Commit Graph
14836 Commits
Author SHA1 Message Date
Drew Baker 223b25fe98 Update testimonials.ejs (#24852)
Typo fix
2024-12-17 18:13:08 -05:00
Eric 82ec1d8e16 Website: update article links on /testimonials page (#24850)
Closes: #24746

Changes:
- Replaced the hard-coded links to articles on the /testimonials page
with server-side rendered generated links to articles. These links are
now built using the website's markdown articles configuration.
- Added support for a new meta tag on articles:
`showOnTestimonialsPageWithEmoji` If provided and set to one of the four
supported emoji (🥀, 🔌, 🚪, or 🪟), a link to the article will be added to
the /testimonials page. Example: `<meta
name="showOnTestimonialsPageWithEmoji" value="🥀">`.
- Updated the build-static-content script to throw an error if an
article has an invalid `showOnTestimonialsPageWithEmoji` meta tag value.
- Updated recent case study articles to have a
`showOnTestimonialsPageWithEmoji` meta tag.


@Drew-P-drawers When this PR is merged, you can add links to the new
case studies articles to the /testimonials page with a
`showOnTestimonialsPageWithEmoji` meta tag. The definitions for each of
the supported emoji are in this [google
doc](https://docs.google.com/document/d/1-KWQa3uMIJzeitzDRmzT3SnUoFCfcFCb6K2lyVt-Gy0/edit?tab=t.0#heading=h.oskipmb8530l)
2024-12-17 18:08:25 -05:00
Drew Baker 6b83ae30e2 Embed sprint demos 4.61.0 video (#24849)
Adding Sprint demos - 4.61.0 from YouTube to embed in the article
2024-12-17 17:31:26 -05:00
Dante CatalfamoandVictor Lyuboslavsky c9bdae8fb3 Embedded secrets validation (#24624)
#24549

Co-authored-by: Victor Lyuboslavsky <victor.lyuboslavsky@gmail.com>
2024-12-17 17:14:12 -05:00
Rachael Shaw addaaa3f8c Move release article image into the /articles folder (#24848) 2024-12-17 16:10:48 -06:00
c4a2bb4d6b 4.61 documentation changes (#24833)
Co-authored-by: Ian Littman <iansltx@gmail.com>
Co-authored-by: Zach Wasserman <zach@fleetdm.com>
Co-authored-by: Lucas Manuel Rodriguez <lucas@fleetdm.com>
Co-authored-by: Konstantin Sykulev <konst@sykulev.com>
Co-authored-by: Marko Lisica <83164494+marko-lisica@users.noreply.github.com>
Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2024-12-17 15:39:24 -06:00
Noah Talerman ce8bcaa033 Release article: 4.61.0 (#24836)
Release article for Fleet 4.61.0

Highlighted user stories:
- #22077
- #22078
- #22075
2024-12-17 15:38:48 -06:00
Scott Gress 0e5541979a Update attestation implementation (#24837)
for #23825 

This PR fixes the previous implementation for attesting
fleet/fleetctl/orbit binaries, and adds attestation to the fleet desktop
and osqueryd artifacts.

* correct permissions are added to all jobs
* tag removed from `subject-name` when attesting docker image
* using `artifacts.json` rather than the `artifacts` step output from
goreleaser to determine image digest

I'd like to add a separate job verifying the attestations, working on
that now but since all attestation steps are marked as
`continue-on-error` it can be a follow-on if we don't get it in with
this PR.
2024-12-17 15:26:59 -06:00
RachelElysia 474d5c4260 Fleet UI: Clean up table text wrapping (#24827) 2024-12-17 15:22:33 -05:00
Allen Houchins 7babadf4ba Added DDM profile for iOS and iPadOS and copied macOS DDM profile to Workstations team (#24825) 2024-12-17 14:19:08 -06:00
Allen Houchins aba585ce6e Updated minimum OS version for iOS and iPadOS (#24822) 2024-12-17 14:18:32 -06:00
Konstantin SykulevandIan Littman 57e82c1357 Added optional team_id parameter to query report endpoint (#24811)
If the `team_id` parameter is included the query report will filter the
hosts by the team id specified. The `team_id` parameter is included by
default from the front end queries pages.

https://github.com/fleetdm/fleet/issues/24006

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality

---------

Co-authored-by: Ian Littman <iansltx@gmail.com>
2024-12-17 13:26:35 -06:00
Sam Pfluger 24472f1c13 update steps to send an order form (#24834)
- Fix comment box
- Add step to move doc to google drive
2024-12-17 12:11:18 -06:00
jacobshandlingandJacob Shandling af12ba144a Include disk encryption stats only if setting is enabled for Linux host (#24457)
## Addresses #24456

- host detail response (for Host details page and My device page)
excludes `mdm.os_settings` field if disk encryption isn't enabled for
the host
- confirmed it is still included when setting is enabled
- confirmed expected banner is still shown when setting enabled

<img width="2555" alt="Screenshot 2024-12-05 at 10 10 48 PM"
src="https://github.com/user-attachments/assets/e3852b7f-51ae-4e87-bceb-476ccdba2459">


- [x] Changes file added for user-visible changes in `changes/`, 
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-12-17 09:43:35 -08:00
jacobshandlingandJacob Shandling 885e1d5a25 UI - Determine query result column sort type from actual data present (#24734)
## Addresses #23011 

- In the same scan through results that the UI currently determines
unique column names, determine which of thsoe columns can be sorted as
alphanumeric.

<img width="1464" alt="Screenshot 2024-12-12 at 3 15 24 PM"
src="https://github.com/user-attachments/assets/49c7c7a5-632a-475f-9e16-891119274708"
/>

<img width="1464" alt="Screenshot 2024-12-12 at 3 14 25 PM"
src="https://github.com/user-attachments/assets/2ede4f28-4c00-43af-b144-3828c42b7fbc"
/>


- [x] Changes file added for user-visible changes in `changes/`,
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-12-17 09:41:30 -08:00
Gabriel Hernandez e78bf6e8b1 Add helpful tooltip to install software setup experience (#24799)
relates to #24795

Add a helpful tooltip to the install software section for the setup
experience page

<img width="445" alt="image"
src="https://github.com/user-attachments/assets/49b0d9d5-0126-4165-abfb-b5cf9a2f8321"
/>

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
- [x] Manual QA for all new/changed functionality
2024-12-17 10:31:00 -06:00
Scott Gress edc68d3042 Add versions to product names in MSRC bulletins to aid Windows vulnerability matching (#24172)
for #24041 

This PR addresses an issue that can cause Windows vulnerability checks
to fail (possibly causing false negatives). We determine whether a
vulnerability in an MSRC bulletin applies to any hosts in a Fleet
instance by attempting to matching the data in [each row of the
`operating_systems`
table](https://github.com/fleetdm/fleet/blob/65e374c85c32a7dd582aa1d438161663a4abc43c/cmd/fleet/cron.go#L297-L303)
with [at least one "product" in a
bulletin](https://github.com/fleetdm/fleet/blob/e2d9a9016cb2bbf6cfe0ef7512f58d9934bf69de/server/vulnerabilities/msrc/analyzer.go#L39),
including [matching architecture and "display
version"](https://github.com/fleetdm/fleet/blob/76f5baced9360576743c9aa87a62f30b0fe63d45/server/vulnerabilities/msrc/parsed/product.go#L26-L39).
However a subset of products listed in these bulletins do not include
the display version, so for example a host whose OS was listed as
`Microsoft Windows Server 2022 Datacenter 21H2` (21H2 being the "display
version") would match nothing in the bulletins because no listed Server
2022 products include "21H2" in their names.

The fix made here is to add relevant version info to the products list
when we do our ETL of the MSRC bulletins. The version info was gleaned
from https://en.wikipedia.org/wiki/List_of_Microsoft_Windows_versions.

We see logs related to this issue a lot, so cleaning this up will
alleviate some noise and infra costs as well.
2024-12-17 09:46:03 -06:00
Drew Baker 35f0741c82 Update global-social-media-platform-switches-to-fleet.md (#24820)
Update publish date and spacing for quote title.
2024-12-16 21:32:42 -05:00
Drew Baker 22b81d1497 Create global-social-media-platform-switches-to-fleet.md (#24819) 2024-12-16 21:08:50 -05:00
Drew Baker be5748251c Update foursquare-quickly-migrates-to-fleet.md (#24818)
Removed additional quotation marks

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] If paths of existing endpoints are modified without backwards
compatibility, checked the frontend/CLI for any necessary changes
- [ ] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
- [ ] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [ ] Orbit runs on macOS, Linux and Windows. Check if the orbit
feature/bugfix should only apply to one platform (`runtime.GOOS`).
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-12-16 19:13:12 -05:00
Noah TalermanandRachael Shaw 8759f4b23f Currently, Fleet Desktop for Kubuntu requires Google Chrome (#24812)
More context:
https://github.com/fleetdm/fleet/issues/23697#issuecomment-2546913113

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
2024-12-16 17:50:56 -06:00
Eric c6f922ba6b Website: add links to recent case studies to /testimonials. (#24814)
Related to: #24746

Changes:
- Added links to recent case studies articles to the /testimonials page.
2024-12-16 17:07:02 -06:00
Jacob Burley 78cab5b8a8 Add Mastodon link to server email templates (#23309)
- Adds a link to FleetDM's Mastodon account to emails sent by the
FleetDM server
- Adds a Mastodon PNG image to the repo
2024-12-16 17:03:33 -06:00
Robert Fairburn cc2faac781 Add JSON logging to loadtesting (#24808) 2024-12-16 17:09:17 -05:00
Brock Walters f0b49a58b0 Update seamless-mdm-migration.md (#24756)
Added a note to this article that it's not intended to be fully self
service at this time per Zay... Thanks!
2024-12-16 16:33:46 -05:00
Drew Baker cbac9e8989 Update consolidate-multiple-tools-with-fleet.md (#24809)
Removing redundancy for clarity.
2024-12-16 16:32:23 -05:00
Ian Littman 57e979f0a4 Swap JetBrains EAP versions for maxed last major release for vuln check purposes (#24783)
For #22723.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-12-16 14:01:38 -06:00
Konstantin Sykulev 7e1478589b Delete pending installs/scripts on policy delete (#24463)
When a policy is deleted clean up any pending software installs or
scripts generated from the policy

https://github.com/fleetdm/fleet/issues/23886

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-12-16 11:47:34 -06:00
Ian Littman a86caed431 Replace CRLF with LF on script upload (#24760)
For #24166

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-12-16 11:25:12 -06:00
Victor Lyuboslavsky 1e5da18963 Fixed potential deadlocks when deploying Apple configuration profiles. (#24777)
#24771

Fixing deadlocks found in loadtest:
https://docs.google.com/document/d/1-Q6qFTd7CDm-lh7MVRgpNlNNJijk6JZ4KO49R1fp80U/edit?tab=t.0
- added retries to statements prone to deadlocks

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
- [x] Manual QA for all new/changed functionality
2024-12-16 11:16:42 -06:00
Noah Talerman 6b6eb19bb0 Fleet server configuration docs: capitalize "S3" (#24794) 2024-12-16 10:42:20 -06:00
Robert Fairburn 20963421b9 Update terraform monitoring to fix a deprecation (#24698) 2024-12-16 10:38:11 -06:00
github-actions[bot]andlucasmrod d94f10f147 Update versions of fleetd components in Fleet's TUF [automated] (#24779)
Automated change from [GitHub
action](https://github.com/fleetdm/fleet/actions/workflows/fleetd-tuf.yml).

Co-authored-by: lucasmrod <lucasmrod@users.noreply.github.com>
2024-12-16 12:01:56 -03:00
Eric dc0dddffaf Website: update /app-library page (#24778)
Closes: #24259
Closes: https://github.com/fleetdm/confidential/issues/9070

Changes:
- Added a section about custom packages and app store apps to the
/app-library page.
- Updated the "Request an app" button to "Add an app" and updated it to
link to the maintained apps JSON.
2024-12-13 18:40:34 -06:00
Harrison RavazzoloandHarrison John 1d6a6c3224 Fix Typos in Windows CSP Article (#24775)
Co-authored-by: Harrison John <harrisonjohn@Harrisons-MacBook-Pro.local>
2024-12-13 16:38:04 -08:00
Lucas Manuel RodriguezandEric 9daa5a2950 Add docs for the nftables fleetd table (#24749)
#15651

We missed to add the docs in the original PR:
https://github.com/fleetdm/fleet/pull/23941

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-12-13 21:34:24 -03:00
Andrea Scarpino e3c87a2c79 List paths used by Fleet desktop (#23891)
We don't expose fleet publicly and we had to open these paths to make
Fleet Desktop work.
2024-12-13 17:47:50 -06:00
Mike ThomasandEric dc4f3026e6 add VM content (#24743)
- Add VM content to `vm` and `eo-security` personalization of
/software-management.

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-12-13 17:47:02 -06:00
Eric 395a6e261d MSP dashboard: Update readme to document all required config values (#24773)
Changes:
- Updated the MSP dashboard's readme to include a section about required
config values for software features.
- Added config values required for software features to the MSP
dashboard's docker-compose file.
- Added an uploads configuration file that lists the configuration
values required for software features.
2024-12-13 17:24:52 -06:00
Konstantin Sykulev 4503b2f334 Fixed bug when using without_vulnerability_details and vulnerability filters (#24769)
https://github.com/fleetdm/fleet/issues/24765

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added/updated tests
2024-12-13 16:39:21 -06:00
Noah Talerman 7d7fc7b249 Update user story template: activity change (#24772)
- PR will be merged in when it's approved like API/YAML design PRs
- When we build the feature, the doc changes will get squished by auto
generated docs:
https://fleetdm.com/handbook/company/communications#audit-logs
2024-12-13 16:47:38 -05:00
Sam Pfluger 71ad7e3a8f Update communications.md (#24770) 2024-12-13 15:45:49 -06:00
Victor Lyuboslavsky 48e3654d75 Adding secret support to profiles via gitops. (#24675)
#24547

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-12-13 15:41:23 -06:00
Drew Baker d23195911e Create foursquare-quickly-migrates-to-fleet.md (#24768) 2024-12-13 16:02:43 -05:00
Eric 02b0a97ac8 Website: add support for new usage statistics (#24511)
Changes:
- Updated the receive-usage-analytics webhook to support a new input:
`numQueries`
- Added a new attribute to the HistoricalUsageSnapshot model
`numQueries`
- Added a commented-out section to the
send-aggregated-metrics-to-datadog script.
2024-12-13 15:00:30 -06:00
dependabot[bot] 39e71cf5e0 Bump golang.org/x/crypto from 0.21.0 to 0.31.0 in /tools/terraform (#24715) 2024-12-13 14:59:19 -06:00
Noah Talerman 256bb67f95 Dogfood: enforce macOS 15.2 (#24753) 2024-12-13 14:57:07 -06:00
Allen Houchins 03d00cd995 Removing iOS and iPadOS apps from the 💻🐣 Workstations (canary) team (#24713) 2024-12-13 14:54:49 -06:00
Scott Gress ff63cdf904 Add flaky test guide to handbook (#24722) 2024-12-13 14:54:26 -06:00
Mike Thomas f56dea3f23 add new accordion items (#24741)
closes https://github.com/fleetdm/fleet/issues/24642
- Two new items were added to the top of the accordion.
- The numbers for accordion header and body IDs/targets were updated to
allow for the new items.
2024-12-13 14:24:15 -06:00