Discharge7443/fleet
1
0
Fork 0
Code Issues Pull Requests Actions 15 Packages Projects Releases Wiki Activity
3,542 Commits 2 Branches 0 Tags
656ef07df11df5e580ae0dc009d7aecfabdb7ff0
Commit Graph
987 Commits
Author SHA1 Message Date
Tomas Touceda 656ef07df1 Move ApplyTeamSpec to ee (#4011) 
* Move ApplyTeamSpec to ee

* Update test now that apply team specs is behind premium

* Check all auth first

* Change auth call for team creation
 2022-02-03 16:24:03 -03:00
Tomas Touceda cf529e70cf Issue 3173 debug status processlist (#4009) 
* Add innodb status and process list

* Make json output a bit prettier

* Add changes file

* fix lint issues
 2022-02-03 14:56:22 -03:00
Lucas Manuel RodriguezandTomas Touceda ab8cc6e7bc Split hosts in bucket of minutes for the jitter (#3767) 
* Split hosts in bucket of minutes

* New approach on jitter

* Use minutes to define the amount of buckets

* Add logging to jitter hash creation

* Clean up code and remove unused jitter

* Fix test

* Add docs and address review comments

* Address review comments

* Fix typo in doc

Co-authored-by: Tomas Touceda <chiiph@gmail.com>
 2022-02-03 14:56:11 -03:00
Tomas Touceda 53ba8f07ea Issue 3882 clean team packs (#4002) 
* Cleanup team schedules when deleting teams

* Add changes file

* Improve code readability

* Reuse func instead of formatting twice
 2022-02-03 14:55:48 -03:00
Tomas Touceda b2d0a8c79f Merge pull request from GHSA-ch68-7cf4-35vr 
* Validate audience restrictions when validating SAML auth reqs

* EntityID is usually the audience

* Add coverage for failures on audience conditions
 2022-02-02 15:50:09 -08:00
Martin Angers 6e2ba62744 Trigger webhooks for recently published vulnerabilities (#3941) 2022-02-02 16:34:37 -05:00
Tomas Touceda b90e2e2e3d Issue 3901 match target sw (#3982) 
* Allow to search with target_sw with a period

* Remove tests for a different thign

* Add a test for programs as a source as well

* Use MATCH again and add proper tests
 2022-02-02 17:17:41 -03:00
Martin Angers 6319812984 Fix column name when detecting order by (#3978) 2022-02-02 10:08:51 -05:00
Tomas Touceda a63c549f07 Make software filter by counts faster (#3975) 
* Make software filter by counts faster

* Sort only when it's for the agg table
 2022-02-02 09:51:56 -03:00
Martin Angers 4ab7fdd6bb Return a null timestamp when there are no software counts available (#3955) 2022-01-31 17:08:03 -05:00
Martin Angers ecf6bd8907 Migrate more user-authenticated endpoints to new pattern (#3933) 2022-01-31 16:35:22 -05:00
Tomas Touceda e956b0ba04 Add filter software by CVE and make osquery-perf also push vulnerable software (#3902) 
* Add filter software by CVE and make osquery-perf also push vulnerable software

* Update based on review comments
 2022-01-28 10:05:11 -03:00
Tomas Touceda 1667fdcf22 Add vulnerabilities webhook config (#3897) 
* Add vulnerabilities webhook config

* Fix tests

* Update documentation

* Update docs
 2022-01-27 10:48:46 -03:00
Tomas Touceda ffabf803a3 Aggregate munki and mdm data (#3886) 
* Aggregate munki and mdm data

* Update doc

* Use reader to read

* Reader to read

* Address review comments
 2022-01-26 17:55:07 -03:00
Martin Angers a6f3f02a85 Cleanup unused software after calculating the count of hosts (#3887) 2022-01-26 11:32:42 -05:00
Martin Angers 9a0f749641 Add hosts_count field to "list software" endpoint (#3873) 2022-01-26 09:47:56 -05:00
Martin Angers 39b34508a9 Try to fix flaky publisher-has-listener redis test (#3876) 2022-01-26 08:13:01 -05:00
Martin Angers 8b8cebb6fe Migrate remaining user-authenticated endpoints (#3796) 2022-01-25 09:34:00 -05:00
Tomas Touceda a18e09b613 Simplify fleetctl implementation and improve testing (#3830) 
* Simplify fleetctl implementation and improve testing

* Add a few more

* Handle not founds better

* Fix tests

* Check that logout ds func is called
 2022-01-24 16:40:51 -03:00
Tomas Touceda f02bef6f2c Add platform filter to host_summary (#3845) 
* Add platform filter to host_summary

* Add documentation

* Actually forward the platform param down the chain

* Update mock

* Update mock
 2022-01-24 14:49:21 -03:00
Lucas Manuel Rodriguez 81672ee50e Add dev sql interceptor for logging of queries (#3815) 
* Add dev sql interceptor for logging of queries

* Remove extra spaces and tabs from queries

* Make regex global
 2022-01-21 14:28:21 -03:00
Tomas Touceda 9d572309ae Add sentry (#3669) 
* Add sentry

* Fix gosum

* More gosum fixes

* Add missing def for config

* Enrich sentry scope a bit

* Add changes file

* Add goroutine safe scope to errors

* Encapsulate sentry logic

* Add documentation for new flag

* Add sentry capturing to crons and other background tasks

* Only send to sentry when enabled
 2022-01-20 16:41:02 -03:00
Zach Wasserman 4a70cd69fa Shorten "simple" query API period to 25s (#3775) 
This helps the period stay under the default request timeouts for most
load balancers.

Some default timeouts:
* AWS ALB - 60s
* Nginx - 60s
* GCP LB - 30s
 2022-01-19 17:48:57 -08:00
Lucas Manuel Rodriguez e5cb68cee9 Return 404 when listing policies for a team that does not exist (#3793) 
* Return 404 when listing policies for a team that does not exist

* Set mock for auth test
 2022-01-19 18:17:42 -03:00
Lucas Manuel Rodriguez 77c3a8a61e Fix flaky TestPolicyWebhooks (#3777) 
* Fix flaky TestPolicyWebhooks

* Run test redis cleanup before running tests
 2022-01-19 16:17:00 -03:00
Lucas Manuel Rodriguez 47df5e83fe Return 400 when trying to create packs, queries and policies with empty names (#3761) 
* Return 400 when trying to create packs, queries and policies with empty names

* Amend sql query test
 2022-01-19 16:07:58 -03:00
Martin Angers afb3310937 Migrate team-related endpoints to new pattern (#3740) 2022-01-19 10:52:14 -05:00
Tomas Touceda eee539cccc Issue 3707 clean targets on delete (#3739) 
* wip

* Delete targets when deleting teams, hosts, and labels

* Add changes file

* Fix error message

* Remove unused teamsTable

* Cleanup new pack

* Clean new packs at end of test
 2022-01-19 10:28:08 -03:00
Zach Wasserman a79d5fbfcc Optimize users detail query (#3754) 
@Smjert reported instances of Windows Domain Controllers having massive
resource utilization and being killed by the watchdog when running this
query. In his test environment, this new query performs much better.
 2022-01-18 16:39:32 -08:00
Zach Wasserman 6232bfa1d6 Include browser extensions in software inventory (#3733) 
Use appropriate JOINs against users table to include all results.

For #3557
 2022-01-18 12:46:04 -08:00
Tomas Touceda f85941e60c Use time.after instead of time.tick to not leak (#3751) 2022-01-18 16:50:15 -03:00
Lucas Manuel Rodriguez d4243d0a72 Team observers can browse global policies (#3737) 
* Allow team observers to browse global policies

* Add integration core test for team observer

* Fix integration tests
 2022-01-18 13:18:40 -03:00
Martin Angers f19e676e62 Refactor async host processing to avoid redis SCAN keys (for policies) (#3657) 2022-01-18 09:56:43 -05:00
Tomas Touceda b47cf3d2d4 Better jitter (#3716) 
* Better jitter

* Fix lint

* Use milliseconds

* Make duration milliseconds

* Update based on Lucas' suggestion

* Add changes file

* Panic on error

* Fix compilation error
 2022-01-18 11:29:57 -03:00
Lucas Manuel Rodriguez 371c533bfc Improved Datastore usage of osquery hosts requests (#3601) 
* WIP

* Amend tests

* Do not load aggregated stats for packs

* Add option to host lite

* Fix remaining TODOs

* Fix osquery_utils tests

* Fix SQL

* Fix SQL (bis)

* Restore AuthenticateHost to load once

* Code improvements and re-add deferred host save

* More fixes to the PR

* Wrap users table update on tx

* Add caching to ListPacksForHost and ListScheduledQueriesInPack

* Remove SaveHostSoftware (replaced by UpdateHostSoftware)

* Add unit tests for new functionality

* Add changes file

* Fix scheduled queries test
 2022-01-17 22:52:09 -03:00
Martin Angers c335272de2 Fix failing policy sets for redis cluster mode (#3725) 2022-01-17 15:16:54 -05:00
Martin Angers 1f185a7a8b Refactor async host processing to avoid redis SCAN keys (for labels only) (#3639) 2022-01-17 14:53:59 -05:00
Zach Wasserman 72fc9dc524 Remove unused request-id in context (#3632) 
This seems to be left over from the older authorization system in Fleet.
I couldn't find any other reference to the `request-id` in the code.
 2022-01-13 14:12:56 -08:00
gillespi314 dc8eacc95c Add AvailableTeams to loginResponse and getUserResponse (#3585) 2022-01-13 13:57:44 -06:00
gillespi314 6952653e1b Fix usage stats to send missing numLabels field (#3606) 2022-01-13 11:11:13 -06:00
Tomas Touceda 4bed4757fb Remove cleanups and fk for host ids (#3607) 
* Remove cleanups and fk for host ids

* Readd missing things to the schema

* Remove unused

* Add changes file and fix some error messages

* Fix test

* Use tx instead of plain writer

* Other fixes

* More not found test fixes

* Go back to getcontext
 2022-01-12 14:07:51 -03:00
Tomas Touceda 312bd840a2 Detect not found errors for queries and policies (#3595) 
* Detect not found errors for queries and policies

* Fix test
 2022-01-12 10:04:16 -03:00
Lucas Manuel Rodriguez 49ceee59aa Add fixes for running tests with mysql:8 and add mysql to test-go job matrix (#3627) 
* Add fixes for running tests with mysql:8

* Add getServer function

* Test github matrix

* Add changes file for the user facing fix

* Remove unused mysql8 docker-compose
 2022-01-11 22:44:37 -03:00
Martin Angers f14f97156c Add read and write timeout options for redis (#3624) 2022-01-11 17:08:39 -05:00
Tomas Touceda c662cd2b53 Add policies yaml (#3464) 
* Add policies yaml

* Add documentation and address review comments

* Amend documentation
 2022-01-11 11:04:29 -03:00
Martin Angers 597144bfac Migrate most users endpoints to the new pattern (#3366) 2022-01-10 14:43:39 -05:00
Mike McNeil f20762b431 update copyright year in core product transactional email templates (#3549) 
* update copyright year in core product transactional email templates

* Update password_reset.html

* Update change_email_confirmation.html

* Update smtp_setup.html
 2022-01-01 12:41:32 -06:00
Zach Wasserman bda2ef0ca0 Fix regex matching email in host search (#3539) 
Fixes #3528
 2021-12-31 09:16:25 -08:00
gillespi314 fca1be4703 Modify /server/utils to handle all 2xx codes as POST success (#3534) 2021-12-30 16:00:10 -06:00
Lucas Manuel Rodriguez aaa5b7ec3c Allow hosts to check in even if Redis is down (#3506) 2021-12-29 17:06:23 -08:00