Commit Graph
8178 Commits
Author SHA1 Message Date
Gabriel Hernandez 69fdbc1949 add better messaging for ABM 400 error (#12425)
relates to #11932

This improves the UI error messaging for AMB 400 errors


![image](https://github.com/fleetdm/fleet/assets/1153709/ffe42a9c-c6a4-4afc-8d52-feaa78967b31)

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-06-22 15:08:21 +01:00
Juan Fernandez 0c172c85c3 SSO Metadata URL can only be https/http (#12388)
When setting up SSO, validate that the Metadata URL has the proper scheme.
2023-06-22 08:17:37 -04:00
Zach Wasserman 1080406266 Generate targets for osquery 5.9.1 (#12410) 2023-06-21 23:14:52 -07:00
Mo Zhu 4115f1f0ca Rename sprint backlog to estimated in product handbook (#12447) 2023-06-21 15:38:55 -07:00
Luke Heath f85decca2d Add infrastructure section to engineering handbook (#12444) 2023-06-21 15:58:31 -06:00
Mo Zhu 464edd0b40 Clarify sprint naming (#12445) 2023-06-21 14:56:54 -07:00
Robert Fairburn 2649073d91 Comment cost-saving changes in sandbox Helm Chart (#12424)
These are comments for 3 of the main changes that prevent lingering
containers from causing runaway costs in sandbox.
2023-06-21 14:35:48 -05:00
Juan Fernandez d70ae633c0 Return proper status code if SMTP conf is invalid (#12389)
When setting up SMTP return the proper status code if config is invalid.
2023-06-21 14:40:26 -04:00
Dave Herder 08a0a4ec48 Update Security-audits.md (#12057) 2023-06-21 11:26:49 -07:00
Juan Fernandez d08cc18111 Don't analyze non-windows OS using the MSRC scanner (#12421)
Don't analyze non-windows OS using the MSRC scanner
2023-06-21 14:19:55 -04:00
gillespi314 8cc7d38300 Mark "verifying" or "verified" MDM profiles as "failed" if osquery cannot confirm they are installed (#12414) 2023-06-21 13:00:49 -05:00
Sharon Katz b754cb096c Add "username=''" to managed_policies queries (#10710)
https://github.com/fleetdm/fleet/issues/10602


@xpkoala this PR will require testing of all modified items.
Preferably, we should perform the tests before merging to master. Can we
use the dev branch for that? -- Items were tested locally.
2023-06-21 13:00:25 -05:00
Mo ZhuandEric 282af8244f Update screenlock table doc to be more explicit about its limitations (#12432)
Co-authored-by: Eric <eashaw@sailsjs.com>
2023-06-21 10:29:49 -07:00
gillespi314 befda0d435 Handbook: Rename emergency drafting to expedited drafting (#12433)
It seems like we’ve been incorporating “emergency drafting” more
frequently into sprint cycles. This totally makes sense given that we
want to be an agile, design-driven company. It might be an easy cultural
win to instead call it something like “expedited drafting” to soften the
dissonance that comes from the sense of being in a constant state of
emergency.
2023-06-21 10:19:24 -07:00
Luke Heath 1f455055a1 Use actions token during helm-publish workflow (#12430) 2023-06-21 09:30:25 -06:00
Roberto Dip 3bee27d423 adjust swiftDialog layout and buttons (#12428)
related to #11859, this adjusts swiftDialog according to the specs in
the issue



https://github.com/fleetdm/fleet/assets/4419992/91d42e88-677e-4e67-aed9-7916b301577d
2023-06-21 12:10:33 -03:00
RachelElysia 54e811f44f Fleet UI: [tiny bug] See software search and vuln dropdown when no vuln software (#12412) 2023-06-21 09:15:25 -04:00
RachelElysia 65bca34825 Fleet UI: [tiny bug] Copy message (#12411) 2023-06-21 09:14:47 -04:00
Benjamin Edwards 4156859b90 feat(outputs.tf): add FLEET_FIREHOSE_AUDIT_STREAM environment variable (#12415)
forgot to add the env variable
2023-06-20 22:55:43 -04:00
Roberto Dip 835491d029 update puppet metadata.json file for publishing (#12418) 2023-06-20 19:08:46 -03:00
Roberto Dip 32acf4230c improve matching resiliency of puppet endpoints (#12402)
this PR modifies the `external_host_identifier` parameter that's used to
match hosts to Puppet runs to use an identifier that's *unique per run*
(instead of an identifier that's *unique per host*)

this has the adventage to:

1. allow for concurrent Puppet runs that don't interfere with each
other.
2. allow for failed/orphaned Puppet runs to not interfere with new runs
(the keys will eventually get expired)

all the existent behavior should be preserved.

> Note: I have verified that the value that the reporter gets is the one
  associated with the right puppet run, even if multiple runs happen
  simultaneously.
2023-06-20 18:24:54 -03:00
Joanne StablefordandMike McNeil 830b50096a Handbook update DRI for Hiring process (#12087)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.

---------

Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
2023-06-20 15:13:57 -05:00
Joanne StablefordandMike McNeil 8f37db9a43 BizOps Handbook changes (#12085)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.
asgdagsda
- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
....
....

---------

Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
2023-06-20 15:55:48 -04:00
Martin Angers 1c249b60da Add support to configure and enable Windows MDM, notify elegible hosts (#12340) 2023-06-20 14:06:45 -04:00
Eric 1764ad0909 Handbook: Fix broken links in marketing handbook (#12400)
Changes:
- Updated three broken links in the marketing handbook.
2023-06-20 12:10:11 -05:00
Mo Zhu b5e82da81b Clarify that PMs should bring items back to FF if desired. (#12407) 2023-06-20 09:54:12 -07:00
Robert Fairburn 7fcabff060 Add sandbox cleanup failed executions script (#12404)
Just in case we ever need this again.
2023-06-20 11:21:02 -05:00
Eric dacabef2fd Docs: Fix broken link in MDM setup documentation (#12399)
Changes:
- `(business.apple.com)[https://business.apple.com]` »
`[business.apple.com](https://business.apple.com)`
2023-06-20 11:16:21 -05:00
Robert Fairburn e3aaa7b4d0 Release v4.33.0 to sandbox (#12390) 2023-06-20 10:28:32 -05:00
RachelElysia 2c45d25ad3 Fleet UI: Empty software SVG update (effort to fix broken image in Sandbox) (#12378) 2023-06-19 15:41:04 -04:00
Martin Angers 96aec85a0a Add mechanism to force read from primary DB, use it for puppet matching (#12396) 2023-06-19 13:55:15 -04:00
RachelElysia 2efb48ee0c Fleet UI: Clean up dashboard loading state (#12395) 2023-06-19 12:08:33 -04:00
RachelElysia 39a60e037e Fleet UI: Variable Fleet URL for ChromeOS extension (#12393) 2023-06-19 11:28:11 -04:00
Eric e9fd28717d Website: Throw error in build script if a handbook page is missing a maintainedBy meta tag (#12364)
Closes: #12361
Changes:
- Added an error to the `build-static-content` script that is thrown if
a a handbook page is missing a `maintainedBy` meta tag.
- Added a `maintainedBy` meta tag to
`handbook/company/head-of-public-sector.md`
2023-06-16 15:09:17 -05:00
Eric 7942b9008b Website: Add MDM demo video modal to /device-management (#12380)
Changes:
- Added a modal to the /device-management page where users can fill out
a form to see an MDM demo video.
- Added a new email template: `email-mdm-video`, that is sent to users
who submit the form on the device management page.
- Added a new action: `deliver-mdm-demo-email.js`, that sends an MDM
demo video email.
- Updated the modal component to allow the default styling to be
overridden on a page-by-page basis (Moved inline styles into the
component's stylesheet)
- Updated `website/config/routes.js`, `website/config/policies.js`, and
ran the `rebuild-cloud-sdk` script.
2023-06-16 15:08:24 -05:00
ad7c1909a5 Website: Add max height to mermaid diagrams (#12374)
Closes: #12362
Changes:
- Added a max-height (~`800px`~ `600px`) for rendered mermaid diagrams
on fleetdm.com. (Edited by Mike T)

---------

Co-authored-by: Mike Thomas <mthomas@fleetdm.com>
Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
2023-06-16 13:28:34 -05:00
Eric 0d54d242ff Website: Update regex used to change markdown links (#12325)
Closes: #12315
Changes:
- Updated the regex that is used to change Markdown links to fleetdm.com
into web root-relative links to support fleetdm.com links that start
with `www.`
2023-06-16 13:27:59 -05:00
da71da3e63 CIS Windows documentation (#12307)
Co-authored-by: Mo Zhu <mo@fleetdm.com>
Co-authored-by: Rachael Shaw <r@rachael.wtf>
2023-06-16 13:14:23 -04:00
Roberto Dip 6d789d6e19 improve logging and error reporting in the puppet module (#12369)
For #12355
2023-06-16 12:40:50 -03:00
RachelElysia eefd81233f Fleet UI: Hiding tables and columns from the UI if they are set to hidden (#12298) 2023-06-16 11:38:52 -04:00
Lucas Manuel Rodriguez bac309c978 Provide feedback to user in fleetctl login when using env vars (#12371)
Issue reported by @jarodreyes.

The user was not informed that `fleetctl login` was using the PASSWORD
environment variable:

`main`:
```sh
export PASSWORD=wrong

fleetctl login
Log in using the standard Fleet credentials.
Email: a@b.c
Error: Login failed: login received status 401 Authentication failed: Authentication failed
```
And with the changes on this PR:
```
export PASSWORD=wrong

fleetctl login
Log in using the standard Fleet credentials.
Email: a@b.c
Using value of environment variable $PASSWORD as password.
Error: Login failed: login received status 401 Authentication failed: Authentication failed
```
2023-06-16 11:42:04 -03:00
Eric d676118307 Website: Upgrade highlight.js dependency to improve syntax highlighting on documentation pages (#12370)
Closes: #12214

Changes:
- Upgraded the version of highlight.js we're using from `v9.10.0` to
`v10.7.3` to add support for YAML syntax highlighting.
- Updated highlight.js usage (`hljs.highlightBlock()`»
`hljs.highlightElement()`)
2023-06-16 17:07:06 +09:00
Rachael Shaw 74af345f74 Docs: fix heading indentation (#12373)
Added a newline to fix "List all sofware" heading indentation on the
website:
<img width="816" alt="Screenshot 2023-06-15 at 4 22 36 PM"
src="https://github.com/fleetdm/fleet/assets/3065949/4a0cc555-18c5-470b-8879-c535988b3243">
2023-06-15 19:03:30 -05:00
d6f57a8e23 Added a Rapid7 landing page for campaign. (#12353)
Created Rapid7 landing page in `/imagine`

From Mike T:

Sorry for the bombardment of commits. 

Here's a breakdown of those
commits and changes:
 

- I increased the max-width of the hero text area for M-size breakpoints
and above to suit the content better.


- During my review, I noticed that the local-preview-generated changes
to `.sailsrc` had been pushed, but in my attempt to fix I deleted the
file rather than the diff.


- Attempted to revert back to my previous commit, but this was my first
attempt at removing a commit, so I wasn’t sure if it was successful.


- In the end, I re-pushed `.sailsrc` from `main`. - 

Crisis averted in
a very roundabout way 🙏🏻

# Checklist for submitter

- [x] Manual QA by Mike T

---------

Co-authored-by: Mike Thomas <mthomas@fleetdm.com>
Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
Co-authored-by: Eric <eashaw@sailsjs.com>
2023-06-16 06:57:26 +09:00
Eric 19796b5c86 Website: update template used in landing page generator (#12372)
Changes:
- Updated the bottom heading on pages generated by the landing page
generator to match our current landing page layout ("Think for yourself"
» "Lighter than air")
2023-06-15 16:42:50 -05:00
Eric 25144881f0 Website: Fix overlapping edit button on documentation pages (#12363)
Closes: #12354
Changes:
- Added right margin to the first h1 in documentation pages to prevent
headings from overflowing onto the edit page button.
- Added a minimum height to the subtopics of documentation pages on
mobile screens to prevent the edit page button from being positioned
over the page's content.
2023-06-15 16:41:19 -05:00
Juan Fernandez 55d56ba2db If the fleet/forgot_password endpoint is rate limited, it should return the proper status code (#12323)
Return proper HTTP status code if endpoint is rate limited.
2023-06-15 15:41:04 -04:00
Juan Fernandez 7226b7f087 Warnings in fleetctl should use Stderr not Stdout (#12316)
Fixed issue were the expired license banner was being sent to Stdout instead of Stderr
2023-06-15 13:13:41 -04:00
Juan Fernandez e7ded8d0c8 When authorizing users on the PolicySpec endpoint, return proper status code if team not found (#12335)
Return proper status code on policy spec endpoint if team not found.
2023-06-15 12:46:54 -04:00
gillespi314 87fe00db71 Create new Fleet osquery extension table to read escrowed FileVault key (#12198) 2023-06-15 10:23:59 -05:00