Commit Graph
14756 Commits
Author SHA1 Message Date
RachelElysia 95ae7c3c5f Fleet UI: Fix policy truncation and add tooltip (#24659) 2024-12-12 09:11:26 -05:00
Ian Littman 4dd152c011 Allow pulling the base list of Fleet Maintained Apps without requiring a team ID (#24595)
For #24509

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-12-11 21:12:38 -06:00
Mike Thomas 19b4f05506 Case study update 2 (#24692)
Removed repeated content and fit it to the new case studies template.
2024-12-12 12:11:11 +09:00
Mike Thomas 12adf695ff case-study-update (#24691)
Removed repeated content and fit it to the new case studies template.
2024-12-12 11:47:39 +09:00
Drew BakerandMike Thomas edb3c18f77 Create large-gaming-company-enhances-server-observability-with-fleet.md (#24690)
Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
2024-12-11 21:08:26 -05:00
Ian Littman 0d322c2e8b Add missing role label on team admin role selection in user edit (#24683)
For #24667.

# Checklist for submitter

- [x] Manual QA for all new/changed functionality
2024-12-11 17:53:28 -06:00
Eugene f1ea2360d2 Edit the "List activities" description. (#24562)
Edited for length and clarity
2024-12-11 17:33:56 -05:00
Eric 1a3b89de6f Website: update article styles and case studies. (#24657)
Related to: https://github.com/fleetdm/fleet/issues/24633

Changes:
- Updated article template styles to:
   - make the spacing between elements match the latest wireframes
- style elements with `purpose="attribution-quote"` as a large quote
with a quotation mark icon.
      - Ex: 
         ```
         <div purpose="attribution-quote">

         I love Fleet.

         **— Staff Client Platform Engineer**
         </div>
         ```
         Rendered result: 
<img width="397" alt="image"
src="https://github.com/user-attachments/assets/f03a4a0d-07ba-4727-99e5-b7c1322c290b"
/>
- style each line of text wrapped in a `<div purpose="checklist">` tag
with a checkbox icon.
      - Ex: 
         ```
         <div purpose="checklist">

Employees are free to work with their preferred operating systems of
choice.

[Fleet’s API](https://fleetdm.com/docs/rest-api/rest-api) and live query
capabilities ensured up-to-date inventory data to meet stringent
security and access control requirements while integrating with existing
systems.

         </div>
         ```
         Rendered result:  
<img width="787" alt="image"
src="https://github.com/user-attachments/assets/43b4c43a-8608-4ad7-9575-0ff114914f18"
/>

- Updated recent case study articles to use the new styles
- Updated the call-to-action component to have a default CTA and added
it to the bottom of recent case studies.
2024-12-11 16:16:20 -05:00
Victor Lyuboslavsky ab172f07af Adding secret support to scripts via gitops. (#24649)
#24547 

# Checklist for submitter

- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-12-11 15:05:48 -06:00
Rachael Shaw b7cc9db0e9 Website: Add updated logo for email templates (dark mode compatible) (#24676)
Updated the logo used in email templates to have a white outline around
the text (so it's readable in email clients using dark mode).
2024-12-11 14:49:59 -06:00
Allen Houchins f1ddf8acd1 Added Software Update Settings DDM for Workstations (canary) and made Zoom for Ubuntu available in Self-service (#24661) 2024-12-11 13:51:20 -06:00
Mike McNeil e84cfc42d7 Update homepage.ejs (#24662)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] If paths of existing endpoints are modified without backwards
compatibility, checked the frontend/CLI for any necessary changes
- [ ] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
- [ ] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [ ] Orbit runs on macOS, Linux and Windows. Check if the orbit
feature/bugfix should only apply to one platform (`runtime.GOOS`).
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-12-11 11:51:10 -08:00
Ian Littman fda6bcab85 Hide ineffectual MFA checkbox on user form for team admins (#24656)
Also fixes some capitalization/pluralization issues for user management
for team admins

For #24623.

# Checklist for submitter
- [x] Manual QA for all new/changed functionality
2024-12-11 13:07:51 -06:00
jacobshandlingandJacob Shandling 2118616f64 21855 – Paginate and filter Queries on the server, update platform filtering from compatible to targeted platforms (#24446)
## Addresses #21855 and all of its subtasks

**Frontend:**
- Update list queries API call to include pagination and filter-related
query params, including new `platform` param for filtering queries by
platforms they've been set to target
- Convert all filtering, sorting, and pagination functionality of the
Manage queries page from client-side to server-side
- Remove unneeded variable declarations / logic
- Various typing and naming improvements

**Server:**
- Add new `platform` `ListQueryOption`
- Update service and datastore level list queries logic to handle
filtering queries by targeted platform
- Update service and datastore level list queries logic to include
`meta` and `count` fields in addition to filtered/paginated queries


- [x] Changes file added for user-visible changes in `changes/`, `
- [x] Added/updated tests
  - [x] update DB, integration
  - [x] add integration (pagination)
  - [x] add integration (platform filter)
  - [x] add DB (pagination)
  - [x] add DB (platform filter)
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-12-11 10:50:28 -08:00
Scott Gress bf7876af54 Add make commands to standardize running/debugging Go tests (#24606)
# Checklist for submitter

- [X] Manual QA for all new/changed functionality

# Details

This PR adds two new user-facing `make` targets:

* `run-go-tests`: run Go tests for one or more packages, optionally
filtering to specific tests
* `debug-go-tests`: debug (using Delve) Go tests for one or more
packages, optionally filtering to specific tests

Example usage:

```
# Run all tests in the mysql and gdmf packages
make run-go-tests PKG_TO_TEST="server/mdm/apple/gdmf server/datastore/mysql"
```

```
# Run all the TestMDMApple tests in the mysql package
make run-go-tests PKG_TO_TEST=server/datastore/mysql TESTS_TO_RUN="^TestMDMApple\$$" 
```

```
# Run only the TestMDMAppleProfileLabels test in the mysql package
make run-go-tests PKG_TO_TEST=server/datastore/mysql TESTS_TO_RUN="^TestMDMApple\$$/^TestMDMAppleProfileLabels\$$" 
```

# Notes

Two new "private" targets `.run-go-tests` and `.debug-go-tests` were
created as base commands for both `test-go` (used in CI) and the new
user-facing commands.
2024-12-11 11:06:56 -06:00
Allen Houchins f2762cf507 added Zoom for debian Linux (#24650) 2024-12-11 10:22:17 -06:00
RachelElysia 7ecd6d9377 Fleet UI: Fix bug hiding manage automations dropdown from maintainers (#23808) 2024-12-11 10:19:33 -05:00
Jahziel Villasana-Espinoza 5814e3985a feat: add software title ID to add software activity (#24577)
> Related issue: #24120

## Changes
- Added the `software_title_id` field to the activity details for
`added_software` activities, which get generated when adding a customer
installer or a FMA
- Added a return value (`titleID`) to
`ds.MatchOrCreateSoftwareInstaller`
- Removed `ds.GetSoftwareTitleIDByMaintainedAppID`. Since we're
returning the new value above, this method was no longer needed.

## Testing steps
1. Add a custom installer
2. Add a FMA
3. Check the activity details in the response to `GET /activities`.
Verify that the `software_title_id` field exists and is correct.
4. Add a FMA with automatic install. Make sure the policy is correctly
created, has the correct software title ID associated with it, and that
it installs the app.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-12-11 09:54:15 -05:00
Ian Littman cf6e15f6a4 Validate license key if supplied before running fleetctl preview (#24627)
For #22884

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-12-11 07:57:10 -06:00
Ian Littman 746e800fcf Error out while parsing when script entries in a GitOps YAML file are missing paths (#24639)
For #22244. Previously empty script entries would get parsed and then
cause a panic later in the process.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-12-11 07:54:25 -06:00
Drew Baker 729da29f86 Update and rename worldwide-security-and-authentication-platform-choo… (#24634)
…se-fleet-for-linux.md to
worldwide-security-and-authentication-platform-chooses-fleet-for-linux.md

Update typo

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] If paths of existing endpoints are modified without backwards
compatibility, checked the frontend/CLI for any necessary changes
- [ ] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
- [ ] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [ ] Orbit runs on macOS, Linux and Windows. Check if the orbit
feature/bugfix should only apply to one platform (`runtime.GOOS`).
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-12-10 20:09:47 -05:00
Ian Littman 0bb7f2ed5a Include expiration info, drop "personalized", in MFA email (#24630)
For #22078.

# Checklist for submitter

- [x] Manual QA for all new/changed functionality
2024-12-10 18:58:40 -06:00
Drew Baker dbc1e72876 Add security and authentication platform case study (#24631)
On the third day of Christmas 🌲
2024-12-10 19:45:00 -05:00
Victor Lyuboslavsky fe3606e512 Fixing schema.sql on main (#24628) 2024-12-10 17:17:21 -06:00
Noah TalermanandRachael Shaw 68f2d99b25 API reference docs: disk encryption is cross-platform (#24588)
API reference doc changes for the following story:
- #22074

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
2024-12-10 16:52:29 -06:00
Noah Talerman 6e4ddaeab9 YAML files reference docs: labels and users coming soon, ticket creation, ABM and VPP (#24480) 2024-12-10 17:50:04 -05:00
Scott Gress 149e5b129f 23285 add attestation (#24604) 2024-12-10 16:02:08 -06:00
Eric 324a269e22 Website: Add feature block to /device-management page (#24612)
Closes: https://github.com/fleetdm/confidential/issues/8900

Changes:
- Added a "Modern change management" section to the /device-management
page
2024-12-10 15:38:26 -06:00
Victor Lyuboslavsky 4e1e4a3204 Added migration and secret variables API. (#24594)
#24545 

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] Added/updated tests
- [x] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [x] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
- [x] Manual QA for all new/changed functionality
2024-12-10 15:32:51 -06:00
Victor Lyuboslavsky d3d59a7352 Added Go int note to backend patterns.md (#24621)
As discussed in 12/10 backend sync.
2024-12-10 15:31:58 -06:00
Ian Littman 3258b45cbf Update email template font to Inter (#24617)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
2024-12-10 15:17:50 -06:00
Dante Catalfamo 40df2a0b23 Reusable fleet variable find and replace (#24613)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-12-10 15:14:32 -06:00
Katheryn Satterlee 7b87a32606 Add detail_query_overrides to contributor docs (#24589) 2024-12-10 15:46:59 -05:00
Onasis MunroandDrew Baker 19fb681cd8 Update pricing-features-table.yml (#24513)
Co-authored-by: Drew Baker <89049099+Drew-P-drawers@users.noreply.github.com>
2024-12-10 15:39:19 -05:00
Sarah Gillespie eec2938265 Update documentation for MDM end user authentication (#24610)
Issue #12007 

From the issue:

> Outdated documentation changes: Improve [End user authentication
docs](https://fleetdm.com/docs/using-fleet/mdm-macos-setup-experience#end-user-authentication),
since now it's confusing. We mention "Configure single sign-on (SSO)"
which is related to SSO for admins.
2024-12-10 15:20:46 -05:00
Sarah Gillespie f25c845da2 Add metadata field to end user authentication UI (#24579) 2024-12-10 14:13:15 -06:00
dependabot[bot] 572c4945b8 Bump nanoid from 3.3.7 to 3.3.8 (#24614) 2024-12-10 14:07:29 -06:00
Janis Watts a2e85abc62 Changed Metadata URL in SSO configuration to 127.0.0.1 due to product validation update (#24599)
Fleet now has a validation check in the Metadata URL field. Updated
instructions from

Metadata URL: http://localhost:9080/simplesaml/saml2/idp/metadata.php

TO

Metadata URL: http://127.0.0.1:9080/simplesaml/saml2/idp/metadata.php
2024-12-10 14:53:09 -05:00
Eric 1930222ecd Replace mermaid chart in mTLS article (#24608)
Changes:
- Replaced the Mermaid chart in the "mTLS support in fleetd" article
with an image of the chart. For context: The mermaid chart uses syntax
that is not supported by the version of mermaid the website uses.
2024-12-10 13:42:54 -06:00
Scott Gress 4a623812e8 Add notification for dogfood GitOps failures (#24402)
for #19106 

This PR adds a Slack notification when the GitOps run fails in the
dogfood-gitops workflow. Whenever the actual GitOps action fails, it
should notify #help-dogfooding with a link to the failed action. Note
that this will alert on both merges to main and scheduled runs, which I
think we want. Also note that this is [currently failing on
main](https://github.com/fleetdm/fleet/actions/runs/12154006118) so this
alert will start going off daily until the issue is fixed 😶

### > Note: this will need a new Slack incoming webhook for sending
messages to #help-dogfooding, and a new
`SLACK_G_HELP_DOGFOODING_WEBHOOK_URL` repo secret with the webhook URL.

I tested this on a personal private repo just to make sure I got all the
syntax right:

<img width="422" alt="image"
src="https://github.com/user-attachments/assets/74d188eb-5c03-471b-a5db-9f578a56e2ab">
2024-12-10 13:39:32 -06:00
Noah Talerman 8fe05fcf93 API reference: run script w/ team_id and script_name (#24484) 2024-12-10 13:39:24 -06:00
RachelElysia 6c54f145ca Fleet UI: Do not remove team selection when creating a label (#24590) 2024-12-10 14:04:04 -05:00
RachelElysia f9b0f10936 Fleet UI: Export to CSV does not trim leading zeros (#24529) 2024-12-10 14:03:20 -05:00
Noah Talerman 01034efc3f CIS Benchmarks guide: macOS 15 is supported (#24527)
CIS Benchmarks for macOS 15 were added in this user story: #23611
2024-12-10 14:00:50 -05:00
RachelElysia 65c0cb25e9 Fleet UI: Do not render password or 2fa option if sso is selected (#24600) 2024-12-10 13:01:54 -05:00
Robert Fairburn d3dbee6614 Support passing in extra txt records to ses module (#24580) 2024-12-10 10:36:34 -06:00
Janis Watts 1c4686c30c Included Windows and Linux script usage info for lock and unlock (#24367)
Added additional information about functionality when locking/unlocking
Windows and Linux hosts, with links to the scripts that are run as part
of the process.
2024-12-10 10:01:55 -06:00
Tim Lee 9961a968d3 Linux Encryption Docs (#23622) 2024-12-10 08:26:46 -07:00
Martin Angers 538abdccf8 Add contributor docs to document the teams/no team conventions (#24569)
Not associated with a ticket, was an action item from our retrospective
meeting.
2024-12-10 10:19:28 -05:00
Drew Baker 669900cda0 Create global-cloud-platform-simplifies-device-management-with-fleet.md (#24578)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] If paths of existing endpoints are modified without backwards
compatibility, checked the frontend/CLI for any necessary changes
- [ ] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
- [ ] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [ ] Orbit runs on macOS, Linux and Windows. Check if the orbit
feature/bugfix should only apply to one platform (`runtime.GOOS`).
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-12-09 19:33:36 -05:00