Commit Graph
921 Commits
Author SHA1 Message Date
Mitch FranceseandBrock Walters 542e8ff259 Update links to example configuration profiles (#35420)
Fixing broken links in the article to point to absolute paths.

---------

Co-authored-by: Brock Walters <153771548+nonpunctual@users.noreply.github.com>
2025-11-12 15:08:18 -05:00
Noah Talerman 3904295c42 Fleet 4.76: Vulnerabilities (CVEs) are supported for Cursor, Windsurf, and VSCode-forks (#35634)
We learned that CVEs work:
https://github.com/fleetdm/fleet/issues/35523#issuecomment-3523047239
2025-11-12 13:56:42 -05:00
Noah Talerman 15703e9e6a Fleet 4.76: Santa tables came out in 4.75 (#35616) 2025-11-12 10:08:55 -06:00
Noah Talerman a85a66272d Enable scripts remotely w/o re-deploying fleetd (#33169)
- @noahtalerman: I think we can merge in this PR before we dogfood the
scripts ourselves. Dogfood request is here:
https://github.com/fleetdm/fleet/issues/33170

---

- @noahtalerman: `customer-montague` was frustrated that they had to
re-deploy fleetd to enable scripts. At organizations that have a
third-party tool that can run scripts (other than Fleet), this is
avoidable! We want to document how to enable scripts remotely w/o
re-deploying fleetd.

More context:
https://github.com/fleetdm/fleet/issues/29193#issuecomment-3137337041
2025-11-12 10:39:48 -05:00
Noah Talerman 22e6dcd5e2 Update roadmap preview (#35019)
This fall, Fleet is also working on first-time setup for iOS/iPadOS and
Android:
- https://github.com/fleetdm/fleet/issues/34042
- https://github.com/fleetdm/fleet/issues/30890
- https://github.com/fleetdm/fleet/issues/33761
2025-11-12 12:05:03 +01:00
Noah Talerman d02add03c0 [Guide update] Wi-Fi/VPN certificates (#35490)
- As of Fleet 4.76, automatic renewal is Apple only
- If validity is less than 30 days, auto renewal happens at half the
validity period
2025-11-11 17:57:28 -05:00
Rachael Shaw 86b80e28ed Documentation v4.76.0 (#34943)
Documentation changes for the 4.76 release
2025-11-11 09:30:14 -05:00
Sam Pfluger d9726ba6e0 fleetdm.com/start to fleetdm.com/try (#35481)
closes https://github.com/fleetdm/confidential/issues/12944
2025-11-10 18:34:06 -06:00
Noah Talerman 099b17e161 Fleet 4.76: Vulnerabilities (CVEs) for Cursor and Windsurf are coming soon (#35424)
- @noahtalerman: The plan was to ship vulnerabilities as part of this
story. However, there's a bug:
https://github.com/fleetdm/fleet/issues/34961
2025-11-10 15:08:19 -05:00
Noah Talerman 338b64ebe9 4.76 article: macOS self-service scripts are coming soon (#35404) 2025-11-10 09:13:16 -05:00
Graham Williams 746e446cac Fix typos in fleet.4.76.0.md (#35403) 2025-11-09 12:41:20 -05:00
Rachael Shaw 9cc3b8f0ba Docs: Add messaging about 🪲 #35309 (#35392)
Add caveat to macOS setup experience and GitOps docs re: 🪲 #35309
<img width="828" height="306" alt="Screenshot 2025-11-08 at 1 05 11 PM"
src="https://github.com/user-attachments/assets/ca6a04f6-bea6-4863-839e-65a004bad932"
/>
2025-11-08 13:11:06 -06:00
Mitch Francese 27a8b1fa35 Create article outlining how to setup Okta for Platform SSO using Static SCEP certificates. (#34866) 2025-11-07 20:53:12 -05:00
Noah Talerman 9c014a2d91 Release article: 4.76 (#35266) 2025-11-07 18:00:25 -06:00
jacobshandlingandMike Thomas cfb1480f19 Match actual requirements for setting up Okta (#35327)
The form requires a "fully-qualified"* URL



*thanks @mike-j-thomas 😀

---------

Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
2025-11-06 18:28:24 -08:00
Ian Littman b1b1e5c725 Repoint links in tamper-proofing guide (#35255)
Fixes #34799.
2025-11-06 18:05:36 -06:00
Steven Palmesano 516f34d183 Fix typos in Fleet v4.74.0 release article (#35071) 2025-11-06 09:10:48 -05:00
Ian Littman f1c3f02dac Update host foreign vitals IdP guide + related tweaks (#35229)
Fixes #32072.

Biggest changes are in the foreign vitals IdP (SCIM) guide:

* Moved Android from "coming soon" to live (true as of 4.75)
* Moved Okta-specific troubleshooting under the Okta section
* Moved "Other IdPs" into its own top level section instead of partway
through the Google section (looks like the result of a bad merge)
* Added a link to the labels guide where relevant
* Various minor clarity/grammar fixes based on running through the
process end-to-end with Okta


Additionally:

* Clarity fixes on labels docs
* Noted in contributing docs the existence of the Okta Integrator Free
plan for E2E testing SSO/SCIM flows
2025-11-05 13:55:49 -06:00
Matt RebeloandNoah Talerman 8dca5fe5e5 Update fleet-4.74.0.md (#35224)
Adding breaking change note to Changes section of release article.

<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] If paths of existing endpoints are modified without backwards
compatibility, checked the frontend/CLI for any necessary changes

## Testing

- [ ] Added/updated automated tests
- [ ] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)

- [ ] QA'd all new/changed functionality manually

For unreleased bug fixes in a release candidate, one of:

- [ ] Confirmed that the fix is not expected to adversely impact load
test results
- [ ] Alerted the release DRI if additional load testing is needed

## Database migrations

- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).

## New Fleet configuration settings

- [ ] Setting(s) is/are explicitly excluded from GitOps

If you didn't check the box above, follow this checklist for
GitOps-enabled settings:

- [ ] Verified that the setting is exported via `fleetctl
generate-gitops`
- [ ] Verified the setting is documented in a separate PR to [the GitOps
documentation](https://github.com/fleetdm/fleet/blob/main/docs/Configuration/yaml-files.md#L485)
- [ ] Verified that the setting is cleared on the server if it is not
supplied in a YAML file (or that it is documented as being optional)
- [ ] Verified that any relevant UI is disabled when GitOps mode is
enabled

## fleetd/orbit/Fleet Desktop

- [ ] Verified compatibility with the latest released version of Fleet
(see [Must
rule](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/workflows/fleetd-development-and-release-strategy.md))
- [ ] If the change applies to only one platform, confirmed that
`runtime.GOOS` is used as needed to isolate changes
- [ ] Verified that fleetd runs on macOS, Linux and Windows
- [ ] Verified auto-update works from the released version of component
to the new version (see [tools/tuf/test](../tools/tuf/test/README.md))

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2025-11-05 13:56:58 -05:00
Marko Lisica 263073ac1e Fix typo in certificate renewal section (#35203)
Fixing typo
2025-11-05 12:37:41 -05:00
Brock Walters 693fa23e22 Revise CrowdStrike Falcon deployment guide (#35216)
Updated the guide to clarify the deployment process for CrowdStrike
Falcon on macOS, Linux, and Windows using Fleet. Added details on
installation steps, post-install scripts, and configuration profiles.
2025-11-05 12:29:54 -05:00
Mitch Francese 6e6ba97e7d Fix link formatting in fleetd-authentication.md (#34630)
Fixed typo in Markdown link for the Certificates in Fleet Guide
2025-11-05 10:00:23 -05:00
Ian LittmanandBrock Walters 2fd0129bfb Rework CrowdStrike guide to allow following a given platform's instructions top to bottom (#35187)
For #33193.

---------

Co-authored-by: Brock Walters <153771548+nonpunctual@users.noreply.github.com>
2025-11-04 21:19:19 -05:00
Noah TalermanandMike Thomas fc48b21534 [Guide updates] Simplify labels guide (#34742)
Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
2025-11-05 07:35:47 +09:00
Marko Lisica 10e6b0d638 Add instructions for deleting Android Enterprise (#34339)
Added section on deleting Android Enterprise in Google Admin.

I'll use this new title to link in the UI, inside the banner when user
deletes Android Enterprise in Google Admin.

Related to:
https://github.com/fleetdm/fleet/issues/34152#issuecomment-3407854195
2025-11-04 12:20:24 +01:00
Noah Talerman 924d676c57 [Guide update] Migrating to host identity certificates for Linux hosts (#34164)
Came up with this best practice during `customer-interkosmos` call on
2025-10-13:
https://docs.google.com/document/d/113ClZgRuercJ1BnjgEjOPyk3EV9QsRCl05cvVgniWzg/edit?tab=t.0
2025-10-31 09:37:09 -04:00
Noah Talerman bc973dd7a1 [Guide updates] Update article title and description for clarity (#34775) 2025-10-31 09:33:27 -04:00
Noah TalermanandMike Thomas b83b1c249c [Update guide] Variables in scripts and configuration profiles (#34955)
- Add a link to Fleet's built-in variables to make them easier to find.
When search "variables" in the docs/guide, this guide is the first to
come up:


<img width="579" height="515" alt="Screenshot 2025-10-29 at 4 12 39 PM"
src="https://github.com/user-attachments/assets/bc8b2722-2e6c-446f-8cce-9fb4cc4a0ed3"
/>

---------

Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
2025-10-31 09:32:27 -04:00
Noah Talerman bfe8654c75 [Guide update] Connect end user to wifi with certificates (#35026)
- It takes a couple minutes for old certificates to be removed:
https://fleetdm.slack.com/archives/C03C41L5YEL/p1761856629150709?thread_ts=1761576572.590309&cid=C03C41L5YEL
- Added a new "Renewal" section to clean up the top section
- Added a new "Advanced" section to clean up the right side bar
2025-10-31 09:31:34 -04:00
Noah Talerman b27a2d9525 macOS MDM migration guide (#34860)
Context: https://github.com/fleetdm/fleet/issues/32437#issue-3364864761
2025-10-30 09:25:28 -04:00
Mason Buettner abc1040f4b Update link for CrowdStrike macOS Configuration Profiles (#34969)
Fixed broken link for CrowdStrike configuration profiles.
2025-10-29 15:51:41 -07:00
Brock Walters 2dc2268c01 Clarify SCEP challenge string requirements for Windows (#34916)
Modified to include base64 warning.
2025-10-29 16:08:33 +01:00
Noah Talerman 8d363678cd Fleet 4.75: Santa tables (#34867)
Context: https://github.com/fleetdm/fleet/issues/34789
2025-10-28 18:17:26 -04:00
Brock Walters c07b915cd9 Clarify SCEP challenge string limitations on Windows (#34883)
Added note about special characters in SCEP challenge strings for
Windows.
2025-10-28 14:16:13 -04:00
Jonathan Katz bb512cc345 Documentation updates for in-house-app features (#34817)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.
2025-10-28 12:05:47 -05:00
Noah Talerman 444c7b5238 macOS Setup Assistant (#34863)
- Link to Apple docs:
https://developer.apple.com/documentation/devicemanagement/profile
2025-10-28 15:38:06 +00:00
Brock Walters 1874880d15 Fix minor grammatical issues in documentation (#34675)
Accurate.
2025-10-27 17:25:23 -05:00
Brock Walters 334572bf0c Enhance MDM command payload encoding instructions (#34722)
Added instructions for base64 encoding MDM command payloads in Terminal
and PowerShell.
2025-10-27 17:13:48 -05:00
Allen Houchins 6708e2d998 Fix typo in log-destinations.md (#34803) 2025-10-27 09:02:07 -05:00
Jonathan Katz 954b3510a7 Update entra-conditional-access article (#34648)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #33896
Update guide to use fleet maintained app instead of custom package

# Checklist for submitter

If some of the following don't apply, delete the relevant line.
2025-10-23 14:32:26 -04:00
Noah Talerman 4a7920fd7a [Guide update] Fix typos (#34435) 2025-10-22 14:56:13 -05:00
Rachael Shaw 84658aa9b3 Update Windows & Linux setup experience guide (#34639)
+ Remove "Windows coming soon" message
+ Add mention of Windows where relevant
+ Fix a couple typos
2025-10-22 12:12:15 -05:00
Noah Talerman 2f8f268073 Best practice Hydrant certificates (#34465)
Feedback from `customer-cisneros` on 2025-10-17
2025-10-22 11:37:24 -04:00
Noah TalermanandEric 7aaf6b59b9 Rename macOS MDM setup to Apple MDM setup (#34526)
Co-authored-by: Eric <eashaw@sailsjs.com>
2025-10-22 09:22:33 -04:00
Noah Talerman 49a458a8ca Add Fleet UI refresh details to release notes (#34536) 2025-10-20 12:36:12 -05:00
Noah Talerman 9318d26e90 Release article: 4.75 (#34390) 2025-10-17 17:46:50 -05:00
+3 7ed4aac2b8 Docs v4.75.0 (#34443)
Documentation changes for the 4.75 release

---------

Co-authored-by: Marko Lisica <83164494+marko-lisica@users.noreply.github.com>
Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
Co-authored-by: Victor Lyuboslavsky <2685025+getvictor@users.noreply.github.com>
Co-authored-by: Ian Littman <iansltx@gmail.com>
Co-authored-by: Noah Talerman <noahtal@umich.edu>
Co-authored-by: Lucas Manuel Rodriguez <lucas@fleetdm.com>
Co-authored-by: Magnus Jensen <magnus@fleetdm.com>
Co-authored-by: Jordan Montgomery <elijah.jordan.montgomery@gmail.com>
Co-authored-by: Tim Lee <timlee@fleetdm.com>
Co-authored-by: Janis Watts <184028114+jmwatts@users.noreply.github.com>
Co-authored-by: Sarah Gillespie <73313222+gillespi314@users.noreply.github.com>
Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
2025-10-17 17:45:52 -05:00
jacobshandling c9a14d5038 Update vuln processing guide, add change file for JetBrains IDE extension vulns (#34478)
Addresses #32266 

Update docs, add change file
2025-10-17 17:39:21 -05:00
Noah Talerman 5b78b69a72 Roadmap preview: October 2025 (#33179) 2025-10-17 13:24:00 -04:00
Noah Talerman d6faf698c4 Entra conditional access guide: Broken link (#34245)
- Period was inside of the link:
https://fleetdm.com/microsoft-compliance-partner/remediate.
2025-10-15 09:10:14 -05:00