Commit Graph
14073 Commits
Author SHA1 Message Date
Sam Pfluger 6cbc98cb55 Update open-positions.yml (#23191) 2024-10-24 16:42:19 -05:00
Eric c38e53d1c6 Website: Add organization to questionnaire responses (#23167)
Closes: https://github.com/fleetdm/confidential/issues/8238

Changes:
- Updated save-questionnaire-progress to prepend a
"org-acording-to-fleetdm.com" response to the questionnaire answers
reported to the CRM
2024-10-24 16:41:43 -05:00
Eric 9d69f01c2b Website: Add website visit reason to page view records. (#23154)
Closes: #23107

Changes:
- Updated the custom hook to send `adAttributionString` to Fleet website
page view records if that value was set in a logged-in user's session
<30m before they visit a page.
2024-10-24 16:39:32 -05:00
Noah Talerman dd8986d467 Update Product design rituals (#23205)
- We no longer commit to 6 weeks:
https://github.com/fleetdm/fleet/pull/22706
- Description for confirm and celebrate is outdated
2024-10-24 17:30:00 -04:00
Lucas Manuel Rodriguez 3f89b48ca5 Add iPadOS to minimum versions in FAQ docs (#23197)
Follow up to https://github.com/fleetdm/fleet/pull/23104.
2024-10-24 15:02:11 -05:00
Sam Pfluger 3bc44fc8b3 Fix reviewer issue (#23193) 2024-10-24 14:54:57 -05:00
Noah Talerman 7d4d87d981 Feature request issue template: remove ~feature fest label (#23185)
https://github.com/fleetdm/fleet/pull/23184/files#diff-c99d12c3af50c0c2aca2b9ef7597c02ccfe87678291956ff0b2e83d63978ea38R368
2024-10-24 13:45:42 -04:00
Ian Littman 4e38e8e5c5 s/urf-8/utf-8 on manual config profile download (#23169)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
2024-10-24 09:54:24 -07:00
Dante Catalfamo caf5a27462 Catch signals for graceful fleet desktop exit (#23054) 2024-10-24 12:09:55 -04:00
Sam Pfluger 8e631bb5f8 Fix call out box (#23177) 2024-10-24 09:31:33 -05:00
Ian Littman c948266ee0 Fix manual MDM profile download (#23171)
#23162

By default, Axios treats responses as if they're JSON, and the content
type delivered for mobileconfig files doesn't make Axios switch back to
providing the download as a blob. Explicitly telling Axios to give us a
blob back fixes the issue where profiles were 50% larger than they
should have been...and unparseable.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Manual QA for all new/changed functionality
2024-10-24 09:09:52 -05:00
Noah Talerman dbc9653b30 Update "Enroll hosts" guide (#23151)
Remove note b/c these are the defaults for macOS and Linux:
https://github.com/fleetdm/fleet/pull/23120#discussion_r1813194204
2024-10-23 18:00:34 -05:00
Harrison RavazzoloandRachael Shaw 3eb3d85ac8 Add a line to docu 'turn off mdm' is only available on macOS' (#23155)
Add line indicating 'turn off mdm' is only available on macOS

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
2024-10-23 17:53:37 -05:00
jacobshandlingandJacob Shandling de7c792945 Restore intended flash messages (#23152)
Addresses #23139 and #23141

- Remove a premature `return` that prevented subsequent `renderFlash`
from firing
- Fix order of `push` and subsequent `renderFlash` for correct behavior
- Check codebase for additional instances of problematic `push` calls
_after_ associated `renderFlash` calls via regex
`\renderFlash\([\s\S\n]{0,400}router\.push/`
- Misc cleanup


![ezgif-6-c49d5d0432](https://github.com/user-attachments/assets/40a96439-7647-45ec-8847-5b0c85b448aa)


- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-10-23 14:09:14 -07:00
Lucas Manuel Rodriguez fe9ccd23c6 dogfood: Non-canary workstations and servers to stick to stable channels (#23123)
With this change:
- Canary teams explicitly use `edge` channels.
- Non canary teams explicitly use `stable` channels.
2024-10-23 17:31:37 -03:00
Sam Pfluger 32890b70f1 Fix link (#23153) 2024-10-23 15:23:03 -05:00
Sam PflugerandEric 95221e5abd Measure #handbook PR open time (#23124)
Co-authored-by: Eric <eashaw@sailsjs.com>
2024-10-23 13:12:21 -05:00
Brock Walters 64ce873e86 Update windows-mdm-setup.md (#23127)
Updated Azure strings to Entra ID.
2024-10-23 13:07:32 -05:00
Noah TalermanandRachael Shaw 0c4fb36e2d Update seamless-mdm-migration.md (#23143)
During the CS+QA offsite we review this guide.

- Update title to clarify that this is about macOS MDM migration
- Add "domain (DNS)" to make the topic approachable for non-technical
readers

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
2024-10-23 12:42:01 -05:00
Gabriel Hernandez c71237daa2 add error message for host having mdm off to host details (#23080)
relates to #22041

This adds an error message when refetching a host when mdm is not turned
on for it. This was accidentally added to the My Device page, so we are
moving it to the Host details page.
2024-10-23 18:15:53 +01:00
Sam PflugerandEric 010f80d594 Add Scott MacVicar (#23111)
<img width="330" alt="image"
src="https://github.com/user-attachments/assets/454df86f-bea8-4392-a50e-df84a68703f6">

@eashaw, can I get your help with this part?  
- [ ] Then make Scott's one of the default quotes on the
device-management page, and on the contact form and wherever else eric
shaw thinks it belongs.

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-10-23 12:06:03 -05:00
aysiu b5c0e61f7d Enable launch daemon before trying to bootstrap it (#22764)
## Description
Moves the enabling of the launch daemon to before trying to launch it,
so it doesn't fail if the launch daemon is disabled

## Testing Done
launch daemon is enabled
```
 launchctl print system | grep fleetdm
		   78074      - 	com.fleetdm.orbit
		"com.fleetdm.orbit" => enabled
```
uninstalling FleetDM via
https://github.com/fleetdm/fleet/blob/main/orbit/tools/cleanup/cleanup_macos.sh
```
sudo ~/Desktop/removefleet.sh 
Removing fleet, system will be unenrolled in 15 seconds...
Executing detached child process
```
launch daemon is still enabled:
```
launchctl print system | grep fleetdm   
		   78074      - 	com.fleetdm.orbit
		"com.fleetdm.orbit" => enabled
```
If I manually disable the launch daemon...
```
sudo launchctl disable system/com.fleetdm.orbit
```
```
launchctl print system | grep fleetdm          
		       0     78 	com.fleetdm.orbit
		"com.fleetdm.orbit" => disabled
```
... then the install will fail:
```
sudo installer -pkg ~/Desktop/fleet-osquery-1.18.3.pkg -target /
installer: Package name is Fleet osquery
installer: Installing at base path /
installer: The install failed. (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance. An error occurred while running scripts from the package “fleet-osquery-1.18.3.pkg”.)
```
Excerpt from `/var/log/install.log`:
```
2024-10-08 15:00:57-07 HOSTNAME package_script_service[80350]: ./postinstall: Retrying launchctl bootstrap...
2024-10-08 15:00:57-07 HOSTNAME package_script_service[80350]: ./postinstall: Bootstrap failed: 5: Input/output error
2024-10-08 15:00:58-07 HOSTNAME package_script_service[80350]: ./postinstall: Retrying launchctl bootstrap...
2024-10-08 15:00:58-07 HOSTNAME package_script_service[80350]: ./postinstall: Bootstrap failed: 5: Input/output error
2024-10-08 15:00:59-07 HOSTNAME package_script_service[80350]: ./postinstall: Retrying launchctl bootstrap...
2024-10-08 15:00:59-07 HOSTNAME package_script_service[80350]: ./postinstall: Bootstrap failed: 5: Input/output error
2024-10-08 15:01:00-07 HOSTNAME package_script_service[80350]: ./postinstall: Retrying launchctl bootstrap...
2024-10-08 15:01:00-07 HOSTNAME package_script_service[80350]: ./postinstall: Bootstrap failed: 5: Input/output error
2024-10-08 15:01:01-07 HOSTNAME package_script_service[80350]: ./postinstall: Retrying launchctl bootstrap...
2024-10-08 15:01:01-07 HOSTNAME package_script_service[80350]: ./postinstall: Bootstrap failed: 5: Input/output error
2024-10-08 15:01:02-07 HOSTNAME package_script_service[80350]: ./postinstall: Retrying launchctl bootstrap...
2024-10-08 15:01:02-07 HOSTNAME package_script_service[80350]: ./postinstall: Bootstrap failed: 5: Input/output error
2024-10-08 15:01:03-07 HOSTNAME package_script_service[80350]: ./postinstall: Retrying launchctl bootstrap...
2024-10-08 15:01:03-07 HOSTNAME package_script_service[80350]: ./postinstall: Bootstrap failed: 5: Input/output error
2024-10-08 15:01:04-07 HOSTNAME package_script_service[80350]: ./postinstall: Failed to bootstrap system /Library/LaunchDaemons/com.fleetdm.orbit.plist
```
If I then enable the launch daemon...
```
sudo launchctl enable system/com.fleetdm.orbit  
```
```
launchctl print system | grep fleetdm                           
		"com.fleetdm.orbit" => enabled
```
... then the postinstall in the pkg works fine:
```
sudo installer -pkg ~/Desktop/fleet-osquery-1.18.3.pkg -target /
installer: Package name is Fleet osquery
installer: Installing at base path /
installer: The install was successful.
```
So, yeah, the enabling has to be before the launching of the launch
daemon.
2024-10-23 13:54:41 -03:00
Mike McNeilandEric 4d6a81c564 Update testimonials.yml (#22483)
Co-authored-by: Eric <eashaw@sailsjs.com>
2024-10-23 10:54:31 -05:00
Rachael Shaw 8fa5aafa9d Update configuration docs (#22990)
Move `license.enforce_host_limit` to contributor docs
2024-10-23 10:50:08 -05:00
Lucas Manuel Rodriguez c1835c6a01 Document umask requirement for fleetctl package (#23120)
Documentation for #22877.
2024-10-23 10:49:43 -05:00
Brock Walters b12f8695a2 Update windows-mdm-setup.md (#23122)
Changed instances of Azure AD to Microsoft Entra ID. Did not change URLs
because they still seem to work to connect to the service. @noahtalerman
has already verbally ok'd this change.
2024-10-23 10:49:01 -05:00
dependabot[bot] 30b3a1ea37 Bump grunt from 1.0.4 to 1.5.3 in /ee/bulk-operations-dashboard (#21510) 2024-10-23 10:19:45 -05:00
Neil Blazevic 58ce48dea8 Update Render deploy pricing (#23113) 2024-10-23 10:07:20 -05:00
Ian Littman 921d8c8afd Check for TUF expirations 2x daily, and warn 4 days in advance rather than 2 (#23039) 2024-10-23 10:06:03 -05:00
Lucas Manuel Rodriguez 3e29f16f53 dogfood: Restore VPP token association to teams (#23114)
To fix
https://github.com/fleetdm/fleet/actions/runs/11468989615/job/31915263035#step:7:174

```
Error: applying app store apps for team: "🔳🏢 Company-owned iPads": POST /api/latest/fleet/software/app_store_apps/batch received status 422 Unprocessable Entity: could not retrieve vpp token: No available VPP Token
```

https://github.com/fleetdm/fleet/pull/22326 fixed so that GitOps removes
associations if they are not set (GitOps mode of operation where stuff
that's not set is removed), thus we now need to define it.
2024-10-23 11:15:56 -03:00
RachelElysia c7b4127e33 Fleet UI: Tabbing through hdp tabs and global view all host links fixed (#23101) 2024-10-23 09:24:42 -04:00
Sam Pfluger 3e39be0604 Add "Change a contact's organization in Salesforce" (#23112) 2024-10-23 02:08:04 -05:00
Drew BakerandSam Pfluger 59692fd4da Drew p drawers events (#23055)
Updating DRI for events

---------

Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2024-10-23 01:43:36 -05:00
Sam Pfluger 4f485cc07c Change DRI for security policies (#23110) 2024-10-22 20:25:47 -05:00
Eric 5309f8fe53 Website: add swag request CTA to /better (#23108)
Closes: https://github.com/fleetdm/confidential/issues/8439

Changes:
- Added a swag request CTA to the /better page that is visible to users
visiting the website from the contiguous US.
2024-10-22 18:25:34 -05:00
Eric 46e0549ed8 Website: add CTA back to device-management page (#23105)
Closes: #23028

Changes:
- Added a CTA to the Hero section of the device management page
2024-10-22 18:18:46 -05:00
Rebecca Cowart d9fabdb698 Update macos-mdm-setup.md (#23081)
Added step on line 15 concerning pressing a "Turn on" button (two
different "Turn on" buttons are on screen)
2024-10-22 17:58:00 -05:00
Ian Littman 98f2d15c59 Provide better error messages on 404s for install or uninstall results (#23106)
#22965

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
2024-10-22 17:51:11 -05:00
Rebecca Cowart 111426d62f Update mdm-migration.md (#23090)
Updates for clarity
2024-10-22 17:46:37 -05:00
Rebecca Cowart 101c2adfe7 Update deploy-software-packages.md (#23097)
Adjusted prerequisites, moved sections, etc.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] If paths of existing endpoints are modified without backwards
compatibility, checked the frontend/CLI for any necessary changes
- [ ] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
- [ ] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [ ] Orbit runs on macOS, Linux and Windows. Check if the orbit
feature/bugfix should only apply to one platform (`runtime.GOOS`).
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-10-22 17:44:39 -05:00
Jahziel Villasana-Espinoza d25e6cd067 fix: add ios minimum version to os list (#23104)
> No issue, just a fix from a customer convo today

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->
2024-10-22 17:22:34 -05:00
Rebecca Cowart a2c9e378f2 Update install-fleet-maintained-apps-on-macos-hosts.md (#23098)
Updates to last paragraph
2024-10-22 16:16:13 -05:00
Rebecca Cowart c1d12529b9 Update automatic-software-install-in-fleet.md (#23099)
Change “Press the top right “Add policy” button.” to “Press the “Add
policy” button”

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] If paths of existing endpoints are modified without backwards
compatibility, checked the frontend/CLI for any necessary changes
- [ ] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
- [ ] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [ ] Orbit runs on macOS, Linux and Windows. Check if the orbit
feature/bugfix should only apply to one platform (`runtime.GOOS`).
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-10-22 16:14:31 -05:00
Noah Talerman 6692ec9cfe Update policy-automation-run-script.md (#23100)
Walked through this guide during CS+QA setup and came up w/ some tweaks:
- Consistent language
- Less language
2024-10-22 16:13:59 -05:00
Marko Lisica 3c3e6d6d1a Add callout that software-related features are experimental (#23089) 2024-10-22 15:43:56 -05:00
Lucas Manuel Rodriguez 103727b5f4 Use ubuntu 22.04 for trivy ci scheduled check (#23088)
Fixing these failures:
https://github.com/fleetdm/fleet/actions/runs/11454239765/job/31881900492

Following this advice
https://github.com/orgs/community/discussions/139074#discussioncomment-10935090.
It seems it works.
2024-10-22 15:41:32 -05:00
Rebecca Cowart 4142ba7723 Update AddAbmModal.tsx (#23083) 2024-10-22 15:40:34 -05:00
Jahziel Villasana-Espinoza 4ee4243f9f feat: add pattern for transaction functions (#23087)
> No issue, just a doc update

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Manual QA for all new/changed functionality
2024-10-22 14:46:59 -04:00
Benjamin Edwards 6781d154fb only render the policy document if we are creating the bucket (#23085) 2024-10-22 14:06:02 -04:00
jacobshandlingandJacob Shandling d3ccb51755 UI - Improve UX of Flash messages (#22836)
## #22661 


![ezgif-6-71e48912ae](https://github.com/user-attachments/assets/01144620-0eba-48f0-9254-cc4795fde9fd)

- Update `FlashMessage` behavior to, by default, hide itself when the
user performs any URL-changing navigation
- Add `persistOnPageChange` option to `renderFlash` API and associated
notification context and reducer logic, allowing override of this
behavior on a per-call basis
- Ensure proper order of evaluation of URL changes and render flash
action dispatches on the event loop
- Clean up legacy unused "undo"-related arguments and logic
- Allow the user to click in the same horizontal dimension as a flash
message
- Other misc. cleanup and refactoring

[Demo - messages hidden on page (any URL)
change](https://www.loom.com/share/1e884b6ba11c4b59bc74f51df3690131?sid=9b53e78b-6535-4541-b676-377760366cf4)

- [x] Changes file added for user-visible changes in `changes/`,
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-10-22 10:52:20 -07:00