Commit Graph
1135 Commits
Author SHA1 Message Date
Roberto Dip 7cd581866a add API endpoint to see disk encryption key (#9713)
https://github.com/fleetdm/fleet/issues/8708
2023-02-08 20:20:23 -03:00
Jacob ShandlingandJacob Shandling 5c0f635966 clarify Teams > MDM settings docs (#9754)
Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2023-02-08 11:49:01 -08:00
Noah Talerman f4dd05d3ee Docs: Fix images on Mobile device management page (#9734)
- Update links so that images render correctly
2023-02-07 14:00:32 -08:00
Noah Talerman 9ae5941d8c Docs: MDM - pending hosts (#9728)
- Explain what MDM status "Pending" means
- Explain default team and how to update
2023-02-07 16:03:30 -05:00
Dave Herder 5174762e4b Update Testing-and-local-development.md (#9717)
Added some examples for referring to when generating APNs certs

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-02-07 13:53:23 -06:00
Noah Talerman b87c28726a Docs: Add instructions for MDM migration (#9708)
These docs address 5 out of 7 requirements in the "Docs for MDM
migration" issue here: #9009

Docs also add an "Instructions for end users" section to address docs
for "Manual enrollment" issue:
https://github.com/fleetdm/fleet/issues/7957#issuecomment-1416262879

- Add instructions for IT admins on how to switch MDM solutions for
hosts manually enrolled to the old MDM solution
- Add instructions for IT admins on how to switch MDM solutions for
hosts automatically enrolled (DEP) to the old MDM solution
- Add information for IT admins about how Fleet treats Activation Lock
Bypass codes
- Add instructions for end users on how to switch MDM solutions for
hosts manually and automatically enrolled to the old MDM solution (same
instructions)
2023-02-07 13:53:14 -06:00
Luke Heath b3daf3d715 Prepare for 4.27.0 (#9683) 2023-02-03 17:03:06 -08:00
RachelElysia f721e0daf5 Docs: Add disk encryption section to MDM page
- Add disk encryption section
- Update transparency section of website under here's what osquery can see on your device > file contents dropdown
2023-02-03 10:37:02 -05:00
Benjamin Edwards dbcb638809 update file carver block size and various MySQL references (#9625)
Update the default file carver block size to be compatible with MySQL 8
& S3.
Update surrounding docs.
Various other updates to references of MySQL versions (all terraform
deploys are now defaulted MySQL 8 in AWS)

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
2023-02-02 01:01:34 -05:00
Roberto Dip e06b00df11 Add readonly MDM.EnabledAndConfigured to app config and device responses (#9575)
Related to #9571, this adds a new value to both responses which is
calculated when the Fleet server is started, and only set to `true` if
the server is properly configured for MDM.

This helps the UI to determine wether or not we should show certain UI
elements that we only want to show to servers with MDM enabled.
2023-02-01 14:47:52 -03:00
Martin Angers f47b7f538f Mention that the min macos version activity is created when deadline is modified too (#9608)
Tiny follow-up to https://github.com/fleetdm/fleet/pull/9594
2023-02-01 09:10:29 -05:00
Martin Angers c805ea2154 Record activity when the macos minimum version requirement is edited (#9594) 2023-01-31 16:36:18 -06:00
Katheryn Satterlee ee0d93a80f Add best practice for updating team config (#9580)
Documentation only changes.
2023-01-31 13:47:10 -05:00
Martin Angers 8a137e2b5b Move host details mdm properties to new mdm object (#9505) 2023-01-30 16:40:11 -06:00
Lucas Manuel Rodriguez 8163b7d8da Update live query selector logic (OR -> AND) (#9559)
See requirements in #8682.

Two assumptions on the implementation (@zayhanlon please take a look):
- Hosts explicitly selected to run always run the live query (no matter
the values on the selectors).
- When selecting `All hosts`, selecting any other platform or label is
kind of a no-op. We should look into graying out all the selectors if
the user selects `All hosts`.

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [X] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- ~[ ] Documented any permissions changes~
- [X] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- ~[ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.~
- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality
  - ~For Orbit and Fleet Desktop changes:~
- ~[ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.~
- ~[ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).~
2023-01-30 18:35:56 -03:00
Martin Angers c64cf8f753 Document generating SCEP via fleetctl (#9503) 2023-01-30 10:46:58 -05:00
Juan Fernandez e376d53294 Bug 9386: Docs chrome extension has the wrong CPE. (#9524)
Related to #9386 - this should fix one of the three reported problems.

* Add the ability to add exclusion rules to cpe_translations.
* Added exclusion rule for Docs chrome extension.
2023-01-27 15:11:20 -04:00
Roberto Dip 0c9a79b248 Adjust Nudge configuration to match the specification (#9519)
Related to #9013 this adjusts the Nudge configuration to match the spec.
2023-01-26 19:52:03 -03:00
Martin Angers d0e6891d10 Add endpoint to trigger CSR request for APNs on fleetdm.com (#9494) 2023-01-25 14:44:29 -05:00
Katheryn Satterlee 0c1ec16dc4 Include information on flags for fleetctl apply (#9493)
Added details on using flags to change behavior when applying team and
config specs using fleetctl
2023-01-25 10:43:46 -06:00
Marcos Oviedo 980fbcc003 Adding more notes to overrides behavior in agent settings (#9482)
Adding notes on the agent_options.overrides behavior
2023-01-25 09:57:56 -03:00
Katheryn Satterlee 237a97d07a Update osquery interval warning (#9485)
Docs only change
2023-01-24 16:27:10 -06:00
Katheryn Satterlee 891bd97e1d Add note to osquery update intervals (#9484)
Added a note about potential performance degradation when update
intervals are lowered.
2023-01-24 16:21:09 -06:00
Martin Angers 84717de461 Document APNs and ABM setup and renewal (#9471) 2023-01-24 15:20:41 -05:00
Luke Heath 6d34bb8a97 Add note to docs indicating Fleet MDM specific endpoints. (#9473) 2023-01-24 10:57:22 -06:00
Roberto Dip 2d25a3f48d add mdm root key and macos_updates to app and team configs (#9442)
Related to https://github.com/fleetdm/fleet/issues/9345,
https://github.com/fleetdm/fleet/issues/9358 and
https://github.com/fleetdm/fleet/issues/9346 this adds:

1. The ability to configure `mdm.macos_updates` via `PATCH /config` and
`PATCH /teams/{id}`
3. The ability to configure `mdm.macos_updates` by using `fleetctl apply
-f` for teams and global config.
2023-01-24 13:20:02 -03:00
gillespi314 1b4e8e692a Add API endpoint to unenroll a host from Fleet's MDM (#9447) 2023-01-23 17:05:24 -06:00
5947bd74f4 FAQ.md:Add new entry related to default UI sorting (#9004)
Add question regarding the use of an ORDER BY clause to explain why that
sort may not match what the UI shows as results are received from hosts.

# Checklist for submitter: n/a

Co-authored-by: Chris McGillicuddy <108031970+chris-mcgillicuddy@users.noreply.github.com>
Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
2023-01-23 15:12:12 -06:00
Katheryn Satterlee 39db759c8a 8887 remove packs from docs (#9453)
Docs only chznge
2023-01-20 16:55:48 -06:00
Katheryn Satterlee 96ea1d6aae Remove packs from docs (#9452)
Documentation only change, updating docs to reflect #8887
2023-01-20 16:47:24 -06:00
Lucas Manuel Rodriguez 328004d679 Log failed login attempts as activities (#9430)
#9119

To test the SSO changes locally you can use:

https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Testing-and-local-development.md#testing-sso

@RachelElysia Please take a look at the UI changes (All I did was
copy/paste and amend the changes for the new activity type.)

IMO we shouldn't display an avatar because there's no "actual user"
involved in these failed login attempts activities (by "actual user" I
mean the user attributed to the activity):

<img width="446" alt="Screenshot 2023-01-19 at 10 41 05"
src="https://user-images.githubusercontent.com/2073526/213524771-b85901ce-eec0-4cf3-919c-73162285e20b.png">

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [X] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- ~[ ] Documented any permissions changes~
- ~[ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)~
- ~[ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.~
- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality
  - ~For Orbit and Fleet Desktop changes:~
- ~[ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.~
- ~[ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).~
2023-01-20 12:43:22 -03:00
Noah Talerman f11a905a09 Docs: MVP for MDM page (#9417)
- Add new "Mobile device management (MDM)" page to "Using Fleet" section
- Adds docs for OS updates
2023-01-19 17:50:06 -05:00
Lucas Manuel Rodriguez 1cdfe2d351 Add summary of hardcoded detail queries (#9425)
Adds a process to generate a summary of the hardcoded Fleet queries.
2023-01-19 17:44:03 -03:00
Noah Talerman d513763445 Docs: Update MDM settings and configuration (#9416)
- Add callout that MDM features are currently under development
- Rename sections
2023-01-19 13:34:18 -05:00
Sharon Katz 6e35c7c6ae Run-Locally-Built-Orbit (#9359)
Adding documentation.
No testing needed other than reviewing the correctness of the added
documentation.
2023-01-19 10:31:24 -06:00
Lucas Manuel Rodriguez 49fccdb7b0 Fix broken links in Adding-hosts.md and Orbit.md (#9230)
Hi folks!

I wanted to share some docs to a user and I got a 404:
The "cleanup script" link on
https://fleetdm.com/docs/using-fleet/orbit#mac-os click returns a 404.

- I used the "Markdown All in One" VS code extension to re-generate (and
fix) the indexes in those files.
- I used https://github.com/tcort/markdown-link-check to check for
broken links:
```
markdown-link-check Orbit.md
markdown-link-check Adding-hosts.md
```
2023-01-18 10:04:44 -06:00
Gabriel Hernandez 7d4653baaa add attribute to GET /activities endpoint with pagination metadata (#9279)
relates to https://github.com/fleetdm/fleet/issues/8928

This adds a new `meta` attribute to the "GET /activities" endpoint that
includes pagination metadata. This can allow clients to know if there
are additional items to request.


- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2023-01-18 12:57:11 +00:00
Artemis Tosini caa6b05c92 docs: Remove deprecated vulnerability_settings options (#9281)
Fixes #8697
2023-01-17 15:28:36 -08:00
gillespi314 fba3607c4a Add mdm status and server url to host endpoint responses (#9320) 2023-01-16 17:08:24 -06:00
Martin Angers e360013dc3 Implement API endpoint for MDM manual enrollment profile download (#9232) 2023-01-16 10:22:12 -05:00
Luke Heath b6a6ac454f Prepare for 4.26.0 (#9326) 2023-01-13 16:26:22 -08:00
Gabriel Hernandez 86275d0bac update mdm local dev docs (#9315)
update mdm local dev docs.
2023-01-13 17:37:07 +00:00
Katheryn Satterlee d12c9bb5a2 Update FAQ.md (#9303)
Added entry for package generation on M1 Macs

# Checklist for submitter

Documentation only change
2023-01-12 14:15:51 -06:00
EricandMike McNeil 09b88d0341 Website: Add "Requires MDM" badge to /queries page (#9296)
Changes:
- Added a "MDM required" tag to the queries in the standard query
library that use the `managed_policies` table.
- Updated the build script to add a `requiresMdm` value to queries added
to `builtStaticContent.queries`, and to set it to true if a query has
the "MDM required" tags
- Updated the `/queries` page to add a "Requires MDM" badge to queries
that have `requiresMdm: true`
 . . .

Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
2023-01-12 10:05:03 -06:00
Roberto Dip 90350f8257 add docs for MDM local development (#9193) 2023-01-11 11:05:35 -03:00
Tomas ToucedaandLucas Rodriguez 65783d49c7 Add feature to change or disable Fleet's hardcoded detail queries (#9117)
#8984

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Added/updated tests

Co-authored-by: Lucas Rodriguez <lucas@fleetdm.com>
2023-01-09 08:56:10 -03:00
Tomas ToucedaandLucas Rodriguez 398bb38da7 Add software_updated_at field to host (#9116)
#9012

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [x] Added/updated tests

Co-authored-by: Lucas Rodriguez <lucas@fleetdm.com>
2023-01-09 08:55:43 -03:00
Luke Heath abb5a332c5 UI hackathon: transitions, tooltips, empty states, buttons, bookmarks (#9195) 2023-01-06 17:08:48 -06:00
656e5bfc70 Flag when the Apple BM terms have expired (#9091)
#8862 

Co-authored-by: Roberto Dip <dip.jesusr@gmail.com>
Co-authored-by: gillespi314 <73313222+gillespi314@users.noreply.github.com>
2023-01-06 17:44:20 -03:00
gillespi314 f9f1a94b48 Update mdm enrollment status API response (#9189) 2023-01-05 15:52:46 -06:00