Discharge7443/fleet
1
0
Fork 0
Code Issues Pull Requests Actions 22 Packages Projects Releases Wiki Activity
5,870 Commits 2 Branches 0 Tags
a950e9d095359c8de59f430351e96144ea8ffd21
Commit Graph
923 Commits
Author SHA1 Message Date
Gabriel Hernandez a950e9d095 Feat/update query doc sidepanel (#8214) 
* create new components for query side panel

* add reusable icon component that uses svg for icons

* integrate with new osquery_fleet_schema.json data

* update UI to work with osquery_fleet_schema.json

* add remark-gfm to safely support direct urls in markdown

* move fleet ace into markdown component so we can render code with ace editor

* add testing for new query sidebar

* remove incomplete tests for query sidepanel
 2022-10-14 17:45:57 +01:00
Lucas Manuel Rodriguez c16ab5f823 Fix undetected missing migrations (#8228) 2022-10-14 13:26:04 -03:00
RachelElysia 7804406aa8 Fix mdm enrollment status api call (#8218) 2022-10-14 09:29:40 -05:00
RachelElysia 5084ea2783 Fleet UI: Select all fix on table checkboxes (#8198) 2022-10-13 09:29:30 -04:00
RachelElysia 564a25883f Fleet UI: Fix padding between multiple enroll secrets (#8193) 2022-10-13 09:28:59 -04:00
Martin Angers fae8e4ca2c Translate the AppConfig and Team validation messages to be more user-friendly (#8171) 2022-10-12 17:10:50 -04:00
Juan Fernandez 6939af045d Fleet desktop should use lightweight endpoint for getting failing policies count (#8159) 
Fleet desktop should use lightweight endpoint for getting failing policies count
 2022-10-12 17:13:43 -03:00
Juan Fernandez 91ea7bf244 Vulnerabilities not detected if NVD CVE feed is unavailable or rate limited (#8191) 
If there is any problem when synching NVD source, proceed with vuln scan
 2022-10-12 15:09:18 -04:00
Juan Fernandez 72cfdac634 Only ingest installed deb_packages (#8160) 
Only ingest deb_packages with status = 'install ok installed'
 2022-10-12 14:27:07 -04:00
Roberto Dip 4042f8d826 add browser-related security headers to HTML responses (#8180) 
related to #8031, this adds the following headers to HTML responses:

- Strict-Transport-Security: informs browsers that the site should only
  be accessed using HTTPS, and that any future attempts to access it
  using HTTP should automatically be converted to HTTPS.
- X-Frames-Options: disallows embedding the UI in other sites via
  <frame>, <iframe>, <embed> or <object>, which can prevent attacks like
  clickjacking.
- X-Content-Type-Options: prevents browsers from trying to guess the MIME
  type which can cause browsers to transform non-executable content into
  executable content.
- Referrer-Policy: prevents leaking the origin of the referrer in the
  Referer.

additionally, this ensures we set `X-Content-Type-Options` for CSV and
installer responses.
 2022-10-12 10:19:21 -03:00
Martin Angers d321cfc68e Add inherited policies to the team's list policies response payload (#8068) 2022-10-12 08:35:36 -04:00
Lucas Manuel Rodriguez 42c47a6fa7 Add missing return to ingestKubequeryInfo (#8178) 
* Add missing return to ingestKubequeryInfo

* No need to log error twice
 2022-10-12 09:00:49 -03:00
Tomas Touceda d912376f02 Handle tcp read timeouts (#8163) 
* Handle tcp read timeouts properly

* Add changes file

* Fix bad mini refactor after nailing the test

* Update based on review

* Update comment
 2022-10-11 13:58:52 -03:00
RachelElysia 7de1b847ea Fleet UI: Host's software details links to software, improved responsiveness (#8080) 2022-10-11 09:27:20 -04:00
Roberto Dip e630fabf89 token rotation for fleet desktop (#7779) 
This implements what's described in detail here https://github.com/fleetdm/fleet/blob/main/proposals/fleet-desktop-token-rotation.md
 2022-10-10 17:15:35 -03:00
gillespi314 ca379e7459 Fix directIngestOSWindows error in query ingestion for non-Windows hosts (#8148) 2022-10-10 13:27:15 -05:00
RachelElysia 6d94472224 Fleet UI: Move status from route param to query param (#8035) 2022-10-10 14:07:47 -04:00
Gabriel Hernandez bc194d18c7 Feat/update live query states (#8122) 
* add awaitng results state to live query search

* make spinner more reusable and add it to query page awaiting results

* create common QueryResultsHeader component to use on query policy flows
 2022-10-10 15:39:49 +01:00
Frank Sievertsen 1eacecf637 Add new missing value to existing status URL parameter at the GET /hosts endpoint (#7916) 2022-10-10 07:45:39 -04:00
Frank Sievertsen b25e74b285 add missing_30_days_count to host_summary response (#7915) 2022-10-08 08:58:27 -04:00
Frank Sievertsen e9f7066d87 7135 host display name (#7873) 2022-10-08 08:57:46 -04:00
Roberto Dip bfe698d090 cleanup all policy memberships for a host on re-enrollment (#8120) 
Related to #7664, this cleans up all policy memberships for a host when its re-enrolled, afterwards only the relevant policy memberships for the host will be created.
 2022-10-07 11:36:17 -03:00
RachelElysia 34088aaab9 Fleet UI: /login route redirects to /dashboard if logged in (#8102) 2022-10-06 13:33:32 -04:00
RachelElysia 92d6161edb Fleet UI: Clarify last fetched and last seen time on Manage Host Page (#8087) 2022-10-06 09:15:40 -04:00
Noah Talerman e98941aeaf Prepare for 4.21.0 (#8011) 
This PR addresses the instructions under number (1) in the releasing Fleet steps: https://fleetdm.com/docs/contributing/releasing-fleet#what-to-do

- Update CHANGELOG
- Bump versions
 2022-10-05 13:18:22 -07:00
Martin Angers c23a15394e Keep created_at timestamp of existing enroll secrets (#8062) 2022-10-05 08:35:36 -04:00
RachelElysia ee2f28e890 Fleet UI: Rename to machine serial and private IP address (#8074) 2022-10-04 13:35:32 -04:00
RachelElysia 69ee2bd4c1 Fleet UI: Update create team name suggestions (#8073) 2022-10-04 13:35:15 -04:00
Zach Wasserman 44dc5ab175 Add handling for Apple Team ID in Notarization (#7991) 
Fleet's Notarization workflows no longer work without this argument, so this is added as an optional argument for Notarization.
 2022-10-04 09:48:21 -07:00
gillespi314 e3590beaf7 Ingest ReleaseId from Windows registry (#8030) 2022-10-04 10:34:08 -05:00
RachelElysia fe9effa575 Update Docs: Add file carving and links to permissions documentation (#8064) 2022-10-04 11:12:10 -04:00
RachelElysia 01654925c7 Fleet UI: Add optional tooltip delay used on compatibility tooltip (#8065) 2022-10-04 10:03:51 -04:00
Juan Fernandez 812d3c85de Fixes various bugs with NVD vulnerability detection (#7963) 
- Improved NVD CPE matching process.
- Fixed bug with the 'software/<id>' endpoint not showing the generated_cpe value.
 2022-10-04 07:04:48 -04:00
Frank Sievertsen a5912bedea API Bugs: Team view (fleet/teams/{id}) #6970 
Fix host_count and user_count being always returned as `0` in `teams/{id}` endpoint.
 2022-10-04 09:26:04 +02:00
Lucas Manuel Rodriguez a4d7e81475 Orbit to support environments with revoked enroll secrets (#8056) 
* Support environments with revoked enroll secrets

* Add instructions on how to fix Orbit enroll

* Rename to last_recorded_error

* Add alternative instructions
 2022-10-03 17:28:19 -03:00
Roberto Dip c0bb0cc4e7 avoid panic when storing a nil pointer in cached_mysql (#8020) 
related to #7420, this improves the logic of the clone function in cached_mysql to properly handle nil and nil pointers.
 2022-10-03 13:29:20 -03:00
Roberto Dip cd2ab6b17c add server side validation for emails (#8022) 
related to https://github.com/fleetdm/fleet/issues/7199, this adds email validation to the `verifyCreateShared` which is used for user creation in the server.

validation messages come directly from Go's `net/mail` package.

```
~/fleet $ curl 'https://localhost:8080/api/latest/fleet/users/admin' -X POST -H 'Authorization: Bearer $TOKEN' --data-raw '{"email":"asdf","name":"asdf@asd.com","password":"as;lkdfjasdlk;fja3234@","global_role":"observer","teams":[]}'
{
  "message": "Validation Failed",
  "errors": [
    {
      "name": "email",
      "reason": "mail: missing '@' or angle-addr"
    }
  ]
}
```
 2022-10-03 13:29:01 -03:00
Martin Angers 8eee0b35f3 Add validations for agent options' command-line flags section. (#7979) 2022-10-03 08:29:41 -04:00
Gabriel Hernandez 64fa2bafe4 fix sso input values with leading or trailing spaces by adding trimming (#8000) 
* add trimming to sso form data values

* add sso login failure error message on login form
 2022-09-30 14:59:43 +01:00
gillespi314 2a6895b015 Log user email upon successful SSO login (#8012) 2022-09-29 09:25:45 -05:00
RachelElysia 7cdc2e2027 Fleet UI: Helpful team agent errors (#8001) 2022-09-28 13:31:44 -04:00
Gabriel Hernandez 7147859de1 fix label filter showing under table header and adding no custom filter state (#7998) 2022-09-28 15:12:37 +01:00
RachelElysia b9046da481 Fleet UI: Print mode fixed (#7982) 2022-09-27 21:05:12 -04:00
RachelElysia 0291a709e2 Fleet UI Bug Fix: Error adding integration doesn't clear fields (#7988) 2022-09-27 21:04:19 -04:00
gillespi314 749ff9ec2b Add logging to capture user email upon successful login (#7927) 
* Log user email upon successful login

* Add user email to logger context

* Use logging.With Extras for login email
 2022-09-27 16:32:46 -03:00
Martin Angers 142e298631 Update osquery validations from 5.4.0 to 5.5.1 (#7960) 2022-09-27 08:35:57 -04:00
Juan Fernandez d7ca8fcd66 Reverted changes made to Fleet Desktop - should not use the lightweight 'desktop' endpoint (#7919) 
Reverted changes made to Fleet Desktop. Desktop should not use the lightweight 'desktop' endpoint
 2022-09-23 15:18:19 -04:00
Sharvil ShahandRoberto Dip 7d4e2e2b4b Orbit remote management for flags (#7246) 
Co-authored-by: Roberto Dip <dip.jesusr@gmail.com>
 2022-09-24 00:30:23 +05:30
Gabriel Hernandez fca5ad3158 add edit agent options activity text (#7695) 2022-09-23 12:05:07 -04:00
RachelElysia b23374ad16 Fleet UI: Placeholder text vertical padding (#7828) 2022-09-23 10:44:14 -04:00