Commit Graph
266 Commits
Author SHA1 Message Date
gillespi314 345a1f4c36 Update docs with permissions for MDM configuration profiles (#9906) 2023-02-17 13:26:39 -06:00
Benjamin Edwards 0db432f7e3 vuln processing distinct command (#9813)
closes https://github.com/fleetdm/fleet/issues/3723

Add new vuln processing command, configs, and documentation on how to utilize.
2023-02-17 10:00:57 -05:00
Noah Talerman 070f551070 MDM docs: Add supported macOS versions (#9887)
- Fleet supports MDM features on macOS 12+
2023-02-16 16:39:35 -05:00
Katheryn Satterlee 717f79f279 Update Fleet-desktop.md (#9891)
Add note for self-remediation
2023-02-16 15:23:54 -06:00
Lucas Manuel Rodriguez b757e447bc Fix private IP ingestion in network_interface_unix and network_interface_windows. (#9884)
#8924

This is reproduced in dogfood for `dogfood-centos-box` and
`dogfood-ubuntu-box` where their "Private IP" is also their "Public IP".
Given that these hosts have their "Primary IP" configured to be their
"Public IP" alongside their "Private IP", the `network_interface_unix`
and `network_interface_windows` queries are now changed to ingest only
private IPs for the "Private IP" field.

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- ~[ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)~
- ~[ ] Documented any permissions changes~
- ~[ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)~
- ~[ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.~
- ~[ ] Added/updated tests~
- [X] Manual QA for all new/changed functionality
  - ~For Orbit and Fleet Desktop changes:~
- ~[ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.~
- ~[ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).~
2023-02-16 17:16:40 -03:00
Martin Angers 4a1f3988f0 Add "edited macos profiles" activity when applying custom settings via fleetctl (#9862)
#9587 and #9639
2023-02-16 13:53:26 -03:00
Katheryn Satterlee 112e5ec05a Add Packs entry to FAQ (#9825)
# Checklist for submitter

Documentation only change
2023-02-14 15:30:47 -06:00
gillespi314 8daead3ef5 Update route for hosts encryption key (#9821) 2023-02-14 12:17:31 -06:00
Noah Talerman 1c44d54454 MDM docs: Update migration instructions (#9820)
- For automatically enrolled hosts, add extra step to
first unassigned hosts from old MDM and then assign hosts to Fleet
2023-02-14 11:51:35 -05:00
RachelElysia 2c4c3a87ea Fleet Documentation: Update agent options and enrollment secret documentation (#9565) 2023-02-13 10:45:37 -05:00
Mo Zhu 3de7b0c3d4 Update macos nudge docs (#9801) 2023-02-10 16:31:22 -05:00
Roberto Dip 7cd581866a add API endpoint to see disk encryption key (#9713)
https://github.com/fleetdm/fleet/issues/8708
2023-02-08 20:20:23 -03:00
Jacob ShandlingandJacob Shandling 5c0f635966 clarify Teams > MDM settings docs (#9754)
Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2023-02-08 11:49:01 -08:00
Noah Talerman f4dd05d3ee Docs: Fix images on Mobile device management page (#9734)
- Update links so that images render correctly
2023-02-07 14:00:32 -08:00
Noah Talerman 9ae5941d8c Docs: MDM - pending hosts (#9728)
- Explain what MDM status "Pending" means
- Explain default team and how to update
2023-02-07 16:03:30 -05:00
Noah Talerman b87c28726a Docs: Add instructions for MDM migration (#9708)
These docs address 5 out of 7 requirements in the "Docs for MDM
migration" issue here: #9009

Docs also add an "Instructions for end users" section to address docs
for "Manual enrollment" issue:
https://github.com/fleetdm/fleet/issues/7957#issuecomment-1416262879

- Add instructions for IT admins on how to switch MDM solutions for
hosts manually enrolled to the old MDM solution
- Add instructions for IT admins on how to switch MDM solutions for
hosts automatically enrolled (DEP) to the old MDM solution
- Add information for IT admins about how Fleet treats Activation Lock
Bypass codes
- Add instructions for end users on how to switch MDM solutions for
hosts manually and automatically enrolled to the old MDM solution (same
instructions)
2023-02-07 13:53:14 -06:00
RachelElysia f721e0daf5 Docs: Add disk encryption section to MDM page
- Add disk encryption section
- Update transparency section of website under here's what osquery can see on your device > file contents dropdown
2023-02-03 10:37:02 -05:00
Benjamin Edwards dbcb638809 update file carver block size and various MySQL references (#9625)
Update the default file carver block size to be compatible with MySQL 8
& S3.
Update surrounding docs.
Various other updates to references of MySQL versions (all terraform
deploys are now defaulted MySQL 8 in AWS)

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
2023-02-02 01:01:34 -05:00
Roberto Dip e06b00df11 Add readonly MDM.EnabledAndConfigured to app config and device responses (#9575)
Related to #9571, this adds a new value to both responses which is
calculated when the Fleet server is started, and only set to `true` if
the server is properly configured for MDM.

This helps the UI to determine wether or not we should show certain UI
elements that we only want to show to servers with MDM enabled.
2023-02-01 14:47:52 -03:00
Martin Angers f47b7f538f Mention that the min macos version activity is created when deadline is modified too (#9608)
Tiny follow-up to https://github.com/fleetdm/fleet/pull/9594
2023-02-01 09:10:29 -05:00
Martin Angers c805ea2154 Record activity when the macos minimum version requirement is edited (#9594) 2023-01-31 16:36:18 -06:00
Katheryn Satterlee ee0d93a80f Add best practice for updating team config (#9580)
Documentation only changes.
2023-01-31 13:47:10 -05:00
Martin Angers 8a137e2b5b Move host details mdm properties to new mdm object (#9505) 2023-01-30 16:40:11 -06:00
Juan Fernandez e376d53294 Bug 9386: Docs chrome extension has the wrong CPE. (#9524)
Related to #9386 - this should fix one of the three reported problems.

* Add the ability to add exclusion rules to cpe_translations.
* Added exclusion rule for Docs chrome extension.
2023-01-27 15:11:20 -04:00
Roberto Dip 0c9a79b248 Adjust Nudge configuration to match the specification (#9519)
Related to #9013 this adjusts the Nudge configuration to match the spec.
2023-01-26 19:52:03 -03:00
Martin Angers d0e6891d10 Add endpoint to trigger CSR request for APNs on fleetdm.com (#9494) 2023-01-25 14:44:29 -05:00
Katheryn Satterlee 0c1ec16dc4 Include information on flags for fleetctl apply (#9493)
Added details on using flags to change behavior when applying team and
config specs using fleetctl
2023-01-25 10:43:46 -06:00
Marcos Oviedo 980fbcc003 Adding more notes to overrides behavior in agent settings (#9482)
Adding notes on the agent_options.overrides behavior
2023-01-25 09:57:56 -03:00
Martin Angers 84717de461 Document APNs and ABM setup and renewal (#9471) 2023-01-24 15:20:41 -05:00
Roberto Dip 2d25a3f48d add mdm root key and macos_updates to app and team configs (#9442)
Related to https://github.com/fleetdm/fleet/issues/9345,
https://github.com/fleetdm/fleet/issues/9358 and
https://github.com/fleetdm/fleet/issues/9346 this adds:

1. The ability to configure `mdm.macos_updates` via `PATCH /config` and
`PATCH /teams/{id}`
3. The ability to configure `mdm.macos_updates` by using `fleetctl apply
-f` for teams and global config.
2023-01-24 13:20:02 -03:00
5947bd74f4 FAQ.md:Add new entry related to default UI sorting (#9004)
Add question regarding the use of an ORDER BY clause to explain why that
sort may not match what the UI shows as results are received from hosts.

# Checklist for submitter: n/a

Co-authored-by: Chris McGillicuddy <108031970+chris-mcgillicuddy@users.noreply.github.com>
Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
2023-01-23 15:12:12 -06:00
Katheryn Satterlee 39db759c8a 8887 remove packs from docs (#9453)
Docs only chznge
2023-01-20 16:55:48 -06:00
Katheryn Satterlee 96ea1d6aae Remove packs from docs (#9452)
Documentation only change, updating docs to reflect #8887
2023-01-20 16:47:24 -06:00
Lucas Manuel Rodriguez 328004d679 Log failed login attempts as activities (#9430)
#9119

To test the SSO changes locally you can use:

https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Testing-and-local-development.md#testing-sso

@RachelElysia Please take a look at the UI changes (All I did was
copy/paste and amend the changes for the new activity type.)

IMO we shouldn't display an avatar because there's no "actual user"
involved in these failed login attempts activities (by "actual user" I
mean the user attributed to the activity):

<img width="446" alt="Screenshot 2023-01-19 at 10 41 05"
src="https://user-images.githubusercontent.com/2073526/213524771-b85901ce-eec0-4cf3-919c-73162285e20b.png">

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [X] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- ~[ ] Documented any permissions changes~
- ~[ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)~
- ~[ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.~
- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality
  - ~For Orbit and Fleet Desktop changes:~
- ~[ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.~
- ~[ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).~
2023-01-20 12:43:22 -03:00
Noah Talerman f11a905a09 Docs: MVP for MDM page (#9417)
- Add new "Mobile device management (MDM)" page to "Using Fleet" section
- Adds docs for OS updates
2023-01-19 17:50:06 -05:00
Lucas Manuel Rodriguez 1cdfe2d351 Add summary of hardcoded detail queries (#9425)
Adds a process to generate a summary of the hardcoded Fleet queries.
2023-01-19 17:44:03 -03:00
Noah Talerman d513763445 Docs: Update MDM settings and configuration (#9416)
- Add callout that MDM features are currently under development
- Rename sections
2023-01-19 13:34:18 -05:00
Lucas Manuel Rodriguez 49fccdb7b0 Fix broken links in Adding-hosts.md and Orbit.md (#9230)
Hi folks!

I wanted to share some docs to a user and I got a 404:
The "cleanup script" link on
https://fleetdm.com/docs/using-fleet/orbit#mac-os click returns a 404.

- I used the "Markdown All in One" VS code extension to re-generate (and
fix) the indexes in those files.
- I used https://github.com/tcort/markdown-link-check to check for
broken links:
```
markdown-link-check Orbit.md
markdown-link-check Adding-hosts.md
```
2023-01-18 10:04:44 -06:00
Gabriel Hernandez 7d4653baaa add attribute to GET /activities endpoint with pagination metadata (#9279)
relates to https://github.com/fleetdm/fleet/issues/8928

This adds a new `meta` attribute to the "GET /activities" endpoint that
includes pagination metadata. This can allow clients to know if there
are additional items to request.


- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2023-01-18 12:57:11 +00:00
Artemis Tosini caa6b05c92 docs: Remove deprecated vulnerability_settings options (#9281)
Fixes #8697
2023-01-17 15:28:36 -08:00
gillespi314 fba3607c4a Add mdm status and server url to host endpoint responses (#9320) 2023-01-16 17:08:24 -06:00
Katheryn Satterlee d12c9bb5a2 Update FAQ.md (#9303)
Added entry for package generation on M1 Macs

# Checklist for submitter

Documentation only change
2023-01-12 14:15:51 -06:00
Tomas ToucedaandLucas Rodriguez 65783d49c7 Add feature to change or disable Fleet's hardcoded detail queries (#9117)
#8984

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Added/updated tests

Co-authored-by: Lucas Rodriguez <lucas@fleetdm.com>
2023-01-09 08:56:10 -03:00
Tomas ToucedaandLucas Rodriguez 398bb38da7 Add software_updated_at field to host (#9116)
#9012

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [x] Added/updated tests

Co-authored-by: Lucas Rodriguez <lucas@fleetdm.com>
2023-01-09 08:55:43 -03:00
Luke Heath abb5a332c5 UI hackathon: transitions, tooltips, empty states, buttons, bookmarks (#9195) 2023-01-06 17:08:48 -06:00
656e5bfc70 Flag when the Apple BM terms have expired (#9091)
#8862 

Co-authored-by: Roberto Dip <dip.jesusr@gmail.com>
Co-authored-by: gillespi314 <73313222+gillespi314@users.noreply.github.com>
2023-01-06 17:44:20 -03:00
gillespi314 f9f1a94b48 Update mdm enrollment status API response (#9189) 2023-01-05 15:52:46 -06:00
Gabriel Hernandez 71a2e8f517 merge in main 2023-01-05 17:48:46 +00:00
Lucas Manuel Rodriguez 08aafe821e Remove duplicate FAQ document (#9185)
* Remove duplicate FAQ document

* Remove entries that are already present in docs/Deploying/FAQ.md

* Fix index
2023-01-04 17:30:44 -03:00
RachelElysia 68aefc8e56 Fleet UI Hackathon: Empty states (#9094) 2023-01-04 14:16:34 -05:00