Commit Graph
15177 Commits
Author SHA1 Message Date
George Karr 5cbf1fa3fc Update publish_release.sh (#25435)
Just updating publish script to fix new qa and teams
2025-01-17 14:38:39 -06:00
Noah Talerman c1a4e845e7 Update hiding secrets guide (#25439)
Update guide to be more explicit: this feature is to hide secrets in
profiles in scripts.
2025-01-17 14:31:55 -05:00
Noah Talerman c9c9a93c1e Update README.md (#25517)
New product groups
2025-01-17 14:31:31 -05:00
Harrison Ravazzolo a7a9a41390 Update enroll-hosts.md to include arch64 note (#25518) 2025-01-17 10:41:39 -08:00
Lucas Manuel Rodriguez 14d7749138 Migration script to support multiple hosts and rpm and arm64 (#25542) 2025-01-17 14:13:27 -03:00
Ian Littman 9a5d74cfc6 Exempt bootstrap package uploads from server-side request timeout (#25536)
For #25533

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] A detailed QA plan exists on the associated ticket (if it isn't
there, work with the product group's QA engineer to add it)
- [x] Manual QA for all new/changed functionality
2025-01-17 10:39:59 -06:00
Scott Gress e8b1ec69ec replace node-sass with sass (#25493)
The [current node-sass
dependency](https://www.npmjs.com/package/node-sass) in the front end is
unmaintained:

<img width="842" alt="image"
src="https://github.com/user-attachments/assets/ebcdeda3-21c0-44a7-95a3-2b48c3894dde"
/>

and has caused some build issues. I've tested the suggested replacement
and was able to build the frontend bundle as well as Storybook with no
problems.
2025-01-17 10:28:57 -06:00
RachelElysia 3420e3f14d Fleet UI: Missing the (#25550) 2025-01-17 11:17:06 -05:00
Scott GressandDrew Baker bb5ec47ec0 Add SLSA guide (#25423)
This PR adds an article about the software attestations Fleet now adds
to release artifacts.

---------

Co-authored-by: Drew Baker <89049099+Drew-P-drawers@users.noreply.github.com>
2025-01-17 09:38:37 -06:00
Noah Talerman e371b5e0f1 Update product-design.rituals.yml (#25543) 2025-01-17 10:10:35 -05:00
Gabriel Hernandez 22baa5af94 bump action/cache to version 4.2.0 (#25508)
For #25507

A bump to the latest version to the github `cache` action to 4.2.0. our
current version (v2) was deprecated. more info for the deprecation can
be found here https://github.com/actions/cache/discussions/1510

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
2025-01-17 15:01:27 +00:00
Lucas Manuel Rodriguez 88a58041a9 Add update_url column to orbit_info (#25532)
Adding new column to ease TUF migration QA and deployment.

![Screenshot 2025-01-17 at 8 24
56 AM](https://github.com/user-attachments/assets/3565fa4c-4bb4-4218-8122-5f3402e02d99)
2025-01-17 11:52:21 -03:00
github-actions[bot]andlucasmrod 732f46cca7 Update versions of fleetd components in Fleet's TUF [automated] (#25534)
Automated change from [GitHub
action](https://github.com/fleetdm/fleet/actions/workflows/fleetd-tuf.yml).

Co-authored-by: lucasmrod <lucasmrod@users.noreply.github.com>
2025-01-17 08:28:46 -03:00
Jahziel Villasana-Espinoza 8407aefc73 fix: add translation for iterm2 (#25477)
> For #25130 

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added/updated automated tests
- [x] A detailed QA plan exists on the associated ticket (if it isn't
there, work with the product group's QA engineer to add it)
- [x] Manual QA for all new/changed functionality
2025-01-16 20:17:10 -05:00
Victor Lyuboslavsky 7c6e0cb6d8 Refactoring VerifyHostMDMProfiles (#25515)
For #24790 

No functional changes.

Refactoring VerifyHostMDMProfiles to speed up current and future changes
and bug fixes.
2025-01-16 18:17:09 -06:00
Rebecca Cowart 289e66a568 Update rest-api.md (#25527)
Added context to the `additional_info_filters` parameter.
2025-01-16 16:12:11 -06:00
Rebecca Cowart 2f20f13246 Update yaml-files.md (#25526)
Added ai_features_disabled to the list of server_settings. Fixed two
spelling issues. Made the grammar surrounding each "(default:...)" text
consistent within that section.
2025-01-16 16:04:53 -06:00
Noah Talerman e9ba7303cb Update story issue template (#25521)
User stories that are yet to be prioritized are clogging up the "New
requests" column on the drafting board. Only new feature requests should
show up in this column
2025-01-16 16:01:54 -06:00
jacobshandlingandJacob Shandling 725ccf6ebc Docs: fix type (#25523)
This parameter should be a string

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2025-01-16 15:52:37 -06:00
Ian Littman 0bf438df9e Drop long note on VPP minutiae in software automation modal (will show up in docs instead) (#25522)
For #25452.

- [x] Manual QA for all new/changed functionality
2025-01-16 15:51:05 -06:00
jacobshandlingandJacob Shandling a4d501e67c UI - Coordinate multiple error inputs to successfully display server errors as UserForm field errors (#25476)
## For #24948 


![ezgif-3-a357750dbe](https://github.com/user-attachments/assets/e3fdc103-df93-4286-af63-df87330c3f1d)

- [x] Changes file added for user-visible changes in `changes/`
- [x] A detailed QA plan exists on the associated ticket (if it isn't
there, work with the product group's QA engineer to add it)
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2025-01-16 13:23:00 -08:00
Marko Lisica 8b073d577c Update docs and guide about variables (#25445)
Related to:
- https://github.com/fleetdm/fleet/issues/23238#issuecomment-2591300093
2025-01-16 13:34:28 -05:00
Scott Gress 5f2b339429 Bump dogfood cron monitoring to v1.5.1 (#25278)
@rfairburn at your convenience, after tagging
https://github.com/fleetdm/fleet/pull/25268 plz approve and merge.
2025-01-16 10:46:49 -06:00
Lucas Manuel Rodriguez 4b523bc6ae Add support for universal binary on test migration script (#25483) 2025-01-16 13:07:09 -03:00
Dante Catalfamo 3a2a689796 Don't expire iOS devices prematurely (#25436)
#25406 

The `last_seen_times` table is only updates when osquery hits one of its
authenticated endpoints, meaning it isn't updated when devices without
osquery, like iphones, are enrolled. I've left a
[comment](https://github.com/fleetdm/fleet/issues/25406#issuecomment-2590637318)
on the original issue explaining how this happens. Originally, if there
was no `last_seen_time`, the fallback value would be the `created_at`
value on the `hosts` table, so ios devices would always get deleted once
they were added X number of days ago.

In its place, I've added the `detail_updated_at` column on the `hosts`
table as the fallback value, and only use `created_at` if that is also
empty. `detail_updated_at` is updated every time a full detail refetch
completes. In the case of ios/ipados, [this is done using
MDM](https://github.com/fleetdm/fleet/blob/cd5c0e8aed10664458f597b5d9600dd20bf3fdac/server/service/apple_mdm.go#L3101).
`detail_updated_at` is updated less frequently than `last_seen_times`,
only once every hour or so instead of every 30 seconds, but since
expiration policies are set on the scale of days instead of hours, this
should be fine.

The way I've QA'd this is by adding an iOS device to my fleet instance,
waited 24 hours, and set the expiration policy to 24 hours.
2025-01-16 10:13:22 -05:00
Dante Catalfamo d3ea62a8ce Address double json-unmarshal in note (#25454)
#24390

Add a comment to provide context on why it's done this way, and a
suggestion to revisit it once the new `json/v2` is released
2025-01-16 10:08:52 -05:00
RachelElysia 51fecdd91e Fleet UI: Platform of policy mismatch current selected software unrelease bug fix (#25489) 2025-01-15 18:07:46 -08:00
Mike McNeil c84d535347 Capitalization: Update app-library.ejs (#25482) 2025-01-15 16:26:36 -08:00
Allen Houchins 11ac949c7e Fix lock-screen-message.mobileconfig (#25443)
Quick fix now that we have an iPhone fully enrolled in Dogfood.
2025-01-15 17:27:14 -06:00
Rachael Shaw 5d1839af19 Handbook: Update note about sentence case + step numbers (#25415)
Discussed w/ @noahtalerman, concluded that capitalization makes sense in
this case.
2025-01-15 17:11:31 -06:00
Eric cefabf9954 Website: update contact form @mentions (#25475)
Closes: https://github.com/fleetdm/confidential/issues/9361

Changes:
- Updated the Slack users who are @mentioned when users submit a contact
form message.
2025-01-15 17:01:29 -06:00
Eric bf182bed3e Website: update query generator to use socket requests. (#25472)
Closes: #25465 

Changes:
- Updated the query generator page to use socket requests to call the
`get-llm-generated-sql` action to bypass Heroku's 30-second request
timeout.
2025-01-15 16:31:37 -06:00
Ian Littman f5c3cfc6c7 Include notes on when automations won't run for a given host in software and script automation UIs (#25453)
For #25452.

- [x] Manual QA for all new/changed functionality
2025-01-15 16:24:10 -06:00
Lucas Manuel Rodriguez 70096e86ac Changes for migration TUF QA (#25468) 2025-01-15 18:36:53 -03:00
Noah Talerman 498ddca753 API reference: clarify 10k character limit for arbitrary scripts (#25470) 2025-01-15 15:14:29 -06:00
Noah Talerman d5626acc6c Dogfood hiding secrets added via YAML (#25384) 2025-01-15 13:40:39 -06:00
Luke Heath bcb5a7da56 Simpler sync command (#25469) 2025-01-15 13:34:51 -06:00
Fred Dubois 239db41d16 fix: properly indent service annotations (#25388)
When then was more than 1 annotation on the service, it would not be
properly indented.

```
$ cat test-values.yaml 
serviceAnnotations:
  foo: bar
  bar: baz
  baz: qux
$ helm template fleet . -f test-values.yaml --show-only templates/service.yaml
---
# Source: fleet/templates/service.yaml
apiVersion: v1
kind: Service
metadata:
  labels:
    app: fleet
    chart: fleet
    heritage: Helm
    release: fleet
  annotations:
    bar: baz
    baz: qux
    foo: bar
  name: fleet-service
  namespace: fleet
spec:
  selector:
    app: fleet
    chart: fleet
    heritage: Helm
    release: fleet
  ports:
  - name: fleet
    port: 8080
    targetPort: 8080
```

before:

```
$ git checkout main
$ helm template fleet . -f test-values.yaml --show-only templates/service.yaml
---
# Source: fleet/templates/service.yaml
apiVersion: v1
kind: Service
metadata:
  labels:
    app: fleet
    chart: fleet
    heritage: Helm
    release: fleet
  annotations:
    bar: baz
  baz: qux
  foo: bar
  name: fleet-service
  namespace: fleet
spec:
  selector:
    app: fleet
    chart: fleet
    heritage: Helm
    release: fleet
  ports:
  - name: fleet
    port: 8080
    targetPort: 8080
2025-01-15 11:02:57 -06:00
Dante CatalfamoandScott Gress 39466cb644 Use webhooks settings from gitops even when empty (#25347)
#24958

---------

Co-authored-by: Scott Gress <scottmgress@gmail.com>
2025-01-15 11:31:48 -05:00
Allen HouchinsandDrew Baker 9b7165ee64 New article for Jamf Pro terminology (#25380)
Publishing a new article to help Jamf Pro admins better understand Fleet
terminology.

---------

Co-authored-by: Drew Baker <89049099+Drew-P-drawers@users.noreply.github.com>
2025-01-15 10:25:18 -06:00
Marko LisicaandNoah Talerman 6977ec9103 Automatically create policy - link change (#25404)
Change related to:

- #23344

<img width="1320" alt="Screenshot 2025-01-14 at 11 37 21"
src="https://github.com/user-attachments/assets/31d481f8-9778-4b16-b174-cdfd91456b05"
/>

Learn more should point to query templates:
<img width="1219" alt="Screenshot 2025-01-14 at 11 37 34"
src="https://github.com/user-attachments/assets/6472fa4b-df9b-4c43-a82d-8921decf4d20"
/>

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2025-01-15 13:26:08 +01:00
Allen Houchins 947055ff2b Added Google Chrome back to Windows (#25413)
Re-adding Google Chrome now that this bug has been fixed:
https://github.com/fleetdm/fleet/issues/24917
2025-01-14 21:10:12 -06:00
Eric ae99e87ed6 Website: update has-query-generator-access policy (#25442)
Changes:
- Updated the website's has-query-generator-access policy to allow super
admins to access the query generator page.
2025-01-14 19:40:53 -06:00
Eric 0e72c5daeb Website: Move query generator out of Admin section (#25301)
Changes:
- Updated the User model to have a new attribute: `canUseQueryGenerator`
a boolean attribute that will grant users access to the query generator
page on the website.
- Added a new policy: `has-query-generate-access`
- Moved the query generator page from the admin section of the website.

Note: before this change can be merged, the website's database will need
to be migrated to add the new column to the User table
2025-01-14 18:09:17 -06:00
Victor Lyuboslavsky b55f6cf119 Speculative fixes for flaky TestIntegrationsMDM tests. (#25409)
For #23256
For #23430

Recent randokiller (Stress Go Test) passed:
https://github.com/fleetdm/fleet/actions/runs/12775288098

Speculative fixes for several tests, including:
- `TestIntegrationsMDM/TestHostMDMProfilesExcludeLabels`
- `TestIntegrationsMDM/TestLockUnlockWipeMacOS`
2025-01-14 16:45:10 -06:00
Marko Lisica e38447c975 Explain variable escaping (#25410)
Related to:  #23238
2025-01-14 17:28:38 -05:00
Rebecca Cowart 3552104aa4 Update fleet-ai-assisted-policy-descriptions-and-resolutions.md (#25431)
Changed "usr-facing" to "user-facing"
2025-01-14 17:16:24 -05:00
George Karr a672ff8f1d Adding changes for Fleet v4.62.1 (#25417) 2025-01-14 15:19:54 -06:00
Lucas Manuel Rodriguez f1705280fe Add instructions to use ngrok for migration testing (#25420)
Adding some capabilities to test migration locally with ngrok. To test
HTTPS.
2025-01-14 17:25:05 -03:00
Rachael Shaw ca15cbe3bb Handbook: Indentation fix (#25421)
Fix bullet-point indentation
2025-01-14 15:02:14 -05:00