Discharge7443/fleet
1
0
Fork 0
Code Issues Pull Requests Actions 22 Packages Projects Releases Wiki Activity
6,016 Commits 2 Branches 0 Tags
8fb57d365bfb7eb6aa2cfee856aff4f0fbe3919e
Commit Graph
950 Commits
Author SHA1 Message Date
Gabriel Hernandez 97415f0091 UI Polish for Login and forgot password pages. (#8494) 
* fix margin on login form controlls

* fix margin and type on forgot password page
 2022-11-01 11:39:02 +00:00
Juan Fernandez 53e112d264 Feature 7494: Use the MSRC security bulletin artifacts for detecting Win OS vulnerabilities (#7889) 
Use the MSRC security bulletin artifacts for detecting Win OS vulnerabilities
 2022-10-28 11:12:21 -04:00
Michal Nicpon 3801f1c6d1 improve primary ip host detail query (#8407) 
Previously, the primary ip was determined using the interface with the most traffic. This had a few issues and required explicitly filtering out certain interfaces that we don't want eg loopback, docker.

Instead, use the default route to determine the primary (private) ip. If there are multiple, use the one with the lowest metric and prefer ipv4 addresses.
 2022-10-27 16:34:49 -06:00
Marcelo Menéndez Vázquez 124dbc0065 Improve ingress template in Helm Chart (#8420) 
* Improve ingress template for more customization

* Add ingress configuration, remove no longer needed fields

* Add _helpers.tpl for better usability

* Add changes file

* Bump Chart version to 5.0.0
 2022-10-27 13:09:31 -04:00
Marcos Oviedo 131cc7eeec Orbit MSI installer now includes the necessary manifest file to use windows_event_log as a logger_plugin. (#8343) 
* Orbit MSI installer now includes the necessary manifest file to use windows_event_log as a logger_plugin
 2022-10-27 10:19:30 -03:00
Martin Angers 49e910270b Add vulnerability scores to Jira/Zendesk tickets for premium users (#8346) 2022-10-26 10:42:09 -04:00
RachelElysia 1aaf2d0b06 Fleet UI: Update styling of tooltips and modals (#8436) 2022-10-26 09:10:20 -04:00
RachelElysia 97b4d1f3fb Fleet UI: Option to show public IP address in hosts table (#8425) 2022-10-25 11:56:09 -04:00
gillespi314 51e6369653 Fix password reset request expiration (#8246) 2022-10-25 09:46:41 -05:00
Martin Angers 461f85e332 Add premium-specific preview screenshots for integrations' vulnerability tickets (#8423) 2022-10-25 08:09:27 -04:00
Marcos Oviedo 8b77939494 Fixed an Orbit MSI installer bug that caused Orbit files not to be removed during uninstallation (#8333) 2022-10-25 09:00:37 -03:00
gillespi314 881194b3b4 Add orbit version and osquery version usage statistics (#8229) 2022-10-24 11:12:56 -05:00
Martin Angers e19191161e Validate team spec unknown keys (#8265) 2022-10-24 08:49:44 -04:00
Juan Fernandez 9444016571 Fixed bug with CPE matching, UTM.app was matching to the incorrect CPE (#8149) 
Fixed bug with CPE matching, UTM.app was matching to the incorrect CPE.
 2022-10-24 12:46:18 +00:00
Noah Talerman 90f5fbb63a Prepare for 4.22 (#8253) 2022-10-21 11:24:13 -07:00
Michal Nicpon 3f3c0b34c4 fix missing host when ordering by display name (#8376) 2022-10-20 14:56:58 -06:00
RachelElysia 0faa546f17 Fleet UI: Consistency between global and team agent options forms (#8334) 2022-10-20 13:39:47 -04:00
Gabriel Hernandez 55bf0cea6a change label filter dropdown icon match status dropdown and extend icon component (#8337) 2022-10-19 17:44:27 -05:00
RachelElysia 5de3e571ae Fleet UI: Truncated cells have responsive size tooltips, hides default browser tooltip (#8300) 2022-10-19 11:32:55 -04:00
Gabriel Hernandez efad41e578 fix 500 when no software on device/:token page (#8292) 2022-10-18 17:50:59 +01:00
RachelElysia bca8567e9e Fleet UI: Host table defaults to 100 hosts per page (#8290) 2022-10-18 11:11:19 -04:00
Frank Sievertsen 7c3d9f007a return http status 400 for bad json request body (#8287) 2022-10-18 14:43:16 +02:00
Martin Angers 323620bf39 Deep-clone the appconfig when getting from cache (#8194) 2022-10-17 15:03:49 -04:00
Roberto Dip e4cd25f4aa fix a bug causing features to be false (#8240) 
Related to https://github.com/fleetdm/fleet/issues/8010 and https://github.com/fleetdm/fleet/issues/8013 this prevents a bug that happens when:

1. A team doesn't have a `config.features` key in the JSON stored in the table or `config` is `NULL`
2. The team is edited from the UI

All `config.features` will default to `false`, which can be a problem if your global settings are `true` for both (which is the default)
 2022-10-14 19:27:37 -03:00
RachelElysia c04ebbc490 Fleet UI: Missing host and low disk space filters on dashboard and manage host page (#7728) 2022-10-14 15:21:30 -05:00
RachelElysia 3eaceec64d Fleet UI: App-wide use of host's display_name (#8169) 2022-10-14 14:26:15 -05:00
gillespi314 59876d37ea Add usage statistics to measure policy violations (#8199) 2022-10-14 13:55:37 -05:00
Gabriel Hernandez a950e9d095 Feat/update query doc sidepanel (#8214) 
* create new components for query side panel

* add reusable icon component that uses svg for icons

* integrate with new osquery_fleet_schema.json data

* update UI to work with osquery_fleet_schema.json

* add remark-gfm to safely support direct urls in markdown

* move fleet ace into markdown component so we can render code with ace editor

* add testing for new query sidebar

* remove incomplete tests for query sidepanel
 2022-10-14 17:45:57 +01:00
Lucas Manuel Rodriguez c16ab5f823 Fix undetected missing migrations (#8228) 2022-10-14 13:26:04 -03:00
RachelElysia 7804406aa8 Fix mdm enrollment status api call (#8218) 2022-10-14 09:29:40 -05:00
RachelElysia 5084ea2783 Fleet UI: Select all fix on table checkboxes (#8198) 2022-10-13 09:29:30 -04:00
RachelElysia 564a25883f Fleet UI: Fix padding between multiple enroll secrets (#8193) 2022-10-13 09:28:59 -04:00
Martin Angers fae8e4ca2c Translate the AppConfig and Team validation messages to be more user-friendly (#8171) 2022-10-12 17:10:50 -04:00
Juan Fernandez 6939af045d Fleet desktop should use lightweight endpoint for getting failing policies count (#8159) 
Fleet desktop should use lightweight endpoint for getting failing policies count
 2022-10-12 17:13:43 -03:00
Juan Fernandez 91ea7bf244 Vulnerabilities not detected if NVD CVE feed is unavailable or rate limited (#8191) 
If there is any problem when synching NVD source, proceed with vuln scan
 2022-10-12 15:09:18 -04:00
Juan Fernandez 72cfdac634 Only ingest installed deb_packages (#8160) 
Only ingest deb_packages with status = 'install ok installed'
 2022-10-12 14:27:07 -04:00
Roberto Dip 4042f8d826 add browser-related security headers to HTML responses (#8180) 
related to #8031, this adds the following headers to HTML responses:

- Strict-Transport-Security: informs browsers that the site should only
  be accessed using HTTPS, and that any future attempts to access it
  using HTTP should automatically be converted to HTTPS.
- X-Frames-Options: disallows embedding the UI in other sites via
  <frame>, <iframe>, <embed> or <object>, which can prevent attacks like
  clickjacking.
- X-Content-Type-Options: prevents browsers from trying to guess the MIME
  type which can cause browsers to transform non-executable content into
  executable content.
- Referrer-Policy: prevents leaking the origin of the referrer in the
  Referer.

additionally, this ensures we set `X-Content-Type-Options` for CSV and
installer responses.
 2022-10-12 10:19:21 -03:00
Martin Angers d321cfc68e Add inherited policies to the team's list policies response payload (#8068) 2022-10-12 08:35:36 -04:00
Lucas Manuel Rodriguez 42c47a6fa7 Add missing return to ingestKubequeryInfo (#8178) 
* Add missing return to ingestKubequeryInfo

* No need to log error twice
 2022-10-12 09:00:49 -03:00
Tomas Touceda d912376f02 Handle tcp read timeouts (#8163) 
* Handle tcp read timeouts properly

* Add changes file

* Fix bad mini refactor after nailing the test

* Update based on review

* Update comment
 2022-10-11 13:58:52 -03:00
RachelElysia 7de1b847ea Fleet UI: Host's software details links to software, improved responsiveness (#8080) 2022-10-11 09:27:20 -04:00
Roberto Dip e630fabf89 token rotation for fleet desktop (#7779) 
This implements what's described in detail here https://github.com/fleetdm/fleet/blob/main/proposals/fleet-desktop-token-rotation.md
 2022-10-10 17:15:35 -03:00
gillespi314 ca379e7459 Fix directIngestOSWindows error in query ingestion for non-Windows hosts (#8148) 2022-10-10 13:27:15 -05:00
RachelElysia 6d94472224 Fleet UI: Move status from route param to query param (#8035) 2022-10-10 14:07:47 -04:00
Gabriel Hernandez bc194d18c7 Feat/update live query states (#8122) 
* add awaitng results state to live query search

* make spinner more reusable and add it to query page awaiting results

* create common QueryResultsHeader component to use on query policy flows
 2022-10-10 15:39:49 +01:00
Frank Sievertsen 1eacecf637 Add new missing value to existing status URL parameter at the GET /hosts endpoint (#7916) 2022-10-10 07:45:39 -04:00
Frank Sievertsen b25e74b285 add missing_30_days_count to host_summary response (#7915) 2022-10-08 08:58:27 -04:00
Frank Sievertsen e9f7066d87 7135 host display name (#7873) 2022-10-08 08:57:46 -04:00
Roberto Dip bfe698d090 cleanup all policy memberships for a host on re-enrollment (#8120) 
Related to #7664, this cleans up all policy memberships for a host when its re-enrolled, afterwards only the relevant policy memberships for the host will be created.
 2022-10-07 11:36:17 -03:00
RachelElysia 34088aaab9 Fleet UI: /login route redirects to /dashboard if logged in (#8102) 2022-10-06 13:33:32 -04:00