Commit Graph
10812 Commits
Author SHA1 Message Date
Jahziel Villasana-Espinoza 2f2bee8522 feat: use an env var to control arch when building orbit for local tuf server (#16263)
Just a small developer quality of life update

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Manual QA for all new/changed functionality
2024-03-01 09:07:00 -05:00
Jacob ShandlingandJacob Shandling cbd1a142b4 UI – Refactor edit query > name and description fields to allow reasonable control of pencil icons (#17086)
## –> #16663 
- Display text within `textarea` only when editing. Since the
problematic pencil icons are hidden in this state, it is okay that their
position varies depending on browser (see previous discussions).
- When not editing, text and icon are displayed in a `button` , removing
the dependence of their position on the variable per browser`textarea`
"col"s.
- Note that the wrapping behavior of these texts can affect how much
space is placed after it _within_ its span/textarea – the distance of
the icon from this element remains constant.


https://www.loom.com/share/105df09a447e42cc9e3a71668f5d1d2c?sid=244d0543-cc4b-43ed-83dd-22959cb08879


<img width="1284" alt="Screenshot 2024-02-27 at 2 15 12 PM"
src="https://github.com/fleetdm/fleet/assets/61553566/7b8f7fea-bc57-4699-9d61-d93b19e8d922">



- [x] Changes file added for user-visible changes in `changes/`
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-02-29 21:56:31 -08:00
EricandMike Thomas 30d05e072b Website: update sections on endpoint ops page (#17269)
Closes: https://github.com/fleetdm/confidential/issues/5565

Changes:
- Updated the content of the endpoint ops page to match the latest
wireframes.

---------

Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
2024-03-01 11:54:24 +09:00
Eric 78da493ac1 Website: Update send-aggregated-metrics-to-datadog script (#17021)
Closes: #16931
Closes: #16935

Changes:
- Updated the `send-aggregated-metrics-to-datadog` script to:
- Not filter out statistics from Fleet instances reporting non-4.x.x
versions of Fleet when aggregating metrics about Fleet Premium instances
- Combine the reported hosts for all Fleet instances reporting the same
organization (Premium instances only)
2024-02-29 18:33:47 -06:00
Mike McNeil 0a8ce22dda Update device-management.ejs: Clarify what it means to shorten the fe… (#17281)
…edback loop
2024-02-29 16:45:02 -06:00
Rachael Shaw dd2d6eb4d0 Update "Team member" wording in docs to reference users instead. (#17116)
+ Changed a bunch of instances of "member" to "user" to match the
updated UI (https://github.com/fleetdm/fleet/issues/15893)
+ Cut some step-by-step instructions for using the team UI from the
"Segment hosts" docs
2024-02-29 16:07:59 -05:00
Roberto Dip 89ae60ddec fix tests run with -race in server/mdm/scep (#17274)
scheduled tests, which are run with `-race` are [failing][1], this was
fixed in the `etcd-io/bbolt` fork of the now archived `boltdb/bolt`, for
more details check [this issue][2].

since boltdb is used only for tests, and they're passing after switching
to the fork, this seems like a reasonable way to fix them.

[1]: https://github.com/fleetdm/fleet/actions/runs/8090809417
[2]: https://github.com/etcd-io/bbolt/issues/391

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-02-29 15:55:15 -03:00
Roberto Dip 0c08ec30f8 display disk encryption as 'verifying' while we check the key (#17259)
for #16593
2024-02-29 14:19:17 -03:00
Luke Heath 3f1ade51a0 Add myself to product groups handbook maintainers (#17239) 2024-02-29 11:02:17 -06:00
Victor LyuboslavskyandLucas Rodriguez 1a679d0882 Moving context.WithoutCancel outside defer. (#17260)
#17197

Fixing orphaned live queries when context is canceled

Co-authored-by: Lucas Rodriguez <lucas@fleetdm.com>
2024-02-29 13:39:27 -03:00
Mike McNeil f248701e0f Update vulnerability-management.ejs (#17262)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any permissions changes (docs/Using
Fleet/manage-access.md)
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-02-29 08:01:17 -06:00
RachelElysia 7158df1a85 [tiny released bug] Fleet UI: Fix live query/policy host search icon (#17082) 2024-02-29 08:49:36 -05:00
Luke Heath 93af32a930 Fix broken markdown link (#17253) 2024-02-28 16:42:38 -06:00
Luke Heath 6f0c02eb2d Fix broken markdown link (#17252) 2024-02-28 16:42:22 -06:00
Joanne Stableford 9c83ba291f Add "change job title" responsibility to BizOps handbook (#17121) 2024-02-28 16:41:35 -06:00
Roberto Dip 456bc3c9a9 puppet module: prevent running match call if a preassignment failed (#17175)
for #16954

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-02-28 19:15:41 -03:00
Rachael Shaw 4751e6652a API docs: Add missing Fleet Premium clarification (#17255)
+ Add some missing "_Available in Fleet Premium_." flags to `team_id`
parameter descriptions for API endpoints available in Fleet Free.
+ Remove one duplicate instance of `team_id`
2024-02-28 15:15:10 -06:00
Jahziel Villasana-Espinoza 2d4a183789 feat: allow <Add> node in Windows MDM profiles (#17234)
> Related issue: #16335

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-02-28 15:05:13 -05:00
Jacob ShandlingandJacob Shandling aadf82911a Cap salt length before concatenating with plaintext for password updates (#17068)
## –> #16487
- Ensures length of salt is no larger than the key size. This ensures
the remaining space within the 72-byte limit for salt+hash is the
advertised 48 bytes, for the default salt size.
- Per [this
discussion](https://github.com/fleetdm/fleet/pull/16524#discussion_r1474675857),
we are assuming ASCII characters, and therefore 1byte:1char, for now –
unicode support may come later.
- Updated tests to follow.

## Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/`
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-02-28 11:16:02 -08:00
Eric 4a97587edf Website: Update content on device management page (#17248)
Closes: https://github.com/fleetdm/confidential/issues/5566

Changes:
- Updated the content of the "Absolute certainty" section of the
/device-management page
2024-02-28 12:50:16 -06:00
Luke Heath 8d7e3472e7 Add priority rating labels to product groups handbook (#17103) 2024-02-28 11:17:31 -06:00
Joanne Stableford 41ad4ba001 Add "change a Fleetie's manager" responsibility to BizOps Handbook (#17120) 2024-02-28 11:56:17 -05:00
Victor Lyuboslavsky 22dd392da7 Fixing code review comments. (#17240)
Fixing code review comments from
https://github.com/fleetdm/fleet/pull/16855
Also, moving `CleanupDistributedQueryCampaigns` back to once an hour, so
that it is not disabled.
2024-02-28 10:53:37 -06:00
Victor LyuboslavskyandNoah Talerman f36b7d4d6d Use gitops with dogfood. (#17098)
#17043

Set up dogfood to use gitops. I copied the current dogfood
configs/policies/queries into the gitops flow.

Successful workflow run:
https://github.com/fleetdm/fleet/actions/runs/8023101797/job/21918883543?pr=17098

---------

Co-authored-by: Noah Talerman <noahtal@umich.edu>
2024-02-28 10:50:10 -06:00
Victor LyuboslavskyandSharon Katz f215adee5b Added --server_frequent_cleanups_enabled (FLEET_SERVER_FREQUENT_CLEANUPS_ENABLED) flag (#17235)
Added --server_frequent_cleanups_enabled
(FLEET_SERVER_FREQUENT_CLEANUPS_ENABLED) flag to enable 15 minute cron
job to clean up stale data. Currently disabled by default.

#17197 

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Added/updated tests
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Sharon Katz <121527325+sharon-fdm@users.noreply.github.com>
2024-02-28 09:59:25 -06:00
Will MayhoneandMike McNeil 48f1ea994b Update pricing-features-table.yml (#16739)
Added a customer quote to the human endpoint mapping

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any permissions changes (docs/Using
Fleet/manage-access.md)
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).

---------

Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
2024-02-27 22:50:45 -06:00
2a60823a93 Update Kubernetes best practice docs (#16807)
- Remove example YAML file from docs to deduplicate
- Update "Prepare a new version of Fleet" handbook instructions to point
to the best practice YAML
- Add README to point to docs
- Move tools for deploying Fleet on Kubernetes to `Deploy/` folder.
- Add @dherder as CODEOWNER so that Dave gets pinged every time a
contributor wants to make a change to the Kubernetes

---------

Co-authored-by: Dave Herder <27025660+dherder@users.noreply.github.com>
Co-authored-by: Luke Heath <luke@fleetdm.com>
2024-02-27 22:49:48 -06:00
Isabell Reedy 38adcc3f63 Adding Dante Catalfamo to MDM product group (#17167) 2024-02-27 22:47:58 -06:00
6c0e56ea73 Address multiple redis-related issues observed with live queries (#16855)
#16331 

Doc updates in a separate PR:
https://github.com/fleetdm/fleet/pull/17214

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality (smoke-tested locally
with osquery-perf simulating 100 hosts, ran a live query, a saved live
query, stopped naturally and stopped before the end, and again via
fleetctl)

---------

Co-authored-by: Victor Lyuboslavsky <victor@fleetdm.com>
Co-authored-by: Victor Lyuboslavsky <victor.lyuboslavsky@gmail.com>
2024-02-27 19:35:27 -06:00
Rachael Shaw d50ee081f2 API docs: Remove mdm.device_status and mdm.pending_action from list hosts response (#17222)
The "List hosts" endpoint doesn't actually include this information.
2024-02-27 16:05:10 -06:00
Jahziel Villasana-Espinoza 205338bfa3 feat: update error message for script timeouts (#17215)
> Related issue: #16019

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
2024-02-27 16:19:34 -05:00
Tim Lee e0fb5d8e31 17146 query optim (#17177) 2024-02-27 13:51:42 -07:00
Lucas Manuel Rodriguez 220e55269e Fix orphaned live queries in Redis when client terminates connection (#17202)
#17197

The following endpoints have the issue:
```
curl -v -k -X POST -H "Authorization: Bearer $TEST_TOKEN" https://localhost:8080/api/latest/fleet/queries/758/run -d '{"host_ids": [15858]}'
# Hit Ctrl + C before the API returns.

curl -v -k -X GET -H "Authorization: Bearer $TEST_TOKEN" https://localhost:8080/api/latest/fleet/queries/run -d '{"query_ids": [758], "host_ids": [15858]}'
# Hit Ctrl + C before the API returns.

curl -k -X POST -H "Authorization: Bearer $TEST_TOKEN" https://localhost:8080/api/latest/fleet/hosts/15858/query -d '{"query": "SELECT * FROM osquery_info;"}'
# Hit Ctrl + C before the API returns.

curl -k -X POST -H "Authorization: Bearer $TEST_TOKEN" https://localhost:8080/api/latest/fleet/hosts/identifier/2A249326-34B7-4B1D-BEB5-9B3A23BC30E6/query -d '{"query": "SELECT * FROM os_version;"}'
# Hit Ctrl + C before the API returns.

redis-cli -h 127.0.0.1
127.0.0.1:6379> SMEMBERS livequery:active
# Will list the four live queries for 7 days... and Fleet will be in live query mode for such 7 days...
```

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-02-27 17:47:05 -03:00
Martin Angers b95e723275 Fix handling of enable_disk_encryption: null in PATCH /config (#17212) 2024-02-27 15:43:31 -05:00
Sam PflugerandMike McNeil d2f8574a75 Update communications.md (#17132)
Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
2024-02-27 14:32:32 -06:00
Victor Lyuboslavsky 02de6b5695 Adding full unicode/emoji support for team/policy names. (#17163)
#17027 
Added Unicode and emoji support for policy and team names.

I have the manual test steps in the issue:
https://github.com/fleetdm/fleet/issues/17027

# Checklist for submitter
- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-02-27 12:55:05 -06:00
JD 2541574b93 Article: Fleet 4.46.0 release (#17207)
Article: Fleet 4.46.0 release
https://github.com/fleetdm/fleet/issues/17013
2024-02-27 10:03:17 -08:00
RachelElysia 57c3ec2ca5 [unreleased bug] Fleet UI: exploit not exploited key for filtering vulns (#17176) 2024-02-27 09:33:13 -05:00
Noah Talerman 4b5a84b2f1 Add page to contributor docs for custom configuration web URL (#17081)
- Move instructions for how to use custom configuration_web_url (#15633)
to contributor docs so that change to instructions go through code
review.
2024-02-27 09:06:35 -05:00
Noah Talerman c0e27ea115 API docs: Add note to Get host by identifier (#17097)
- `hostname` isn't always unique
2024-02-27 09:06:15 -05:00
Mike McNeil 2d73b99bb0 Update endpoint-ops.ejs: emphasize what helps OKRs get accomplished (#17201) 2024-02-27 02:03:41 -06:00
Mike McNeil 60fc306686 Update endpoint-ops.ejs: “a consistent interface” (#17200)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any permissions changes (docs/Using
Fleet/manage-access.md)
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-02-27 01:52:56 -06:00
Mike McNeil 74112b0302 Make the bottom match the top (#17199) 2024-02-26 21:46:39 -06:00
Eric f9401d3bc6 Website: Update license dispenser (#17183)
Closes: #17161

Changes:
- Updated the license dispenser to direct users who want to purchase a
license for >700 hosts to talk to sales (Previously >1000)
- Updated button text on the /customers/new-license page ("Show me" »
"Talk to Sales")
2024-02-26 17:23:16 -06:00
Eric c2c0d1db55 Website: Update order product category sections on homepage (#17192)
Closes: https://github.com/fleetdm/confidential/issues/5557

Changes:
- Moved the endpoint ops section to the top of the product categories on
the homepage.
2024-02-26 17:02:36 -06:00
Rachael Shaw 094392798d Fix "Team policies" API docs heading (#17191)
Change from h3 to h2 so it's visible in the side navigation.
2024-02-26 16:27:24 -06:00
Mike McNeil ea02f0f5a4 A consistent interface (#17184)
Pregame for swapping top two sections ahead of unified branding push.
2024-02-26 14:23:49 -06:00
Jahziel Villasana-Espinoza 941bfa6ca1 updates to how MDM solution names are calculated (#17112)
> Related issue: #16838

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-02-26 14:38:20 -05:00
github-actions[bot]andlucasmrod 23cccd4999 Update versions of fleetd components in Fleet's TUF [automated] (#17179)
Automated change from [GitHub
action](https://github.com/fleetdm/fleet/actions/workflows/fleetd-tuf.yml).

Co-authored-by: lucasmrod <lucasmrod@users.noreply.github.com>
2024-02-26 16:35:02 -03:00
Tim Lee a0ca5dd1bf Bugfix: Use CVE struct in Vuln Responses (#17140) 2024-02-26 11:29:59 -07:00