Commit Graph
2694 Commits
Author SHA1 Message Date
Noah Talerman 30674b6094 Fleet server configuration: Remove apple_scep_signer_allow_renewal_days (#38538)
- This config doesn't exist
2026-01-21 17:37:15 -05:00
melpikeandRachael Shaw 2ecec2b0aa Clarify instructions for API-only user creation (#38387)
Rephrase instructions for creating API-only users for clarity.

<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #35696

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
2026-01-21 15:19:06 -06:00
Steven Palmesano 897787b1ac Add link to our issue for SCIM support (#38460)
Re: https://fleetdm.slack.com/archives/C07MYE3KKPX/p1768331054297279
2026-01-21 15:17:33 -06:00
Jonathan KatzandMarko Lisica 902b5a5d6a Contributor API docs update (#38517)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #37264 
Adds a fleet maintained app example with the new `slug` field in the
response for `/software/batch/:request_uuid` from #38497
See the PR above for an explanation on why this was added.

---------

Co-authored-by: Marko Lisica <83164494+marko-lisica@users.noreply.github.com>
2026-01-20 14:57:15 -05:00
Martin Angers 9db733a5dc Clarify when the browser field is included, along with the extension_for field (#38494)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #31519
2026-01-19 16:08:25 -06:00
c1e2b637f9 API and YAML reference: Add missing interval field for policy automations (#38382)
How we learned we were missing these:
https://github.com/fleetdm/fleet/pull/38325#discussion_r2691714596

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
Co-authored-by: Lucas Manuel Rodriguez <lucas@fleetdm.com>
2026-01-16 15:19:21 -06:00
Jordan Montgomery 7943fb5666 Update MDM instructions in design QA considerations (#38371)
Clarified MDM design considerations for testing Android, Windows, and
Apple MDM to make us think about turning off all MDMs (ref #38369)
2026-01-15 09:54:02 -06:00
Martin Angers 6879afdbfb Fix activity docs via code generation (#38340) 2026-01-14 16:37:46 -06:00
bcf5ebd019 Preview of v4.79.0 doc changes (#35930)
This PR will remain in draft as a preview of upcoming documentation
changes for 4.79.0

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
Co-authored-by: Marko Lisica <83164494+marko-lisica@users.noreply.github.com>
Co-authored-by: Magnus Jensen <magnus@fleetdm.com>
Co-authored-by: Ian Littman <iansltx@gmail.com>
Co-authored-by: Lucas Manuel Rodriguez <lucas@fleetdm.com>
Co-authored-by: melpike <79950145+melpike@users.noreply.github.com>
Co-authored-by: Steven Palmesano <3100993+spalmesano0@users.noreply.github.com>
Co-authored-by: Carlo <1778532+cdcme@users.noreply.github.com>
2026-01-14 14:47:06 -06:00
jacobshandling bbef36a0b7 Compute, ingest, persist, and serve .app bundle executable hashes and paths (#38118) 2026-01-14 09:18:35 -08:00
Dale Ribeiro ae7cfeb754 Fix typo in MDM Migration section of README (#38258) 2026-01-13 18:11:55 -06:00
Ian LittmanandMike Thomas ba0d13f5ee Update VPP guide to mention custom apps (#38019)
Guide for #32461.

---------

Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
2026-01-13 16:46:58 -06:00
Noah Talerman 9df18acc79 YAML reference: Some macos_setup keys are cross-platform (#37680)
- Document which keys are supported on which platforms.
- Separate feature request to come up with a cross-platform name for
`macos_setup` is here: https://github.com/fleetdm/fleet/issues/33059
2026-01-13 15:39:31 -06:00
Konstantin Sykulev b728d7a075 Adjusted certificate rest api docs with more details about auth header (#38134)
**Related issue:** #35198

Making the docs clearly specify what node key and bearer do to the api
responses.
2026-01-12 15:45:22 -06:00
Noah Talerman e132c758a8 API reference: Cleanup (#38190)
- Acronym was mentioned twice
2026-01-12 14:48:25 -06:00
Scott Gress 3907243881 Rename auto-update keys (#38100)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** For #33391

## Testing

- [X] Added/updated automated tests
there's a number of tests for this, if they still pass we're in good
shape
- [X] QA'd all new/changed functionality manually
I tested the front-end successfully, and saw an auto-update go through
on an ipad. Also verified that the activity metadata is correct.
2026-01-12 11:08:26 -06:00
Victor Lyuboslavsky e67a415c2b Moving Android certificates docs. (#37622)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #37580
2026-01-09 09:27:44 -06:00
kitzyandRachael Shaw 4ab5874e25 Document service provider metadata for SSO (#37457)
Added section on service provider metadata for SSO configuration.

Resolves [#12947](https://github.com/fleetdm/confidential/issues/12947)

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
2026-01-08 11:19:04 -06:00
Rachael Shaw ca2fa91477 API docs: Fix parameter type (#37956)
Looks like a copy/paste issue we never caught
2026-01-06 17:35:19 -06:00
Rachael Shaw 091c8bbbd3 API docs: Typo fix (#37954)
Additional query parameters use `&` instead of `?`
2026-01-06 17:02:10 -06:00
Noah Talerman 5b41bb4c53 API reference: GET /commands default page length and sort (#37899)
These undocumented defaults cause confusion:
https://github.com/fleetdm/fleet/issues/32785#issuecomment-3715226225
2026-01-06 11:14:31 -06:00
Scott Gress e35684268d Add auto-update schedule to software activity updates (#37715)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #35458

# Details

This PR adds new metadata to the `ActivityEditedAppStoreApp` activity
relating to the app's auto-update schedule. The data will be included
with every `ActivityEditedAppStoreApp` activity regardless of whether
the values changed. I have an open question about this on the [activity
docs
PR](https://github.com/fleetdm/fleet/pull/36534/changes#r2648884183).

One functional change to note here is that the act of recording the
activity has been moved up a level into the endpoint code, because the
activity now contains metadata from two different service methods (one
that updates the VPP app, and one that creates the auto-update
schedule).

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

## Testing

- [X] Added/updated automated tests
- [X] QA'd all new/changed functionality manually
2026-01-06 10:52:26 -06:00
Nico 19113d22be Add Testing NATS logging local development docs (#37759)
**Related issue:** Resolves #37854 

<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
Adds instructions on how to set up a NATS server locally to use as a log
destination.
Follow-up of https://github.com/fleetdm/fleet/pull/36527.
2026-01-06 09:11:58 -03:00
b6d19de0d9 Add support for publishing logs to NATS. (#36527)
**Related issue:** Resolves
[34890](https://github.com/fleetdm/fleet/issues/34890)

# Checklist for submitter
- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.

## Testing
- [X] Added/updated automated tests
- [X] QA'd all new/changed functionality manually

## New Fleet configuration settings
Looking at other log destinations, I couldn't find anything relevant in
GitOps. Please let me know if I missed something, however.

## fleetd/orbit/Fleet Desktop
I've tested this on both Linux and MacOS.

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
Co-authored-by: nulmete <nicoulmete1@gmail.com>
2026-01-06 09:10:32 -03:00
Allen Houchins cc50ede021 Typo fix (#37872)
This pull request makes a minor update to the `docs/scripts.yml` file,
standardizing the formatting of a script step's name for consistency.
2026-01-05 15:28:43 -06:00
Steven Palmesano cb4e418f4c API-Only -> API-only (#37751) 2026-01-05 11:42:23 -06:00
Noah Talerman f2f1c13f38 [YAML reference] Simplify language for hash_sha256 (#37852) 2026-01-05 10:54:07 -06:00
Steven Palmesano aa56063553 Format SQL query for readability (#37753)
Sorry for having so many PRs on this one!

Thank you again for correcting my original formatting. I was looking
over this more and wanted to improve how it appears on the site for
better readability.
2026-01-05 10:53:28 -06:00
Lucas Manuel Rodriguez 2dafd11355 Rollback Entra legacy 'device ID' ingestion (#37687)
Resolves #37686.

Rolling back the detail query change in
https://github.com/fleetdm/fleet/commit/527c2230e9d0b3edd662741b3aa91b0b8e89c372.
The test in the original commit was not related to the change so I kept
it as it was added to make sure order of processing of query results.

I tested the ingested device ID matches the one in Entra and that Yes/No
compliant functionality works as expected.

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

## Testing

- [x] QA'd all new/changed functionality manually
2026-01-05 13:28:43 -03:00
Steven Palmesano 6080ca6a1e Add FDA pre-approval for fleetd (#37781) 2026-01-05 09:35:36 -05:00
Steven Palmesano 424ae271c8 Tines reorg (#37731)
Resolves #34967.
2025-12-29 13:04:49 -06:00
Steven Palmesano 239c1fd62b Solutions symlinks (#37732)
Documentation and one symlink created.

Also, moved an existing profile in the iOS directory and updated the
relevant article that links to it.
2025-12-29 12:42:56 -06:00
Noah Talerman c0c54ca1f8 API docs typo: Change labels and configuration fields to body (#37656) 2025-12-23 14:06:55 -06:00
Noah Talerman e1aded2e49 Use "array" instead of "string[]" (#37655)
To be consistent
2025-12-23 14:04:29 -06:00
Magnus Jensen 8cf232513e Small updates to MDM overview (Contributing docs) (#37609)
As part of the on-call responsibilities, I looked over the MDM overview,
and did some small updates/changes.
2025-12-22 17:05:29 -04:00
Marko Lisica 59f318c77a Clarify platform filter description in API docs (#36618)
Related to:

- #34072
2025-12-22 12:58:20 -06:00
Jonathan KatzandMarko Lisica 5750e4393a Docs change: GET setup_experience/software allows comma separated values (#37499)
**Related issue:** #35554 

Ability to add multiple `platform` values is added to "List setup
experience software" (`GET api/v1/fleet/setup_experience/software`) in
PR #37468. This change is similar to how `platform` can be set in the
"List software" endpoint (`GET /api/v1/fleet/software/titles`).

---------

Co-authored-by: Marko Lisica <83164494+marko-lisica@users.noreply.github.com>
2025-12-22 13:25:19 -05:00
Rachael Shaw 45b162f940 Preview of v4.78.0 doc changes (#35929) 2025-12-19 17:07:58 -06:00
Steven Palmesano f955f233ec Fix dashes so the formatting will show correctly on GitHub (#37492)
Sorry for opening another PR on this! Not sure how, but some weird
dashes snuck in and it threw off the formatting.

Screenshots of the rich text before and after below.

<img width="1049" height="276" alt="Screenshot 2025-12-18 at 12 19 15"
src="https://github.com/user-attachments/assets/1fefafda-0b94-4f20-a39a-ace4fa874457"
/>
<img width="1077" height="322" alt="Screenshot 2025-12-18 at 12 20 38"
src="https://github.com/user-attachments/assets/ef7274d2-501a-4394-8c34-78a9a30c43c2"
/>
2025-12-19 09:43:55 -06:00
Steven Palmesano 0ae3392a4a Rename Android config profiles for consistency (#37486)
The file names should describe what they do, not the policies that they
use inside.
2025-12-19 09:43:38 -06:00
George Karr f616261f59 Add engineering spec review checklist (#37333)
For #33200
2025-12-18 18:00:39 -06:00
Allen Houchins 0703dc5e35 Add 2 new app categories: 🔐 Security and 🛠️ Utilities (#37098)
This pull request adds support for two new software categories,
"Security" and "Utilities", across the application. The changes ensure
these categories are available in the database, frontend type
definitions, UI elements, documentation, and are fully tested in both
migration and integration test suites.

**Database and Migration Updates:**
* Added "Security" and "Utilities" entries to the `software_categories`
table and updated initial data in `schema.sql`.
* Introduced a new migration
(`20251210000000_AddSecurityAndUtilitiesCategories.go`) to insert/remove
these categories, with an accompanying test to verify migration
behavior.
[[1]](diffhunk://#diff-57da59e73fff8f2ffccd167299027899614281c591b79715b7000bed0e9d8516R1-R31)
[[2]](diffhunk://#diff-5e6db34b45e83ec5cf2b9cb41e4bfd4ee934f456dd9c0ae4313a448d39319c72R1-R28)

**Frontend and Documentation Updates:**
* Updated the `SoftwareCategory` type and category lists to include
"Security" and "Utilities", ensuring they appear in the UI and are
selectable.
[[1]](diffhunk://#diff-4297079e443d574eb530c70ef48de3cab80e56f783c7b395d58c31c29be6bb0eL77-R79)
[[2]](diffhunk://#diff-405dcd4f0bd6881e4b20a75212467d13c143ddc486b5c9d29ed9035033c32361R25-R26)
* Added documentation for the new categories in `yaml-files.md`.

**Testing Enhancements:**
* Added and updated tests to verify the new categories are displayed and
handled correctly in both frontend and backend integration tests.
[[1]](diffhunk://#diff-d151ee297fdaf54f8ea7027bc46de12247c43406b464265f24ade5a49cb19e49R210-R211)
[[2]](diffhunk://#diff-bbd0c5a6bc2f9a24e633031d4c6a3f5b0be7cbfe78ef1b56cdf9a7a2c32e21e2R19358-R19365)
[[3]](diffhunk://#diff-2bd8ca2ddaad7aac0c438a2afd76a26872378249f757c9c81a31005d0e57cf1fR18447-R18460)
2025-12-18 13:26:50 -06:00
Steven Palmesano ccc75121b1 Add best practices to Solutions (#37489)
So we don't forget.
2025-12-18 12:08:56 -06:00
Magnus Jensen 991ddc8cb3 remove product group guides mentions in contributing docs (#37325)
I was just browsing around and saw the concept of product group guides
is gone, so just cleaning up some old links
2025-12-18 09:42:47 -06:00
Steven PalmesanoandNoah Talerman 819ae07d3d Improve Windows migrate to Fleet notification (#37310)
This version shows the notification every five minutes, has a custom
title, runs in the user context, and has a more detailed message since
we no longer have the 255 character limit.

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2025-12-17 15:35:44 -06:00
Steven Palmesano f9c15047cf Fix script reference (#37148)
Forgot to update the reference in the policy.
2025-12-17 15:35:33 -06:00
Rachael Shaw 01746ed6ab Docs: Clarify expected GitOps file extension (#37422)
Related to:
+ https://github.com/fleetdm/fleet/issues/30161
+ https://github.com/fleetdm/fleet/issues/36212
2025-12-17 14:36:41 -06:00
Konstantin Sykulev c39a5b2e2d Adds activities for certificate templates (#36903)
**Related issue:** Resolves #36701

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)

## Testing

- [x] Added/updated automated tests
- [x] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)
- [x] QA'd all new/changed functionality manually

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **New Features**
* Added activity tracking for Android certificate template edits and
deletions via GitOps.

* **Chores**
* Updated certificate template batch operations to track which teams
were affected by changes.

<sub>✏️ Tip: You can customize this high-level summary in your review
settings.</sub>

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2025-12-17 11:08:40 -06:00
Luke Heath 37420f62e7 Change API endpoint from POST to GET for Android token (#37368) 2025-12-17 10:56:29 -06:00
Magnus JensenandRachael Shaw 5065843ec9 Update incorrect teams VPP gitops description (#37061)
Clarify the behavior of the 'teams' field in VPP configuration.

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
2025-12-16 14:31:10 -06:00