Commit Graph
741 Commits
Author SHA1 Message Date
Lucas Manuel Rodriguez 8dbfbad167 Add github action to automate timestamp update (#24074)
#23042
2024-11-27 16:13:54 -03:00
Lucas Manuel Rodriguez 7d04119245 Release fleetd 1.36.0 (#24136) 2024-11-25 16:34:09 -03:00
Marko Lisica 04d1ded81a Remove step to apply env variables to profiles (fleetctl gitops is doing this) (#24078)
I beleive we don't need this step anymore, since `fleetctl gitops` will
replace it with real value and send to the server. This should be done
in #17309.
2024-11-22 19:30:40 +01:00
Lucas Manuel Rodriguez a8ba004c61 Add expiration checks for targets and snapshot roles (#24081)
[#8489](https://github.com/fleetdm/confidential/issues/8489)

We had the timestamp check.
Robert added the root check recently.
Am now duplicating the check for `snapshot` and `targets` metadata
files.

PS: Please review with whitespace changes disabled.
2024-11-22 14:46:03 -03:00
Victor Lyuboslavsky e4df954b0f Update nanomdm dependency with latest bug fixes and improvements. (#23906)
#23905 

- Update with upstream nanomdm changes up to
https://github.com/micromdm/nanomdm/tree/825f2979a2dc28c6cc57bb62aff16737978bd90e
- Removed PostgeSQL folder from our nanomdm
- Added nanomdm MySQL test job to our CI

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-11-20 11:47:11 -06:00
Noah Talerman 18f6011d42 Update story.md (#23917) 2024-11-18 15:39:09 -06:00
Lucas Manuel Rodriguez c93a28b00f Fix build-fleetd_tables.yml workflow (#23875)
This fixes the workflow, successful run:
https://github.com/fleetdm/fleet/actions/runs/11864218412
2024-11-15 19:41:19 -03:00
Lucas Manuel Rodriguez c993e5a485 Add workflow to build fleetd_tables (#23873)
Workflow to build `fleetd_tables` in Github.
2024-11-15 19:05:07 -03:00
Robert Fairburn e20820dfe5 Deploy to free.fleetdm.com before dogfood (#23762) 2024-11-13 11:17:23 -06:00
StepSecurity Bot 552e76b68e [StepSecurity] ci: Harden GitHub Actions (#23765) 2024-11-13 10:43:13 -06:00
Noah Talerman 02d3f118bf Update story issue template (#23741) 2024-11-13 10:23:10 -06:00
Lucas Manuel Rodriguez 299a7999b2 Fix trivy fleetctl workflow (#23643)
Exactly same fix as #23634.

PS: Thanks @sgress454!
2024-11-12 14:58:41 -03:00
Scott Gress 1551157c23 Fix rate limiting issue in Trivy workflow scan (#23634) 2024-11-07 15:06:17 -06:00
Robert Fairburn e525eed606 Include root.json in check-tuf-timestamps.yml (#23608) 2024-11-07 11:32:01 -06:00
Lucas Manuel Rodriguez c09360aabb Add workflow to ease QA of ADE workflows (#23470)
From discussions with @jahzielv.

QAing ADE flows:

1. New version of fleetd is pushed to `edge`
2. QA folks can trigger this new workflow and download the generated
`fleetd-base.pkg` and `fleetd-base-manifest.plist`.
3. Host the downloaded files (in `foobar/`) in their ngroks URLs (using
e.g. `go tools ./tools/file-server 8085 foobar/`)
4. Use Fleet's `FLEET_DEV_DOWNLOAD_FLEETDM_URL` to point the Fleet
server to their ngrok URL.
2024-11-05 05:28:50 -03:00
Lucas Manuel Rodriguez 3cdafcee5f Release fleetd 1.35.0 (#23467) 2024-11-04 11:39:46 -03:00
RachelElysia 951542dacf Fleet UI: Automatically create a PR if Osquery version is not up to date in UI (#23290) 2024-10-30 16:35:44 -04:00
Victor Lyuboslavsky d0ed03f3c8 Update Go CI tests: MySQL 8.4.2 -> 8.4.3 (#23255)
Make sure Fleet works with the latest MySQL 8.4
2024-10-25 15:58:10 -05:00
Victor Lyuboslavsky 40f7cdf547 Added Render deploy workflow for fleet-gitops CI. (#23190)
#21715 

# Checklist for submitter
- [x] Manual QA for all new/changed functionality
2024-10-25 15:55:42 -05:00
Noah Talerman 7d4d87d981 Feature request issue template: remove ~feature fest label (#23185)
https://github.com/fleetdm/fleet/pull/23184/files#diff-c99d12c3af50c0c2aca2b9ef7597c02ccfe87678291956ff0b2e83d63978ea38R368
2024-10-24 13:45:42 -04:00
Ian Littman 921d8c8afd Check for TUF expirations 2x daily, and warn 4 days in advance rather than 2 (#23039) 2024-10-23 10:06:03 -05:00
Lucas Manuel Rodriguez 103727b5f4 Use ubuntu 22.04 for trivy ci scheduled check (#23088)
Fixing these failures:
https://github.com/fleetdm/fleet/actions/runs/11454239765/job/31881900492

Following this advice
https://github.com/orgs/community/discussions/139074#discussioncomment-10935090.
It seems it works.
2024-10-22 15:41:32 -05:00
Lucas Manuel Rodriguez 2c891447d4 Release osqueryd 5.14.1 (#23045) 2024-10-22 12:27:00 -05:00
Sam Pfluger fe59c7482c Remove CPE (#23007) 2024-10-22 10:59:16 -05:00
Victor Lyuboslavsky f85b6f776f Updating golangci-lint to 1.61.0 (#22973) 2024-10-18 12:38:26 -05:00
Eric 3dda9d0252 Delete deploy-bulk-operations-dashboard workflow (#22940)
Closes: https://github.com/fleetdm/confidential/issues/8351


Changes:
- Deleted the "Deploy app to bulk operations dashboard pipeline on
Heroku" workflow. This dashboard is now hosted in Render, and deploys
are triggered manually via the Render dashboard.
2024-10-18 12:02:21 -05:00
Sam Pfluger 56d4e596c7 Create website-request.md (#22974) 2024-10-16 17:51:08 -05:00
Eric cb67c32afc Change Ubuntu version in Heroku deploy workflows (#22939)
Closes: #22931

Changes:
- Updated the deploy workflows for the Fleet website and the
vulnerability dashboard to run on Ubuntu 22.04 to prevent issues we've
been seeing with the Heroku deploy action and the latest version of
Ubuntu.
2024-10-15 16:20:12 -05:00
Luke Heath b394f4f65b Update docker publish branch rules (#22806) 2024-10-10 11:20:06 -05:00
Tim Lee 1ecdad24ad Remove panic recovery in CI tests (#22644) 2024-10-09 18:29:14 -06:00
Noah Talerman 2839fe1187 Story issue template (#22695)
- Add "Objective" and "Original requests" section
  - Remove "Requestor" item b/c it's now covered by original requests
2024-10-08 13:28:38 -05:00
Lucas Manuel Rodriguez 008938b405 Reduce test-packaging.yml runs on main (#22670)
Last change for #22206.

No need to run this workflow on **every** push to `main`. Let's match
the PR paths.
2024-10-04 16:58:38 -03:00
Lucas Manuel Rodriguez 2cb17b34d3 Disable test packaging of MSI on macOS Github runners (#22562)
#22206

This was discussed in the backend weekly.

Currently the test-packaging.yml is extremely unreliable (it has more
failures than successes), because of issues with Docker and colima on
Github macOS runners (we tried docker then colima but both have issues,
timeouts, etc.).

This only removes testing of MSI package generation from macOS. IMO this
is low risk as almost all Fleet devs generate MSI packages from their
macOS workstations.
2024-10-04 16:33:42 -03:00
Lucas Manuel Rodriguez d8b67807ba Release fleetd 1.34.0 (#22602) 2024-10-02 19:21:06 -03:00
Lucas Manuel Rodriguez f8fff1685d Fix lint-js (#22557)
I missed this change in https://github.com/fleetdm/fleet/pull/22504
2024-10-01 18:25:17 -03:00
Lucas Manuel Rodriguez a9a9e92f3f Use node version defined in package.json (#22504)
We did the same thing for Go. (This allows us to not require admin
permissions to update the used Node version in CI.)
2024-10-01 17:38:22 -03:00
Ian Littman 59160c2f30 Exclude migration tests from migration timestamp/ordering check (#22496)
This fix applies to cases (e.g.
00ec402f18) where order of files being
added is e.g.:

1. Migration A
2. Migration B
3. Test for migration A

This also reorders workflow steps so the ones that don't require setting
up Go + compiling happen first, so if we have a migration issue it gets
reported sooner.

# Checklist for submitter

- [x] Manual QA for all new/changed functionality
2024-09-30 09:53:19 -05:00
Sam Pfluger d29189f8eb Change digital experience request to default to confidential (#22443) 2024-09-26 16:06:45 -05:00
Lucas Manuel Rodriguez e861ae7319 Release fleetd 1.33.0 (#22283) 2024-09-23 06:59:04 -03:00
Noah Talerman b5fcaa73dc Update story template (#22280)
- Reminder to use the reference docs branch instead of `main` (also no
more draft PRs)
2024-09-22 22:01:53 -05:00
Lucas Manuel Rodriguez c49bed104d Add CI check to detect issues with pushed fleetdm/fleetctl docker image (#22020)
Adds detection of issues like #21992.
2024-09-16 13:05:28 -03:00
Noah Talerman 2d78943b05 User story template: update "Product" checkboxes (#22048)
So we can go down the list of checkboxes during confirm and celebrate
ritual
2024-09-13 14:20:01 -04:00
Ian Littman ab996dc57d Note that minimum MySQL version is 8.0.36 everywhere (not just 8.0) because that's what we test with (#22072)
Also mention that we test with 8.4.2 in a few more places.

Note that while I'm editing release articles, this isn't retconning
minimum requirements; we mention in 4.55.0 release notes further down
that we expect 8.0.36.
2024-09-13 10:59:38 -05:00
Noah Talerman d2f285567a "Activity changes" checkbox in user story template (#22003)
- Add reminder to think about new activity items during the drafting
process
- For all checkboxes, we want to be intentional when we decided to make
"No changes" (instead of removing checkbox)
2024-09-12 18:09:02 -04:00
Zay Hanlon a46450562e Requestor to provide Gong snippet when available (#22062)
Updating the feature request template to note that the Fleet requestor
should provide a Gong snippet where a customer or prospect discussed a
feature when available
2024-09-12 17:49:43 -04:00
Roberto Dip 078c0ac3b7 document and use MDM SSO settings via gitops (#21869)
for #21313
2024-09-09 17:03:20 -03:00
Roberto Dip 70923b8352 add wait until mysql is ready (#21883) 2024-09-06 18:17:22 -03:00
Lucas Manuel Rodriguez 6a5c515dc4 Attempt to use go.mod version instead of hidden Github var (#21768)
Done as part of oncall improvements.

`vars.GO_VERSION` can only be changed by admins and it's not public
(Fleet devs don't know the current value of the variable), this approach
uses the version specified in our `go.mod` file.
2024-09-03 20:49:50 -03:00
Victor Lyuboslavsky 1b06b050d7 Fix issues with coverage uploads (#21736)
#21707
2024-09-03 09:07:16 -05:00
Lucas Manuel RodriguezandSharon Katz ea7d08fc88 Release fleetd 1.32.0 (#21658)
Co-authored-by: Sharon Katz <121527325+sharon-fdm@users.noreply.github.com>
2024-08-29 18:51:10 -03:00