Discharge7443/fleet
1
0
Fork 0
Code Issues Pull Requests Actions 5 Packages Projects Releases Wiki Activity
8,662 Commits 2 Branches 0 Tags
9ae3aa8036cc45b34fdc3ff2a4d47d7560d9e8ce
Commit Graph
1424 Commits
Author SHA1 Message Date
gillespi314 9ae3aa8036 Update MDM profile verification (#13138) 2023-08-07 09:46:03 -05:00
gillespi314 5b27581fdc Configure bootstrap package and end user auth for newly created teams in MDM pre-assignment flow (#13089) 2023-08-07 09:43:39 -05:00
Luke Heath 4cc5bfbe4a UI: Add missing call to new query path making function (#13162) 
Reapplies https://github.com/fleetdm/fleet/pull/13156/
 2023-08-04 14:49:25 -07:00
Luke Heath 8d1fb85d9c Revert UI query path fix (#13161) 2023-08-04 14:22:15 -07:00
Jacob Shandling 576cb198d4 changefile 2023-08-04 13:06:14 -07:00
Roberto Dip 29b9a7fe88 account for NULL values in scheduled_query columns in data migration (#13142) 
Prior to 4.35.0, some rows in the scheduled_query table might have a
`NULL` value due to a race condition with database replicas and the way
`ds.EnsureGlobalPack` and `ApplyPackSpecs` work together.

This is no longer the case, but some databases are left in weird states,
which were not accounted by this migration.

Chaning the migration in-place because that's the approach we took in
previous migrations with similar problems.
 2023-08-04 09:24:36 -07:00
RachelElysia 3c8244b246 Fleet UI: Dynamic autofill for SQL editor (#13093) 2023-08-03 12:42:51 -04:00
Gabriel Hernandez cb89b725ea implement fleetctl apply new team with secret (#13062) 
relates to #12907

implement adding an enroll secret when creating a new team with
`fleetctl apply` if none is provided.

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Added/updated tests
- [x] Manual QA for all new/changed functionality
 2023-08-02 17:42:01 +01:00
RachelElysia 3477178758 Fleet UI: No role = no access, refactor jsx class components to typescript functional components (#12953) 2023-08-02 11:29:49 -04:00
Luke Heath 648b25bf4d Prepare v4.35.0 (#13077) 2023-08-01 09:22:01 -07:00
Luke Heath c8dee16121 Prepare v4.34.1 (#13073) 2023-07-31 16:54:24 -07:00
Marcos Oviedo 7cfea0787e Windows Installer changes to support MDM Azure flow (#13025) 
This relates to #12600 

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
- [X] Manual QA for all new/changed functionality
 2023-07-31 12:12:06 -03:00
Jacob Shandling 0c0ff35a37 changes 2023-07-28 13:28:44 -07:00
Jacob Shandling 3bf0344396 Merge branch 'main' into 7765-combined-schedules-and-queries 2023-07-28 13:21:04 -07:00
RachelElysia feddda299b Fleet UI: New manage query automations modal (#12747) 2023-07-27 13:47:54 -07:00
Jacob Shandling 4cab838864 Revert "Fleet UI: New manage query automations modal (#12747)" 
This reverts commit e13644d664.
 2023-07-27 13:44:40 -07:00
Jacob Shandling c69bba6d0e Merge branch '7765-frontend' into 7765-combined-schedules-and-queries 2023-07-27 13:35:07 -07:00
Jacob Shandling 1daf6f02c6 Revert "Merge front-end changes into 7765 Master Dev branch (#12905)" 
This reverts commit 7bff7447b0.
 2023-07-27 13:32:24 -07:00
Jacob ShandlingandJacob Shandling 266e9bf2e0 UI – Update platforms column to only display compatible platforms (#13003) 
## Addresses #12999 

<img width="1282" alt="Screenshot 2023-07-27 at 11 59 01 AM"
src="https://github.com/fleetdm/fleet/assets/61553566/b60d3b41-3d7b-4550-ba7c-8615bae085a6">


# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
 2023-07-27 12:10:22 -07:00
gillespi314 abfa113083 Disable nudge in case of launch error (#12906) 2023-07-26 14:40:03 -05:00
Roberto Dip d9de78e9fc upgrade Go version to 1.19.11 (#12902) 2023-07-26 11:09:22 -07:00
Roberto Dip 442e03b276 Improve the error handling for MDM SSO during DEP enrollment (#12966) 
For #12692
 2023-07-26 14:20:36 -03:00
Roberto Dip 833c851706 fetch the correct hiera information based on the node env (#12944) 
For https://github.com/fleetdm/fleet/issues/12897
 2023-07-26 12:04:11 -03:00
Luke Heath cd94d11ad7 Fixed URL used to check Gravatar network availability (#12949) 2023-07-25 10:08:57 -07:00
Jacob ShandlingandJacob Shandling fd50360278 Fix setup page styling (#12936) 
## Addresses #12935 
<img width="780" alt="Screenshot 2023-07-24 at 11 04 11 AM"
src="https://github.com/fleetdm/fleet/assets/61553566/5d4b335a-3abd-4f7c-beaa-79ee151c490f">
<img width="1243" alt="Screenshot 2023-07-24 at 11 03 10 AM"
src="https://github.com/fleetdm/fleet/assets/61553566/3b79ce91-34d6-4b6a-8eb6-50a7ac9f39d3">

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
 2023-07-24 11:13:02 -07:00
Juan Fernandez 7bff7447b0 Merge front-end changes into 7765 Master Dev branch (#12905) 
Front-end changes for combined schedules and queries.
 2023-07-24 09:47:05 -04:00
Juan Fernandez 6b664a2a82 Merge branch 'main' into 7765-combined-schedules-and-queries 2023-07-21 13:53:13 -04:00
Marcos Oviedo 501ef480b0 Windows mdm TOS endpoint (#12900) 
This relates to https://github.com/fleetdm/fleet/issues/12604 and
https://github.com/fleetdm/fleet/issues/12600

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality
 2023-07-21 14:36:26 -03:00
Roberto Dip ee461bac2e optimizations to profile delivery (#12808) 
for #12481
 2023-07-20 18:11:45 -03:00
gillespi314 b8ab1fb183 Update ingestion of host detail queries for MDM so hosts that report empty results are counted as "Off" (#12700) 2023-07-19 12:38:42 -05:00
Marcos Oviedo f429c6db49 12613 Azure AD JWT Auth token support (#12817) 
This PR adds support to parse Azure JWT tokens, and it also adds the STS
endpoint ([Section
3.2](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-mde2/27ed8c2c-0140-41ce-b2fa-c3d1a793ab4a)
on the MS-MDE2 spec)

This relates to #12614 and #12613 

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality
 2023-07-19 13:30:24 -03:00
RachelElysia e13644d664 Fleet UI: New manage query automations modal (#12747) 2023-07-18 17:10:45 -04:00
RachelElysia a45edfdffa Fleet UI: New edit query page (#12777) 2023-07-18 16:58:52 -04:00
Jacob ShandlingandJacob Shandling 1d6870f0a7 UI: Update the save query modal with scheduling-related fields (#12741) 
## Addresses #12646
### See issue for list of completed work
![Screenshot 2023-07-12 at 5 41 05
PM](https://github.com/fleetdm/fleet/assets/61553566/b4ece0c9-5df1-4320-9dce-1cd8c2758c6c)


### Also see PR #12713 **notes for review** on that PR for help manually
testing this work in lieu of the completed API.

- [x] Changes file added for user-visible changes in `changes/`
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
 2023-07-17 14:09:59 -07:00
Gabriel Hernandez c5a4fa60b7 Feat UI update macos windows setup (#12744) 
relates to #12168

Updates the fleet UI so that the macOS mdm setup flow is similar to the
windows mdm setup. This includes:

**Adding a new macos setup card:**


![image](https://github.com/fleetdm/fleet/assets/1153709/dc3371a6-864b-4af8-8e97-d716d5a51361)


![image](https://github.com/fleetdm/fleet/assets/1153709/5d7ebb54-6c80-45ac-86b2-93d452357b96)

**Adding a new mac os mdm page on a new URL:**


![image](https://github.com/fleetdm/fleet/assets/1153709/30e42176-d4ab-4087-bde0-d74c81fde613)

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
 2023-07-17 15:51:40 +01:00
Juan Fernandez 8d55966553 Updated osquery/config endpoint to include scheduled queries (#12723) 
Updated GetClientConfig API endpoint
 2023-07-14 13:37:09 -04:00
Roberto Dip e8070e0bd8 properly report changed profiles in the Puppet module (#12719) 
For #12480
 2023-07-14 12:53:03 -03:00
gillespi314 e716406ed5 Mask URL params in server logs for webhook POSTs (#12761) 2023-07-13 17:47:34 -05:00
Jacob ShandlingandJacob Shandling 7ff4b77fb9 UI: Merge scheduling functionality into queries page (#12713) 
## Addresses #12636 

### See issue for list work done
![Screenshot 2023-07-12 at 6 47 04
PM](https://github.com/fleetdm/fleet/assets/61553566/47e3e5b2-0195-4f54-a377-8e5c03313acf)


![Frame-12-07-2023-06-43-32](https://github.com/fleetdm/fleet/assets/61553566/f72f2d41-609f-4409-8595-5f3e4f06d9bb)


### Notes for review:
- Because other work is based on this branch, TODOs / fixes are noted
here until the team comes to a strategy for merging all of the work:
- Add missing space in the Performance impact column "Undetermined"
tooltip text
- I'm having trouble confirming that the inherited queries table is
working right with the mock hard-coded data, though I did see it working
correctly previously. There's an issue with the page reverting to "All
teams" when trying to show the inherited table, though it does show the
table before re-rendering.

- This work is organized clearly by commit, so that might be a
manageable way to go through this code.
- Since the updated API for this work is not yet complete, this work can
be manually tested by either:
    - Using mock API infrastructure, or
- in `ManageQueriesPage.tsx`, comment out the two `useQuery` calls and
add appropriate mock data. You can then modify any fields of interest to
test their related UI functionality. For example, lines 119 -242 might
read:
```
// const {
  //   data: curTeamEnhancedQueries,
  //   error: curTeamQueriesError,
  //   isFetching: isFetchingCurTeamQueries,
  //   refetch: refetchCurTeamQueries,
  // } = useQuery<IListQueriesResponse, Error, IEnhancedQuery[]>(
  //   [{ scope: "queries", teamId: teamIdForApi }],
  //   () => queriesAPI.loadAll(teamIdForApi),
  //   {
  //     refetchOnWindowFocus: false,
  //     enabled: isRouteOk,
  //     select: (data) => data.queries.map(enhanceQuery),
  //   }
  // );

  // // If a team is selected, fetch inherited global queries as well
  // const {
  //   data: globalEnhancedQueries,
  //   error: globalQueriesError,
  //   isFetching: isFetchingGlobalQueries,
  //   refetch: refetchGlobalQueries,
  // } = useQuery<IListQueriesResponse, Error, IEnhancedQuery[]>(
  //   [{ scope: "queries", teamId: -1 }],
  //   () => queriesAPI.loadAll(),
  //   {
  //     refetchOnWindowFocus: false,
  //     enabled: isRouteOk && isAnyTeamSelected,
  //     select: (data) => data.queries.map(enhanceQuery),
  //   }
  // );

  const [
    curTeamEnhancedQueries,
    curTeamQueriesError,
    isFetchingCurTeamQueries,
    refetchCurTeamQueries,
  ] = useMemo(() => {
    return [
      [
        {
          created_at: "2023-06-08T15:31:35Z",
          updated_at: "2023-06-08T15:31:35Z",
          id: 2,
          name: "test",
          description: "",
          query: "SELECT * FROM osquery_info;",
          team_id: 43,
          platform: "darwin",
          min_osquery_version: "",
          automations_enabled: true,
          logging: "snapshot",
          saved: true,
          // interval: 300,
          interval: 0,
          observer_can_run: false,
          author_id: 1,
          author_name: "Jacob",
          author_email: "jacob@fleetdm.com",
          packs: [],
          stats: {
            // system_time_p50: 1,
            // system_time_p95: null,
            // user_time_p50: 1,
            // user_time_p95: null,
            // total_executions: 1,
          },
          performance: "Undetermined",
          platforms: ["darwin"],
        },
      ] as IEnhancedQuery[],
      undefined,
      false,
      () => {
        console.log("got the new queries");
      },
    ];
  }, []);

  const [
    globalEnhancedQueries,
    globalQueriesError,
    isFetchingGlobalQueries,
    refetchGlobalQueries,
  ] = useMemo(() => {
    return [
      [
        {
          created_at: "2023-06-08T15:31:35Z",
          updated_at: "2023-06-08T15:31:35Z",
          id: 200,
          name: "test",
          description: "",
          query: "SELECT * FROM osquery_info;",
          team_id: null,
          platform: "darwin",
          min_osquery_version: "",
          automations_enabled: true,
          logging: "snapshot",
          saved: true,
          // interval: 300,
          interval: 0,
          observer_can_run: false,
          author_id: 1,
          author_name: "Jacob",
          author_email: "jacob@fleetdm.com",
          packs: [],
          stats: {
            // system_time_p50: 1,
            // system_time_p95: null,
            // user_time_p50: 1,
            // user_time_p95: null,
            // total_executions: 1,
          },
          performance: "Undetermined",
          platforms: ["darwin"],
        },
      ] as IEnhancedQuery[],
      undefined,
      false,
      () => {
        console.log("got the new inherited queries");
      },
    ];
  }, []);
```

- [x] Changes file added for user-visible changes in `changes/`
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
 2023-07-13 12:11:11 -07:00
Gabriel Hernandez 9aa7c0c714 add dark and light background logo colors and show them on mdm migrat… (#12681) 2023-07-13 19:35:25 +01:00
Juan Fernandez bfe6a5c3ad Invalid policies should be ignored in the desktop endpoint (#12523) 
Updated the `/desktop` endpoint to ignore invalid policies
 2023-07-13 14:13:36 -04:00
RachelElysia 93a03ad216 Fleet UI: Observer plus can run any custom query (#12749) 2023-07-13 14:02:15 -04:00
Roberto Dip eb75e303ec change how team assignment works for the Puppet module (#12566) 
For #12532, all details of how this works/why is done are in the issue
description.
 2023-07-13 15:00:45 -03:00
Roberto Dip 53f0e281bf set DeferForceAtUserLoginMaxBypassAttempts in FV profile (#12729) 
Related to #12608, this automatically sets the
`DeferForceAtUserLoginMaxBypassAttempts` property to `1` on the
FileVault profile that's generated by Fleet.

This changeset also includes a migration to modify old FileVault
profiles that already exist in the database, and by virtue of that a
`InstallProfile` command will be issued to hosts that already have FV
enabled. During testing we found:

1. This doesn't affect users with FV already installed, they silently
get the profile updated without any changes.
2. Since the profile needs to be re-delivered, it'll go through the full
"pending" -> "verifying" -> "verified" cycle.
 2023-07-13 11:54:05 -03:00
Luke Heath a001fbf3ec Prepare v4.34.0 (#12706) 2023-07-11 14:38:57 -07:00
Marcos Oviedo a49e980394 Windows MDM identity certs missing check (#12702) 
This is related #12701 

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
- [X] Manual QA for all new/changed functionality
 2023-07-10 17:36:17 -03:00
Juan Fernandez be1f4cfa12 Fixed typo 2023-07-06 18:16:02 -04:00
Juan Fernandez e3d7269c3d Fixed typo 2023-07-06 18:13:49 -04:00
Juan Fernandez 2eacb3bcc2 Added changes 2023-07-06 18:11:32 -04:00
Marcos OviedoandRoberto Dip 96449dd47b Adding support for RequestSecurityToken messages - Windows MDM enroll endpoint (#12555) 
This relates to #12263 

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [X] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [X] Added/updated tests

---------

Co-authored-by: Roberto Dip <me@roperzh.com>
 2023-07-05 10:06:37 -03:00