Commit Graph
10891 Commits
Author SHA1 Message Date
Martin Angers 3184ee2cee Merge branch 'main' into feat-scripts-char-limit 2024-03-05 10:49:43 -05:00
Gabriel Hernandez 252848720c Fix for mdm solution rollup to handle empty string for rollup correctly. (#17366)
relates to #17335

This fixes the issue with empty strings for mdm solution names. I also
cleans up a bit around the code and typing for this feature.

- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-03-05 15:48:55 +00:00
Martin Angers 0bb6d45596 Merge branch 'main' into feat-scripts-char-limit 2024-03-05 10:10:04 -05:00
Sarah Gillespie c29f0abf92 Update API and CLI to enable running scripts by name and team id (#17322)
TODO:
- Integration tests

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any permissions changes (docs/Using
Fleet/manage-access.md)
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-03-05 08:53:17 -06:00
Martin Angers 16ba308039 Store script contents for wipe host via script 2024-03-05 08:51:57 -05:00
Roberto Dip 7a7b043014 allow gitops role to read hosts by identifier and profiles (#16688)
for #15337
2024-03-05 10:43:49 -03:00
Martin Angers 88eeb9c1a4 Reorder database migrations 2024-03-05 08:22:11 -05:00
Martin Angers 98bc2dc29a Fix conflicts 2024-03-05 08:11:28 -05:00
Gabriel Hernandez 60167ff0c6 Fix wrong number of host in mdm solutions modal and fix mdm solutions table UI to work for null named solutions (#17336)
relates to #16837, #17334, #17335

This fixes a UI bug for the case where the mdm solution name can be
null. We now handle this case properly and show the mdm solution data in
the modal.

This also fixes a UI bug where we showed the incorrect number of hosts
in the mdm solutions modal.

There is various cleanup here to the js and scss code in this PR too. 

- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-03-05 11:55:00 +00:00
Jacob ShandlingandJacob Shandling 6c7130efa6 UI – add "No team" option when targeting live queries (#17363)
## ➡️ #16350 


https://www.loom.com/share/dfc5ea298e4342f286ed5945507403c1?sid=a0d3b9d6-8a05-4919-990e-5121d0deac3e

<img width="999" alt="Screenshot 2024-03-04 at 4 15 24 PM"
src="https://github.com/fleetdm/fleet/assets/61553566/a5271f8c-119d-4ed7-bcd5-538640e8a1f6">


- [x] Changes file added for user-visible changes in `changes/` 
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-03-04 16:23:15 -08:00
Jacob ShandlingandJacob Shandling d477369ed3 UI - remove fancy error state logic on team settings (#17356)
## Updates feature per
https://github.com/fleetdm/fleet/pull/17285#issuecomment-1977457175
https://www.loom.com/share/c10941c7e2e74b4cb55c31427e0f5886
- [x] Manual QA for all new/changed functionality

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-03-04 15:08:30 -08:00
Sam PflugerandNoah Talerman 2991e08ecc Update product-design.rituals.yml (#17327)
Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2024-03-04 16:53:54 -06:00
Luke Heath 4015a897da Update trivy scan options (#17357) 2024-03-04 16:36:17 -06:00
Victor Lyuboslavsky 7bbb4a64bb Reduced vulnerability processing time by grouping vulnerability dictionary by vendor. (#17298)
Reduced vulnerability processing time by grouping vulnerability
dictionary by vendor.
#16858 

Notice `cvefeed.(*Cache).Get`
Before:
<img width="1997" alt="image"
src="https://github.com/fleetdm/fleet/assets/2685025/a3cc5571-cee2-40a6-8b2d-cfed1323d96c">
After:

![image](https://github.com/fleetdm/fleet/assets/2685025/89484f87-a4e9-4c5c-943f-138e1c27a2c6)


# Checklist for submitter

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-03-04 16:16:32 -06:00
Luke Heath 960a7a350a Remove tfsec workflow (#17354) 2024-03-04 16:13:41 -06:00
Victor Lyuboslavsky 05ff1ca52a Adding backend support for running live queries with team_id=0 (No team) (#17258)
- API endpoint GET fleet/targets/count can target 'No team' with
team_id=0
- API endpoint POST fleet/queries/run (for async live queries) can
target 'No team' with team_id=0
#16350

API doc changes PR: https://github.com/fleetdm/fleet/pull/17267

# Checklist for submitter

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-03-04 16:08:10 -06:00
Benjamin Edwards 98da852c94 update example to be barebones working example (#17355)
@pacamaster and I reviewed the example directory and found that the
example terraform was a bit bloated. This streamlines the example to be
a bare-bones minimum to get started.
2024-03-04 16:39:57 -05:00
Luke Heath 0fc941fc2d Update Trivy vulnerability scan workflow (#17353) 2024-03-04 15:29:32 -06:00
Jacob ShandlingandJacob Shandling 4b1ce1d518 UI – Per-team host status webook feature (#17285)
## Addresses #17091


![Screenshot-2024-02-29-at-91723PM(1)](https://github.com/fleetdm/fleet/assets/61553566/39b7013f-3d41-404a-9526-80db034679eb)

**also addresses #17286, #17287 and miscellaneous code improvements** 

- [x] Changes file added for user-visible changes in `changes/` 
- [x] Manual QA

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-03-04 13:24:26 -08:00
Jacob ShandlingandJacob Shandling f230f90cee UI – interpret <code> element in help text (#17350)
## ➡️ #17351 
Bug:

![screenshot_2024-03-04_at_16 19
46_360](https://github.com/fleetdm/fleet/assets/61553566/54bd9619-d3bb-4b22-9d44-870f45ce931a)

Fixed:

![Screenshot 2024-03-04 at 12 45
08 PM](https://github.com/fleetdm/fleet/assets/61553566/789cb74c-a2b3-4174-8f42-294a25e80bfc)

- [x] Manual QA for all new/changed functionality

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-03-04 12:57:02 -08:00
RachelElysia 316321e889 [released bug] Fleet Full stack: Allow teams filter when transferring hosts by filters (#17241) 2024-03-04 15:48:19 -05:00
RachelElysia 4345690dd2 Fleet UI: Update displayed data on device details pages (#17174) 2024-03-04 15:47:42 -05:00
Roberto Dip fc8b344a69 bump Puppet module to 0.2.4 (#17349) 2024-03-04 17:36:11 -03:00
Luke Heath 19b86ef368 Update maintainers path and engineering KPI script (#17339) 2024-03-04 14:26:00 -06:00
Roberto Dip e3712fb263 Don't run cleanup tasks or enqueue commands on SCEP renewals (#17303)
for #17232
2024-03-04 16:53:16 -03:00
Mike McNeil 77c795fd27 Update pricing-features-table.yml (#17328) 2024-03-04 14:51:25 -05:00
Dante Catalfamo e30640d701 Add mention of distutils in Building-Fleet (#17343)
Python >= 3.12 no longer ships with the `distutils` module out of the
box. It can be installed using `pip install setuptools`.

This may be fixed when updating node packages that rely on python, but
until then it may come up during `make deps`.

Reference: https://stackoverflow.com/a/76691103
2024-03-04 14:32:32 -05:00
Roberto Dip d2cf75cb13 remove binaries accidentally added in 730f8850 (#17344)
Accidentally added as part of the feature work for wipe. Should fix
https://github.com/fleetdm/fleet/security/code-scanning/1090
2024-03-04 13:18:01 -06:00
dependabot[bot] 3445a11c0c Bump axios from 0.21.4 to 0.28.0 in /tools/fleetctl-npm (#17023) 2024-03-04 12:56:50 -06:00
dependabot[bot] ae7ceed389 Bump ip from 2.0.0 to 2.0.1 in /ee/fleetd-chrome (#17010) 2024-03-04 12:53:55 -06:00
Martin Angers 0858f5a6f4 Scripts char limit: improve database migration performance and memory usage (#17338) 2024-03-04 13:51:32 -05:00
Victor Lyuboslavsky 592a7450e3 Enabling setting host status webhook at the team level via REST API and fleetctl apply/gitops. (#17186)
Enabling setting host status webhook at the team level via REST API and
fleetctl apply/gitops.
#14916

Example payload:
```json
{
    "data": {
        "days_unseen": 3,
        "host_ids": [
            10724,
            10726,
            10738,
            10739,
            10740,
            10741,
            10742,
            10744,
            10745,
            10746,
            10747,
            10748,
            10749
        ],
        "team_id": 3,
        "total_hosts": 15,
        "unseen_hosts": 13
    },
    "text": "More than 86.67% of your hosts have not checked into Fleet for more than 3 days. You've been sent this message because the Host status webhook is enabled in your Fleet instance."
}
```

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-03-04 12:35:27 -06:00
Lucas Manuel Rodriguez 4acb713bf1 osquery-perf changes for Fleet downtime load test (#17310)
Including all the osquery-perf changes needed to perform #16423.
2024-03-04 15:10:10 -03:00
Mike McNeilandEric b2edd1f201 Fix indentation on mobile (#17332)
Pretty sure I introduced this in my prev commit but I’ll leave this fix
to Eric to merge to make sure I’m not making it worse

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-03-04 11:11:41 -06:00
Jahziel Villasana-Espinoza 33a0324ebb feat: adding, reading, and deleting flows for scripts updated to use new table (#17305)
> Related issues: #16842, #16843

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] Added/updated tests
- [x] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [x] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [x] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [x] Manual QA for all new/changed functionality
2024-03-04 11:00:08 -05:00
Gabriel Hernandez 2d1caa84d4 rollup the mdm solutions by name on the dashboard page (#17297)
relates to #16837 

This rolls up the mdm solutions by name so that we only see one instance
of the mdm name. Clicking on this will then open a modal that shows the
server URLs and # of hosts for the mdm solution.

**Before:**

<img width="759" alt="image"
src="https://github.com/fleetdm/fleet/assets/1153709/2e8e6187-d987-42c3-8b8f-aa0552869578">

**After:**

<img width="768" alt="image"
src="https://github.com/fleetdm/fleet/assets/1153709/ff92199a-a9f8-4e42-8bb7-b626979c79d5">

**New modal:**

<img width="822" alt="image"
src="https://github.com/fleetdm/fleet/assets/1153709/88891630-352a-4aa6-999c-e25907a27ad0">


- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
- [x] Manual QA for all new/changed functionality
2024-03-04 13:14:50 +00:00
Marko Lisica 4622b5a787 Redirect for pre-fill and lock local account creation story (#17271)
Redirection for URL used in Fleet UI
- #9147
2024-03-04 13:18:12 +01:00
Eric 302c594046 Website: update custom hook to prevent 500 error from HEAD requests. (#17331)
Changes:
- Updated the custom hook to set `res.locals.primaryBuyingSituation` for
HEAD requests to prevent 500 errors when `primaryBuyingSituation` is not
set to `undefined`.
2024-03-03 17:30:21 -06:00
Mike McNeil fd80b47a9d Website: Update/prioritize links and normalize navs (#17330) 2024-03-03 06:10:19 -06:00
Mike McNeil 98d24078cd Revert change to primary-tagline.partial.ejs (#17329)
It just looks weird in retrospect
2024-03-02 19:26:01 -06:00
Mike McNeil 29058e8817 Update primary-tagline.partial.ejs (#17326)
🤷🏼🤪
2024-03-02 00:34:00 -06:00
Eric 4ed8a1d24f Website: Update personalization in custom hook (#17324)
Changes:
- Updated the custom hook to not set
`req.session.primaryBuyingSituation` as undefined if a user does not
have a `utm_content` query parameter.
2024-03-01 18:33:36 -06:00
Mike McNeilandEric ea5b8f8204 Handbook: Make the website feel more like home (#17317)
Further personalization for folks arriving from ads, so that the site
makes more sense to them

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-03-01 17:47:37 -06:00
Eric ef26e14f5a Website: Update image link on homepage (#17320)
Changes:
- Fixed an image link on the homepage.
2024-03-01 17:41:42 -06:00
Jahziel Villasana-Espinoza f3754e2674 fix: use correct copy in fleetctl error when applying profiles (#17318)
> Related issue: #16335, fixes issue QA found here:
https://github.com/fleetdm/fleet/issues/16335#issuecomment-1971560894

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-03-01 18:22:30 -05:00
JDandEric 7d744a97c1 Article: K-12 security tightrope (#17306)
Article: The device security tightrope: balancing cost and protection in
K-12 schools https://github.com/fleetdm/confidential/issues/5237

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-03-01 14:57:51 -08:00
Mike McNeilandIsabell Reedy 78de77e6c9 Handbook: Change the DRI of a consultant (#17312)
Hey Isabell, I realized the section above about hours worked also needs
an update. Could you knock that out on this PR?
<img width="609" alt="image"
src="https://github.com/fleetdm/fleet/assets/618009/664bc7c9-cc5d-461c-9327-68eed0aba7ad">

---------

Co-authored-by: Isabell Reedy <113355639+ireedy@users.noreply.github.com>
2024-03-01 14:34:13 -08:00
Luke Heath c1a274f76d Move critical bug notification process to product groups page (#17299)
Also updated the language in the notification process slightly so that
we only notify impacted customers and the community if community
features are impacted.
2024-03-01 16:29:02 -06:00
Victor LyuboslavskyandNoah Talerman 7a20da1f2f Moving mdm_profiles to it-and-security/lib/mdm_profiles (#17268)
Moving mdm_profiles to it-and-security/lib/mdm_profiles so that they are
together with other gitops config files.

---------

Co-authored-by: Noah Talerman <noahtal@umich.edu>
2024-03-01 15:18:54 -06:00
Roberto Dip 730f8850ff Add mdm wipe host feature (#17272)
relates to #9951

This adds the mdm host wipe feature to fleet. This includes:

1. adding wipe functionality in the fleet web UI
2. adding wipe functionality in the fleetctl CLI
3. adding API endpoints to wipe a host
4. Implementing wipe functionality on the fleet server.
2024-03-01 18:02:00 -03:00