Commit Graph
951 Commits
Author SHA1 Message Date
Mike Arpaia 2795a61b3c Working prototype of fleetctl apply (#1762) 2018-05-07 17:50:20 -06:00
Zachary Wasserman 0f00c70606 Fixes in query, pack and label clients (#1763)
- Use authenticated requests
- Don't take a parameter for the Get*Specs methods
2018-05-07 16:30:52 -07:00
Zachary Wasserman 3d1d088be9 Implement clients for labels, packs and queries (#1760)
Go client methods for making get, set and delete requests on label, pack and
query entities.
2018-05-07 12:44:40 -07:00
Zachary Wasserman 8febf3ed96 Fixes + proposed changes to client error handling (#1759)
- Fix places where we accidentally return nil when we should return an error.
- Simplify interfaces/implementation of specialized errors
- Use more specific error messages
- Consistent JSON decoding
2018-05-04 14:55:57 -07:00
Zachary Wasserman 003ad9b5fa Delete spec entities by name instead of ID (#1755)
With the UI, deleting by ID made sense. With fleetctl, we now want to delete
by name. Transition only the methods used for spec related entities, as others
will be removed soon.
2018-05-04 11:05:55 -07:00
Mike Arpaia 559e54286f fix typos in CLI readme 2018-05-04 11:38:53 -06:00
Mike Arpaia 018e10ea66 Add fleetctl config and auth commands (#1751)
```
$ fleetctl config set address https://localhost:8080
[+] Set the "address" config key to "https://localhost:8080" in the "default" context

$ fleetctl config set ignore_tls true
[+] Set the "ignore_tls" config key to "true" in the "default" context

$ fleetctl setup --email mike@arpaia.co --password "abc123"
[+] Fleet setup successful and context configured!

$ cat ~/.fleet/config
contexts:
  default:
    address: https://localhost:8080
    email: mike@arpaia.co
    ignore_tls: true
    token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzZXNzaW9uX2tleSI6IlUvdm05Vk9wSG0xUlA4SUtjQnBhb2ovWlo1TXppSEVXcFRCNFNPb2tHQnNLUFpDQXFieVpWWnpJb0UvczQzcWkyd1pHZXJOa29SNFVIQ2hNZUc0K09RPT0ifQ.rHawSN8JvD4jjWAPTYX2Ep9ZpMt3u4mSIQcu920C-_s

$ fleetctl logout
[+] Fleet logout successful and local token cleared!

$ cat ~/.fleet/config
contexts:
  default:
    address: https://localhost:8080
    email: mike@arpaia.co
    ignore_tls: true
    token: ""
```
2018-05-04 10:53:21 -06:00
Zachary Wasserman c5f0e5a6b4 Add endpoints for apply/get of each spec type (#1752)
- Osquery Options (to be renamed to Options after current Options removed)
- Labels
- Queries
- Packs
2018-05-03 18:01:57 -07:00
Zachary Wasserman 1d9e37b069 Pull decorators from config options (#1749)
Previously decorators were stored in a separate table. Now they are stored
directly with the config so that they can be modified on a per-platform basis.

Delete now unused decorators code.
2018-05-03 10:14:07 -07:00
Zachary Wasserman a0d05f4e2a Merge branch 'master' into fleetctl 2018-05-01 17:26:32 -07:00
Mike Arpaia 920f4afab6 Scaffold the login command (#1748) 2018-05-01 16:58:53 -06:00
Mike Arpaia ee0a400a60 Update the apiVersion used in fleetctl files and docs (#1747) 2018-05-01 14:51:54 -06:00
Mike Arpaia 93a346463b New fleetctl CLI structure (#1719) 2018-05-01 12:14:05 -06:00
Zachary Wasserman 71ba2bcbf2 Update JS deps for node-sass fix (#1745)
Node-sass was broken due to a newer version of NodeJS.
2018-04-30 14:22:50 -07:00
Caleb Coy 753756721e Updated docs (#1746)
moved compile instructions to development page, added link to binaries in adding hosts page
2018-04-30 16:46:11 -04:00
angrylogic c873833a5f Include RFC822 From header. (#1743)
The DMARC and DKIM email authentication systems both require the RFC822
From header to function.  Kolide currently only includes the configured
sender address as the SMTP Envelop From address (e.g., the MAIL FROM
command).  This patch also includes the configured sender address in the
RFC822 email From header which should allow these emails to pass both
DKIM and DMARC authentication.
2018-04-25 09:02:09 -07:00
Zachary Wasserman 4784eb2322 Fix distributed query status parsing for osquery 3 (#1742)
A change from strings to integers broke the existing code. We now support
either for current and backwards compatibility.
2018-04-24 12:40:11 -07:00
Victor Vrantchan 95c3113632 examples: use curl and jq to work with the API (#1737) 2018-04-23 09:21:59 -06:00
Victor Vrantchan 2ded63ea03 add pre-fleet to binary bundle and fix typo 2018-04-16 17:47:10 -04:00
Zachary Wasserman bb6f3af190 Update changelog for 1.0.7 release (#1734) 2018-03-30 11:17:13 -07:00
Caleb Coy cdcb42e792 removed extraneous text (#1724) 2018-03-12 12:04:16 -04:00
Caleb Coy 7ddd9ba510 Updated support contact info, removed "help@kolide.co" email address. (#1723) 2018-03-07 09:44:50 -05:00
Mike Arpaia b16ea7fd4f remove existing code of conduct now that we have a new one 2018-03-07 09:35:13 -05:00
Antigoni Sinanis 93fad49b6c Create CODE_OF_CONDUCT.md (#1722) 2018-03-07 09:23:20 -05:00
Zachary Wasserman 23a12b2ab0 Add check for Duo SAML vulnerability (not vulnerable) (#1718)
See https://goo.gl/zuku4E.

> The most obvious remediation here is ensuring your SAML library is extracting
  the full text of a given XML element when comments are present.

Our implementation asks for the innerxml of the NameID field, so it returns the
entire text including the comment (See https://goo.gl/KLLXof). By default Go's
XML parsing would return the text not including the comment (but including
further text after the comment). Both of these options prevent the
vulnerability.
2018-03-02 09:44:23 -07:00
Ben Coverston d28d2cac28 Add FileAccesses to FIM Configuration (#1717)
- Close #1708
- Fix FIM interval not being stored
2018-02-26 12:54:13 -08:00
Zachary Wasserman 2e9598de66 Merge decorators into other config options (#1707) 2018-02-09 11:35:09 -08:00
Jack 998e81db6d Remove fixed height constraint from host details component. (#1706)
If some elements content extends beyond the assumed height it will overflow outside of the details block.

These changes remove any height limit, allowing flexbox to even the details height per row. Removing justify centre keeps the header in place at the top for details that are smaller than the max height in other blocks on that row.

Used flex 1 to expand the hosts details list elements to the remaining space in the details component. Can make for some odd spacing but seems nicer than bunching elements at the top of the component.
2018-02-08 08:07:47 -08:00
Mike Arpaia bcd59e2188 Use Kolide version of go-bindata after it got leftpaded (#1704) 2018-02-07 08:58:17 -07:00
Mike Arpaia accaffce74 Fix dep warnings (#1698) 2018-02-05 10:40:58 -07:00
dso c017779313 Populate network interfaces on Windows (#1700)
Add support for Windows hosts in addition to macOS and Linux.
2018-02-04 21:16:24 -08:00
Zachary Wasserman ae5d8e4acb Add community section to README (#1695) 2018-01-31 17:00:30 -08:00
Victor Vrantchan 381c6f1384 separate the docker build step from the docker push step (#1691)
Allows users without write access to docker hub to still build the container.
2018-01-23 16:31:42 -05:00
Zachary Wasserman e3d2af325c Use UUID as host identifier in adding hosts docs (#1690) 2018-01-23 09:26:32 -08:00
Zachary Wasserman bde7256a09 Update labels interfaces for fleetctl (#1686)
- Remove unnecessary labels code
- Remove unnecessary packs code
- Update tests as appropriate
2018-01-10 11:38:20 -08:00
groob 19cb29375c add a mini faq 2018-01-04 09:19:50 -05:00
Zachary Wasserman 26dc30bd25 Update query and pack interfaces for fleetctl (#1670)
- Add new Apply spec methods for queries and packs
- Remove now extraneous datastore/service methods
- Remove import service (unused, and had many dependencies that this breaks)
- Refactor tests as appropriate
2018-01-03 11:18:05 -08:00
Zachary Wasserman 77b16e92e0 Fix missing removed and shard keys in query packs (#1685)
Include the appropriate values for removed and shard when generating config
to return to osqueryd.

Note: This was originally fixed and tested in the fleetctl branch (#1680), and
the fix is being cherry-picked into master without the test.
2018-01-02 19:29:27 -08:00
Zachary Wasserman d6b4de3874 Refactor osquery options interface (#1674)
After discussion with @groob and @marpaia, we have decided that the service
methods should not be aware of any YAML/JSON definitions, and should work
directly with objects. The new pattern we will use will involve converting YAML
to JSON at the client, and then sending the JSON which will be decoded using
the familiar go-kit mechanisms before being passed to the service methods.
2018-01-02 16:22:45 -08:00
Zachary Wasserman 2d3e5c11cb Fix missing removed and shard keys in query packs (#1680)
Include the appropriate values for `removed` and `shard` when generating config
to return to osqueryd.
2018-01-02 16:06:50 -08:00
Zachary Eddy 6a20ae91c5 Create kubernetes manifest for minikube (#1671) 2017-12-28 11:18:16 -08:00
ferhat elmas 657494e504 server/datastore: add missing err check in label creation test (#1683) 2017-12-21 19:07:09 -08:00
ferhat elmas d2a7e38c85 Fix documentation typos (#1682) 2017-12-21 18:37:32 -08:00
Clayton Burlison a5e1007146 Fix typo in Makefile help (#1681) 2017-12-20 15:41:19 -08:00
Zachary Wasserman a162ace30b Update fleetctl docs (#1678)
- Revert erroneous changes in 6442736c.
- Remove Osquery prefix from entity kinds.
- Define Query first in combination with Label and Decorator definitions.
2017-12-19 15:03:45 -08:00
Scott J. Roberts 9c52bed855 Add flags for configuring MySQL connection pooling limits (#1672) 2017-12-19 13:52:52 -08:00
Zachary Wasserman 6442736c12 Replace mistaken uses of OsqueryQuery (#1677) 2017-12-19 13:13:17 -08:00
ferhat elmas 1bd622bce7 server/datastore/inmem: fix host removal lock (#1673) 2017-12-18 14:38:33 -08:00
Zachary Wasserman 74bd70f54f Change default query editor query (#1669)
The existing query generates column name conflicts.
2017-12-14 21:39:55 -05:00
Zachary Wasserman 5e9fe9d5a1 Transition osquery options interfaces for compatibility with fleetctl (#1649)
- Refinements to options yaml definition
- Datastore and service implementations
- Migration to bring existing options into new table format
2017-12-13 18:14:54 -05:00