Commit Graph
14516 Commits
Author SHA1 Message Date
Martin Angers c27c859b3a Windows MDM migration: implement fleetd notification and migration (#24185) 2024-12-02 09:14:10 -05:00
Martin Angers c4404d9d68 Windows MDM Migration: API, CLI and activities (#24141) 2024-11-26 11:52:56 -05:00
Martin Angers e5d2812654 Merge branch 'main' into feat-automatic-migrate-windows-hosts 2024-11-25 16:43:31 -05:00
Eric 5f5b7bb273 Website: Update CRM helper to handle contacts with no stage. (#24143)
Closes: https://github.com/fleetdm/confidential/issues/8975

Changes:
- Updated the update-or-create-contact-and-account helper to only check
the current stage value of a contact record if the value is set.
2024-11-25 14:58:25 -06:00
Luke Heath e8021462f5 Create mac-mozilla-firefox.yml (#24140) 2024-11-25 14:52:33 -06:00
RachelElysia 768d848946 Fleet UI: 4.60 unreleased bug fix for scrollable content (#24139) 2024-11-25 15:51:53 -05:00
Eric da13fb15fa Website: /endpoint-ops » /observability (#24111)
Closes: #24106

Changes:
- Changed the /endpoint-ops page to be at /observability
- Added a redirect for /ednpoint-ops that redirects users to the
/observability page with original query parameters intact.
2024-11-25 14:20:19 -06:00
Eric c53332259f Website: Update license dispenser form (#23838)
Closes: https://github.com/fleetdm/confidential/issues/7696

Changes:
- Added `stripe` as a dependency
- Updated the license dispenser form to take users to a stripe hosted
checkout page where they can provide their billing address and Tax ID
depending on their location.
- Updated the receive-from-stripe webhook to fulfill license dispenser
purchases made via stripe checkout
- Added a new action: get-stripe-checkout-session-url. This action
creates a Stripe Checkout session and returns the URL
- Updated the customer dashboard to have a link that users can visit to
update their billing information, add more hosts to their Fleet premium
license, or cancel their subscription.
- Added a new action: redirect-to-stripe-billing-portal. An action that
redirects users to a Stripe-hosted billing portal.
2024-11-25 13:55:56 -06:00
Lucas Manuel Rodriguez 7d04119245 Release fleetd 1.36.0 (#24136) 2024-11-25 16:34:09 -03:00
Konstantin Sykulev 1446d28029 github cli false negative vulnerability (#24100)
Added a cpe translation for the `gh` command. The software is identified
as `gh`, however, the cpe (`cpe:2.3:a:github:cli:2.62.0:*:*:*:*:*:*:*`)
name is labeled as `cli`, thus the mismatch.

https://github.com/fleetdm/fleet/issues/24009

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-11-25 12:32:10 -06:00
jacobshandlingandJacob Shandling bb4e3c632e UI - Fix another (less) flakey frontend test (#24110)
- [x] Added/updated tests

test-js (ubuntu-latest) SuccessCount / RunCount:
3/3

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-11-25 10:28:58 -08:00
Allen Houchins f47c44f685 Enable macOS Setup Experience for Workstations team (#24125)
In support of: https://github.com/fleetdm/confidential/issues/8790

I made the following changes to support the macOS Setup Experience in
`dogfood` for the Workstations team
- moved Software titles to their own dedicated folder and `yml` files so
they could be called via path
- edited the `macos_setup` configuration in the Workstations team yml
file.
- edited the `macos_setup_assistant` json file to skip certain items
during initial setup
- completed a `dry-run` successfully before submitting this pull request

# Expected behavior
When an ADE Mac boots for the first time, macOS Setup Experience will
automatically install Google Chrome, Zoom, Slack, and 1Password.

- Google Chrome will be downloaded via URL
- Zoom will be downloaded via URL
- Slack will be downloaded via VPP
- 1Password will be downloaded via VPP

No scripts have been included at this time and will be tracked in a
separate issue.
2024-11-25 12:27:56 -06:00
Luke Heath 95c51ac4d2 Update Engineering handbook (#24127) 2024-11-25 11:17:07 -06:00
Victor Lyuboslavsky 5abcf2ef3a Drop duplicate MySQL indexes. (#24107)
#24109 
Duplicate indexes identified after running pt-duplicate-key-checker
https://docs.percona.com/percona-toolkit/pt-duplicate-key-checker.html

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- For database migrations:
- [x] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [x] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [x] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
2024-11-25 10:03:19 -06:00
Martin Angers f0e1dccc8a Bugfix: use an HTTP client that supports proxies for APNS push notifications (#23988) 2024-11-25 09:45:38 -05:00
61a79f536b Include Linux disk encryption status in configuration profiles aggregate status response when applicable, fix disk encryption/MDM configuration order-of-operations issues, add integration tests for LUKS (#24114)
## Addresses #24112, #24116, #23587

**For #24112, Counts included:**
<img width="1392" alt="Screenshot 2024-11-22 at 5 31 06 PM"
src="https://github.com/user-attachments/assets/2bb306d7-1130-4106-aef8-475b8be1f6b2">

- [x] Include counts when disk encryption is enforced
- [x] Exclude counts when disk encryption isn't enforced
__
- [x] Added/updated tests

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
Co-authored-by: Ian Littman <iansltx@gmail.com>
2024-11-25 08:34:43 -06:00
Lucas Manuel Rodriguez 5cb85603a7 Lock rust dependencies for apple-codesign (#24123)
Fixes the following failures:
https://github.com/fleetdm/fleet/actions/runs/11984354126/job/33415026230
2024-11-25 11:04:21 -03:00
RachelElysia 65244eb556 Fleet UI: Fix learn more about JIT provisioning link (#24092) 2024-11-25 08:57:51 -05:00
RachelElysia b45aa4761d Fleet UI: Add more description to delete host modal (#24089) 2024-11-25 08:57:27 -05:00
RachelElysia 1f206a87b5 Fleet UI: Fix VMs bold letter bug (#23903) 2024-11-25 08:56:38 -05:00
Mike McNeil 4735340b07 Update transparency.ejs (#24117) 2024-11-24 21:17:47 -06:00
Alex Mitchell 8b7f7ed781 Update communications.md (#24072)
Switched the order of getting a contract reviewed and getting a contract
signed.
2024-11-23 00:27:32 -06:00
Ian LittmanandTim Lee 195bb861e0 Update contributor API docs to cover LUKS trigger/escrow endpoints (#23583, #23584) (#23943)
Other cleanup:

* Remove orphaned FileVault rotation ToC link
* Revise transparency endpoint to reference new "About Fleet"
terminology
* Remove enforce_bitlocker_encryption Fleet Desktop notification (that
notification is on Orbit config, which we don't document in contributor
docs, not on the Fleet Desktop endpoint)

---------

Co-authored-by: Tim Lee <timlee@fleetdm.com>
2024-11-22 20:51:57 -06:00
Jahziel Villasana-Espinoza ee73249f32 fix: return a better error when attempting to turn off MDM for a Windows host (#24044)
> Related issue: #23158

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-11-22 19:54:06 -05:00
RachelElysiaandJacob Shandling a6809039c8 FE: Fix flaky host summary tooltip test (#24029)
Let's see if this is any better

- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality

`test-js (ubuntu-latest)` SuccessCount / RunCount:
5/5 🎉 

___
after merging `main`:
`test-js (ubuntu-latest)` SuccessCount / RunCount:
5/5 
__

10/10 total 🎉🎉

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-11-22 15:34:51 -08:00
Luke Heath 3b64f10a77 Comment out flakey frontend test (#24105) 2024-11-22 17:09:35 -06:00
Rachael Shaw 7255596009 Add redirect for disk encryption guide (#24102)
For unreleased bug #24010
2024-11-22 16:40:13 -06:00
Luke Heath 18391b5901 Add TUF handbook page (#23674) 2024-11-22 14:27:26 -06:00
Eric a95a83cf2b Docs: change name of "Deploy Fleet" page (#23985)
Closes: #23759

Changes:
- Added a title meta tag to the "Deploy Fleet" documentation page to
change the name to "Hosting Fleet"

> Note: This only changes the title of the page in the UI on
fleetdm.com, the URL will still be `/docs/deploy/deploy-fleet`
2024-11-22 13:39:37 -06:00
Luke Heath 6c88513963 Update Reference-Architectures.md (#23990) 2024-11-22 13:39:27 -06:00
Tim Lee 7b932e8e49 linux key escrow progress windows (#24069) 2024-11-22 12:30:13 -07:00
Jahziel Villasana-Espinoza 5dab4f51b5 feat: do not run setup experience on hosts in a team with no software or script configured (#24073)
> Related issue: #24024 

# Checklist for submitter

Demo video: https://www.youtube.com/watch?v=F7p2PyJce7E

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-11-22 13:52:28 -05:00
Eric 2902d01691 Website: Updating bottom heading padding on software management page. (#24090)
Closes: #24066


Changes:
- Updated the padding on the bottom heading on the software management
page on smaller screens
2024-11-22 12:35:00 -06:00
Marko Lisica 04d1ded81a Remove step to apply env variables to profiles (fleetctl gitops is doing this) (#24078)
I beleive we don't need this step anymore, since `fleetctl gitops` will
replace it with real value and send to the server. This should be done
in #17309.
2024-11-22 19:30:40 +01:00
Mike McNeilandEric 3dd2a80bcc Add some comments and get eric started (#23666)
Co-authored-by: Eric <eashaw@sailsjs.com>
2024-11-22 12:14:50 -06:00
Noah Talerman 6e0327220b Enforce macOS 15.1.1 (#24075)
Deadline is Monday after 🦃 Thanksgiving (US holiday)
2024-11-22 13:00:40 -05:00
Lucas Manuel Rodriguez a8ba004c61 Add expiration checks for targets and snapshot roles (#24081)
[#8489](https://github.com/fleetdm/confidential/issues/8489)

We had the timestamp check.
Robert added the root check recently.
Am now duplicating the check for `snapshot` and `targets` metadata
files.

PS: Please review with whitespace changes disabled.
2024-11-22 14:46:03 -03:00
Drew Baker 87fac42da7 Update introducing-workbrew.md (#24076) 2024-11-22 12:43:18 -05:00
Gabriel Hernandez afc4cc5d23 add UI for new windows mdm page and automatic migration (#24068)
relates to #22896

Implements the UI for the windows automatic migration.

**new windows mdm page layout with automatic migration checkbox**


![image](https://github.com/user-attachments/assets/2909d6d2-e802-4dec-9c78-0b8f6a4466c0)

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [ ] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-11-22 16:52:03 +00:00
Mike McNeil 96f47af89a Update endpoint-ops.ejs (#24079) 2024-11-22 10:47:30 -06:00
Sharon Katz d80161a5b9 Added statistics for number of saved queries. (#24043)
Added statistics for number of saved queries.
2024-11-22 11:24:29 -05:00
Sarah Gillespie 9de98d80b7 Apply minimum OS version enforcement to MDM SSO endpoint (#23856) 2024-11-22 09:56:36 -06:00
Mike Thomas fa1065d0f9 Update software-management-feature-slide-1-1072x480@2x.png (#24065)
Updated image to remove placeholders
2024-11-22 10:41:26 +09:00
Mike McNeil ca27263cf6 Typofix: Update software-management.ejs (#24053) 2024-11-21 18:26:07 -06:00
Eric e8a0092d9f Website: Update endpoint-ops landing page view action (#24052)
Changes:
- Updated the endpoint ops view action to use the user's
primaryBuyingSituation for personalization if it is set, and to default
to the IT view if not (Note: this behavior is overridden with a purpose
query string. e.g., ?purpose=security.
2024-11-21 17:43:58 -06:00
Eric 948a790410 Website: update default personalization on endpoint ops page. (#24000)
Closes: #23987

Changes:
- Updated the endpoint ops page to default to the IT personalization if
no primaryBuyingSituation or `purpose` query string is provided/set
2024-11-21 17:26:57 -06:00
Eric 2f616fa93a 2024-11-21 Website: browser compatibility fixes (#24051)
Closes: #24046
Closes: #24047
Closes: #24048
Closes: #24050
Related to: #23574


Changes:
- Fixed the width of the login form on mobile devices
- Updated video modal styles on the /customer-stories page 
- Fixed the vertical alignment of the search input placeholder on the
/queries page
- Updated the height of the cards on the /customer-stories page
- Updated the horizontal padding on the /guides page
2024-11-21 17:15:53 -06:00
Konstantin SykulevandIan Littman 46f10b85cd Improved label(s) validation when running queries (#23834)
Previously when passing labels to the query run endpoints that do not
exist, the labels would simply be ignored. Now the endpoint will return
an error indicating which labels are invalid. This change also affects
the `fleetctl query` command `--labels` flag.

https://github.com/fleetdm/fleet/issues/23015

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Ian Littman <iansltx@gmail.com>
2024-11-21 16:13:30 -06:00
Eric ecc2bfb1f0 Website: Prevent scrolling when mobile nav menu is open (#23992)
Closes: #23705

Changes:
- Updated the styles and layout of the website to prevent scrolling when
the mobile navigation menu is open.
- Updated padding on the mobile navigation menu to keep the Fleet logo
in the same place when the menu is opened.
2024-11-21 15:09:04 -06:00
Ian Littman 43f21c0d95 Improve LUKS escrow trigger error messages (#24030)
- [x] Added/updated tests
~~- [ ] Manual QA for all new/changed functionality~~ Testing as part of
E2E QA
2024-11-21 13:33:37 -06:00