Commit Graph
15320 Commits
Author SHA1 Message Date
Ian Littman 86eddbbdb7 Add note on vulnerability software name matching to vulnerability processing docs (#25881)
Adding given current state and 2025-01-28 discussion on software
uniqueness and how it interacts with vulnerability processing.
2025-01-30 09:07:19 -05:00
Gabriel Hernandez 8bcdb82d55 update error message for same name profile (#25673)
For #17700

improve error message when a custom profile is edited or uploaded with
one that has the same name.

updates the error message for `POST /fleet/mdm/profiles` and in fleetctl
when using gitops


- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added/updated automated tests
- [x] Manual QA for all new/changed functionality
2025-01-30 11:17:36 +00:00
Allen Houchins e55c664b13 Update collect-operating-system-information.yml (#25879)
Removed unsupported `platform: Chrome`
2025-01-29 15:44:09 -08:00
Jahziel Villasana-Espinoza 91fe3e26a8 fix: remove temp dir if installer fails to download (#25392)
> For #25373

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added/updated automated tests
- [x] A detailed QA plan exists on the associated ticket (if it isn't
there, work with the product group's QA engineer to add it)
- [x] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [x] Orbit runs on macOS, Linux and Windows. Check if the orbit
feature/bugfix should only apply to one platform (`runtime.GOOS`).
- [x] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2025-01-29 18:36:47 -05:00
George Karr e0682ea869 Update CHANGELOG.md (#25854)
Correcting date
2025-01-29 16:50:21 -06:00
Jahziel Villasana-EspinozaandIan Littman 6235642d2f fix: add retry logic to saving installation results to avoid incorrectly reporting a failure (#25706)
> For #25210

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added/updated automated tests
- [x] A detailed QA plan exists on the associated ticket (if it isn't
there, work with the product group's QA engineer to add it)
- [x] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [x] Orbit runs on macOS, Linux and Windows. Check if the orbit
feature/bugfix should only apply to one platform (`runtime.GOOS`).
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).

---------

Co-authored-by: Ian Littman <iansltx@gmail.com>
2025-01-29 17:49:20 -05:00
Victor Lyuboslavsky 298ad67fb1 Fix flaky migration test due to time. (#25871) 2025-01-29 14:41:39 -06:00
RachelElysia c6a7868ce5 Fleet UI: New Dashboard host count cards (+ their responsiveness to 320px) (#25694) 2025-01-29 15:15:49 -05:00
Sharon Katz b07d8bee6b increase stats freq to 1H (#16865) 2025-01-29 15:08:44 -05:00
Allen Houchins 87f58e9e46 Update update-slack.yml (#25868)
Updated version string info
2025-01-29 12:00:51 -08:00
Allen Houchins 9740ff7d23 Query and policy fixes (#25864)
Added query to all teams to collect operating system information for
dashboarding.
Copied Slack update policy to from Workstations (canary) to Workstations
team.
2025-01-29 13:04:46 -06:00
Allen Houchins f85dc597c1 Cleaning up policies (#25850)
In support of this issue: fleetdm/confidential#8791
2025-01-29 12:46:41 -06:00
Harrison RavazzoloandAllen Houchins 4233937543 Add CSP to disable guest account, add to canary team (#25862)
Confirmed on my vm that this profile deploys successfully and that the
key in gpedit is updated to Disabled.

<img width="516" alt="csp-1"
src="https://github.com/user-attachments/assets/20c407f1-e696-4cc9-90c9-2ce3d896e751"
/>
<img width="353" alt="csp-2"
src="https://github.com/user-attachments/assets/53218049-595b-4b16-97d0-ac434d883c47"
/>

---------

Co-authored-by: Allen Houchins <allenhouchins@mac.com>
2025-01-29 11:27:42 -06:00
Scott Gress e247a3b871 Update policies page empty state (#25726)
for #23312 

# Checklist for submitter

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.

This PR updates the verbiage on the Policies page when no policies are
present for the selected team (or All Teams). It also does a little bit
of code cleanup. Existing test was updated and a new test added. I've
also added VSCode test runners to easily run Jest tests from the IDE.

The [original request](https://github.com/fleetdm/fleet/issues/23073)
mentioned removing the button from the page if All Teams is selected,
but I don't think we should do that -- you can add All Teams policies
with it.

## Screenshots

Empty state for "All teams" (admin):
<img width="658" alt="image"
src="https://github.com/user-attachments/assets/3db674ef-b83e-4a4f-9ba9-adaf0ff17d3d"
/>

Empty state for a team (admin):
<img width="699" alt="image"
src="https://github.com/user-attachments/assets/49b966ff-f335-43c6-b1ed-b6f11b167c68"
/>

Empty state for "All teams" (non-admin):
<img width="663" alt="image"
src="https://github.com/user-attachments/assets/b9685b40-3b42-43f0-a0ff-09602b9d532a"
/>

Empty state for a team (non-admin):
<img width="643" alt="image"
src="https://github.com/user-attachments/assets/034566d2-7c1b-42c8-8655-99447193d099"
/>
2025-01-29 11:12:28 -06:00
Tim Lee 289c426995 Confidentiality arrow (#25858)
Adding confidentiality arrow to docs
2025-01-29 11:00:04 -06:00
Victor Lyuboslavsky 5c0dfbf6d9 Fleetd can now download software installers from signed CDN URLs. (#25276)
For #24870 subtask

API changes doc: #25293

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [x] Added/updated automated tests
- [x] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [x] Orbit runs on macOS, Linux and Windows. Check if the orbit
feature/bugfix should only apply to one platform (`runtime.GOOS`).
- [x] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [x] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2025-01-29 10:24:44 -06:00
Mike McNeil 84d26e92ab Update transparency.ejs (#25857)
There are so many
2025-01-29 09:58:08 -06:00
George KarrandRobert Fairburn 9e5ecfb1bc Adding changes for Fleet v4.62.3 (#25768)
Co-authored-by: Robert Fairburn <8029478+rfairburn@users.noreply.github.com>
2025-01-29 07:49:45 -06:00
Gabriel Hernandez 1c5f13589f fix 500 page when filtering by vulnerabilities on host software (#25816)
For #25735

This is a fix for the 500 page appearing when filtering for vulnerable
software on the host details page.

Also adds some missing docs for vulnerable query param filter on `GET
hosts/:id/software` endpoint

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
2025-01-29 12:09:28 +00:00
github-actions[bot]andlucasmrod 356da61e4b Update versions of fleetd components in Fleet's TUF [automated] (#25848)
Automated change from [GitHub
action](https://github.com/fleetdm/fleet/actions/workflows/fleetd-tuf.yml).

Co-authored-by: lucasmrod <lucasmrod@users.noreply.github.com>
2025-01-29 08:16:16 -03:00
Allen Houchins 52d5632e37 Updates for webhooks (#25806)
To support these dogfooding changes: fleetdm/confidential#9198
2025-01-28 20:58:12 -06:00
Eric 2d5784e49d Website: Follow up changes from website code review. (#25844)
Changes:
- Updated the website's sitemap to include pages for app-library pages,
the correct URL for the software management page, and the meetups page.
- Updated save-questionnaire-progress to not log warnings related to
duplicate CRM records if the user submitted one of the first three steps
of the get started questionnaire.
- Cleaned up comments in build-static-content.
2025-01-28 18:47:32 -06:00
Mike Thomas fd04c56806 Update "IT engineering" CTA (#25846)
Updated the "IT engineering" CTA. Idea being that it may resonate better
with IT engineers if we link them straight into the "Why Fleet" section
of the docs.
2025-01-29 08:49:12 +09:00
jacobshandlingandJacob Shandling 1d582260ca UI - Maintain user's updates to the team agent options form when they navigate away and back again (#25803)
## For #24035 

- disable associated `useQuery`'s `refetchOnWindowFocus`


![ezgif-7c05abdfe4c30](https://github.com/user-attachments/assets/434e8b9e-a795-4173-8875-794736620753)

- [x] Changes file added for user-visible changes in `changes/`
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2025-01-28 15:20:46 -08:00
Lucas Manuel Rodriguez af837906e1 Revert temporary settings (#25840) 2025-01-28 17:02:50 -06:00
Lucas Manuel Rodriguez a4db139e82 Remove fleetctl binary from fleetdm/fleet image and remove unused Dockerfile (#25749)
For #25748.

Manually tested by:
1. Building a `fleet` executable for Linux on a Ubuntu VM (with
`-extldflags "-static"`) for Alpine.
2. Placing the executable in `tools/fleet-docker`.
3. Building a local docker image using `docker build -t
fleetdm/fleet:v42.42.42 --platform=linux/amd64 .`.
4. Running the docker image (using `docker run`) and use Fleet on the
browser.
```
docker run -v $(pwd)/../osquery:/run -p 8412:8412 -e FLEET_MYSQL_ADDRESS=host.docker.internal:3306 -e FLEET_MYSQL_DATABASE=fleet -e FLEET_MYSQL_USERNAME=fleet -e FLEET_MYSQL_PASSWORD=insecure -e FLEET_REDIS_ADDRESS=host.docker.internal:6379 -e FLEET_SERVER_ADDRESS=0.0.0.0:8412 -e FLEET_SERVER_CERT=/run/fleet.crt -e FLEET_SERVER_KEY=/run/fleet.key -e FLEET_LOGGING_JSON='true' -e FLEET_VULNERABILITIES_CURRENT_INSTANCE_CHECKS="yes" -e FLEET_VULNERABILITIES_DATABASES_PATH=/vulndb -e FLEET_LOGGING_DEBUG='true' -it fleetdm/fleet:v42.42.42
```

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
2025-01-28 19:58:20 -03:00
Lucas Manuel Rodriguez b0b1dd5445 Release fleetd 1.38.1 (#25786) 2025-01-28 19:38:24 -03:00
Harrison RavazzoloandDrew Baker 5fee0c2d41 Article: Managed Login Items (#25830)
Add article and assets

---------

Co-authored-by: Drew Baker <89049099+Drew-P-drawers@users.noreply.github.com>
2025-01-28 13:01:48 -08:00
dependabot[bot] 7e4a0df718 Bump github.com/golang/glog from 1.2.2 to 1.2.4 (#25818) 2025-01-28 14:58:42 -06:00
Lucas Manuel Rodriguez 3eb0663a73 Temporary change of ADE/Autopilot URL for edge testing (#25823) 2025-01-28 16:14:51 -03:00
Lucas Manuel Rodriguez fca0ea5bc1 Manual workflow to test fleetd-base.msi (#25808)
Manual workflow to test `fleetd-base.msi` using e.g. `edge` channels.

Similar to the existing:
https://github.com/fleetdm/fleet/blob/main/.github/workflows/build-fleetd-base-pkg.yml
2025-01-28 15:55:32 -03:00
jacobshandlingandJacob Shandling a5eceb8605 UI - Improve handling of long team names by teams dropdown (#25802)
## For #23924 

- Disallow text wrapping on the "manage hosts" button
- Allow dynamic width of teams dropdown values
- Hide and ellipsize team name overflow from dropdown container



![ezgif-748697f5cc45e](https://github.com/user-attachments/assets/751c0032-b8d5-4402-94dd-aae804e0e9ba)


![ezgif-7d1797450417e](https://github.com/user-attachments/assets/c40ce7a5-3c9a-485b-95e3-c9af20c79a23)

- [x] Changes file added for user-visible changes in `changes/`
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2025-01-28 10:27:02 -08:00
Eric 6dfd114cce Docs: Update heading links on "Hosting Fleet" page. (#25820)
Closes: #25797

Changes:
- Updated the HTML links on the "Hosting Fleet" documentation page so
they will be linkable by the "On this page" sidebar on the Fleet
website.
2025-01-28 11:59:38 -06:00
Allen Houchins 740331f04a Update latest-macos.yml (#25814) 2025-01-28 08:24:02 -08:00
Dante CatalfamoandTommy McCormick 05fe5b78ea Utilize custom SMTP domain if set (#25669)
#25241

---------

Co-authored-by: Tommy McCormick <mccormickt9@gmail.com>
2025-01-28 11:10:52 -05:00
github-actions[bot]andlucasmrod e786307b3c Update versions of fleetd components in Fleet's TUF [automated] (#25805)
Automated change from [GitHub
action](https://github.com/fleetdm/fleet/actions/workflows/fleetd-tuf.yml).

Co-authored-by: lucasmrod <lucasmrod@users.noreply.github.com>
2025-01-28 09:18:12 -03:00
Eric 97655d7e71 Website: Fix unmatched ejs tag on homepage (#25800)
Changes:
- Fixed an unmatched ejs tag on the homepage.
2025-01-27 18:18:32 -06:00
Mike McNeil f58d425a1e Homepage (#25799) 2025-01-27 18:11:30 -06:00
Noah Talerman 4a617230e4 Handbook: design review (#25793) 2025-01-27 17:21:52 -06:00
Noah Talerman b7e8af2dd9 Handhook: How to get feature requests, that already have issues, into the prioritization flow (#25780) 2025-01-27 17:17:24 -06:00
RachelElysia 9b70a2c819 Fleet UI: Surface download URL for Fleet-maintained app when adding (#25762) 2025-01-27 16:23:08 -05:00
Ian Littman fcf4f971c9 Renumber migrations to ensure 4.63.0 migrations come after 4.62.3 migrations (#25788) 2025-01-27 15:03:02 -06:00
RachelElysia 98f0728cee Fleet UI: Update FMA API errors in UI (#25646) 2025-01-27 15:32:12 -05:00
Noah Talerman 57b6ab1b4f Host vitals page: clarify that Fleet checks the default disk on Linux (#25778)
Update the description on this page:
https://fleetdm.com/vitals/disk-encryption-linux#linux

More context in Slack here.
2025-01-27 14:21:43 -06:00
Victor Lyuboslavsky 89e314e86e Illegal argument errors will no longer be logged at the ERROR level (#25761)
For #25759 

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] A detailed QA plan exists on the associated ticket (if it isn't
there, work with the product group's QA engineer to add it)
- [x] Manual QA for all new/changed functionality
2025-01-27 14:03:38 -06:00
Katheryn SatterleeandRachael Shaw 49231f19be Update agent-configuration.md (#25740)
- Updated the query suggested to view all osquery flags
- Added a note that running this query through osqueryi will not reflect
the settings in use by osqueryd.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

Documentation only change

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
2025-01-27 13:35:46 -06:00
Lucas Manuel Rodriguez 734b4bd23b Release fleetd 1.38.0 (#25763) 2025-01-27 16:34:59 -03:00
Robert FairburnandLuke Heath de46eb31d8 Terraform why this way (#25746)
For #18191

Why add another repo? 

Terraform clones the entire repo for every submodule used when running
`terraform init`. For our monorepo, that is 11GB, which significantly
slows down deployment speed using Terraform. By moving our Terraform
modules to a dedicated repo, we reduce this to <1MB, which will shave
minutes off of `terraform init` for anyone who uses it. Because our CI
deployment runs `terraform init` on every environment, this will result
in savings of several hours of CI runners per month.

---------

Co-authored-by: Luke Heath <luke@fleetdm.com>
2025-01-27 12:09:17 -06:00
Ian Littman 8ee29dc895 Include current host status and pending action in lock, unlock, and wipe API calls (#25754)
For #23241.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added/updated automated tests
- [x] A detailed QA plan exists on the associated ticket (if it isn't
there, work with the product group's QA engineer to add it)
- [x] Manual QA for all new/changed functionality
- [x] Docs re-PR'd
2025-01-27 12:06:09 -06:00
Gabriel Hernandez 2a643c9d87 add telemetry for fleet desktop failing to launch because of missing domain (#25752)
For #25689, #19499

We wanted to add some additional telemetry for fleet desktop to know
when it was failing to launch based on the error message from a [recent
bug] https://github.com/fleetdm/fleet/issues/25689. This bug and some
related ones seemed intermittent and we were unable to reproduced so we
are hoping adding this telemetry to give some more analytics on this
issue.
2025-01-27 17:39:41 +00:00