61553566/fdd8e455-7f54-4177-be3e-4a82a879a176">

<img width="2550" alt="Screenshot 2024-03-05 at 11 47 27 AM"
src="https://github.com/fleetdm/fleet/assets/61553566/3b33b097-f652-4e99-b944-2d29ffe3f311">



- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-03-05 14:08:24 -08:00
Sarah Gillespie ba211437c6 Update integration tests for run script by name feature (#17381) 2024-03-05 15:12:52 -06:00
Jacob ShandlingandJacob Shandling a184d1e073 UI – increase scope of policy > critical checkbox width override to include new policy form (#17348)
## ➡️ #17036 

![Screenshot 2024-03-04 at 11 36
34 AM](https://github.com/fleetdm/fleet/assets/61553566/47fef465-25b8-48cb-9634-a060d5acd90c)



- [x] Changes file added for user-visible changes in `changes/`
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-03-05 13:02:42 -08:00
Sarah Gillespie 1e43cd813c Use --team flag for run-script command (#17373) 2024-03-05 11:54:26 -06:00
RachelElysia 1440584d06 Fleet UI: Surface VS code extensions in UI (#17333) 2024-03-05 11:59:53 -05:00
Martin Angers 977c376be2 Scripts char limit: feature branch (#17342) 2024-03-05 11:04:11 -05:00