Commit Graph
10354 Commits
Author SHA1 Message Date
Lucas Manuel Rodriguez c46b6bdbbe Remove ineffective rate limit to /api/fleet/device/ping and api/fleet/orbit/ping endpoints (#16334)
#16076

This change removes ineffective rate limit to `/api/fleet/device/ping`
and `api/fleet/orbit/ping`.
Currently these endpoints are not rate limited, because the rate
limiting used in these was the `errorLimiter` which only takes effect if
the request fails and the ping endpoints never fail. So... we were
making ineffective Redis accesses on every `/api/fleet/device/ping` and
`api/fleet/orbit/ping` requests (we use Redis as the limiter store).

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
2024-01-25 15:05:52 -03:00
RachelElysiaandGabriel Hernandez 6e7174c22f Frontend: UI Vulnerabilities feature (#16322)
Co-authored-by: Gabriel Hernandez <ghernandez345@gmail.com>
2024-01-25 13:03:44 -05:00
Eric 5b0360b517 Website: Update website navigation labels (#16337)
Changes:
- Added an "Articles" label to the community dropdown in the website's
navigation menu (Mobile and desktop)
- Updated the `z-index` value of the mobile navigation menu to prevent
the website's footer fro being visible when the menu is open on small
pages.
2024-01-25 11:02:14 -06:00
Eric c16a568e8e Website: Update mobile documentation navigation links (#16323)
Changes:
- Added links to /tables, /queries, /support, and the releases page of
the Fleet GitHub repo to the mobile documentation nav menu.
- Updated the color of the `.border-bottom` bootstrap class to match
wireframes
2024-01-25 09:36:52 +09:00
Eric 298fee8229 Website: Update footer styles (#16330)
Closes: #16329

Changes:
- Updated the website footer to have a higher z-index than the parallax
image layers on the homepage and product landing pages to prevent the
layers of the image from covering the links in the footer.
2024-01-24 17:28:43 -06:00
Tim Lee 79b5baa297 4345 OS Vulnerabilities Backend (#16303)
#4345 

This backend feature branch includes the following PRs:

macOS Vuln Matching:
#15837 
#15990 
#16077 

Bugs / Issues:
#16004
 #15905 
#16226 

Windows Vuln Matching
#16047 
#16049 
#16085 
#16099 

API:
#16215
2024-01-24 12:18:57 -07:00
Victor Lyuboslavsky edee09e22a Added parameter to PATCH /fleet/teams/:id endpoint (#16254)
API doc update for #15609

Added parameter to PATCH /fleet/teams/:id endpoint
2024-01-24 13:06:15 -06:00
Victor Lyuboslavsky 970a37c87b Updated flags for osquery 5.11 (#16239)
#16180
osquery flag validation has been updated for osquery 5.11
- new flags have been added to validation
- `table_exceptions` flag has been replaced with
`ignore_table_exceptions`

NOTE: It appears the last time this flow was run on Linux. I moved
several flags from the automatically generated section to the linux
section.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-01-24 12:24:11 -06:00
99163d5dfc MDM Custom settings (profiles) - API changes (#14230)
API changes for the Windows configuration profiles story:
- #13281 

It's **ready for review**, but marked as a draft because of KPI (PR open
time)

- DONE: Remove activity types changes before merging (those will be
automatically generated)

#### `profile_id` and `profile_uuid` changes specified in following
ticket:
- #15274

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
Co-authored-by: Rachael Shaw <r@rachael.wtf>
2024-01-24 11:13:56 -06:00
Victor Lyuboslavsky 30f3d585f4 Updated fleetd-chrome to use non-beta location. (#16295) 2024-01-24 11:10:24 -06:00
Rachael Shaw 88d8bf3b90 Update docs for CIS benchmark support (#16211) 2024-01-24 09:57:19 -05:00
JDandMike Thomas c3da46fb00 Article: Introducing Windows MDM (#16289)
Article: Introducing Windows MDM
https://github.com/fleetdm/confidential/issues/4602

Graphics: https://github.com/fleetdm/confidential/issues/4602

---------

Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
2024-01-24 09:38:54 -05:00
RachelElysia b887de6c4f Fleet UI: Update 1 missed page title (#16298) 2024-01-24 09:24:36 -05:00
Mike Thomas 19809ac127 Website - text change on device management footer (#16314)
Website - text change on device management footer


.
2024-01-24 22:44:20 +09:00
Mike ThomasandEric 109ffae251 Website update device management (#16312)
Updated messaging on the device management landpage

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-01-24 22:22:24 +09:00
Mike ThomasandEric 95cee66a84 Website update homepage 2024 01 22 (#16311)
Updated messaging on the homepage.

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-01-24 22:08:31 +09:00
EricandMike Thomas 11fda29c87 Website: Add parallax image to homepage and landing pages. (#16035)
Closes: #14987


Changes:
- Added a new component that displays a Fleet cloud city image with a
parallax effect when scrolled.

---------

Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
2024-01-24 14:18:07 +09:00
Luke Heath bcc1799e07 Prepare v4.43.3 (#16297) 2024-01-23 17:15:19 -06:00
Luke Heath 576405b029 Typo fix (#16306) 2024-01-23 16:52:05 -06:00
Roberto Dip 3cb577a766 add orbit changelog for 1.20.1 (#16290) 2024-01-23 15:46:53 -06:00
Sharon KatzandRachael Shaw 09f9e4ba82 16026 - document that Disa-stig linux distribution is not supported. (#16281)
Co-authored-by: Rachael Shaw <r@rachael.wtf>
2024-01-23 14:19:51 -06:00
Jacob Shandling 9f054b0535 UI - add padding to my device page (#16287) 2024-01-23 13:56:47 -05:00
Jacob ShandlingandJacob Shandling cad4ccadfd UI - fix position of Copied! in enroll secrets table (#16280)
<img width="786" alt="Screenshot 2024-01-23 at 5 25 51 PM"
src="https://github.com/fleetdm/fleet/assets/61553566/944b4ef6-e059-4e68-bef9-4f23b454f488">

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-01-23 18:33:09 +00:00
Mike McNeilandMike Thomas 5098b4233f Update integrations.ejs (#15686)
Mike T:
I had to update the styles a touch to accommodate the longer text. I
also suggested moving the content about custom workflows to a new line,
like this:

<img width="1460" alt="image"
src="https://github.com/fleetdm/fleet/assets/78363703/f193a0bf-68ac-45bc-af93-200f85c7f25a">

---------

Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
2024-01-23 11:06:53 -06:00
Luke Heath 877cc4d8fd Windows removal script (#16172) 2024-01-23 10:43:31 -06:00
RachelElysia 82887fc90c Frontend: Cleanup 42 js warnings (#16219) 2024-01-23 09:16:10 -05:00
Sam Pfluger 2d33344f33 Remove repetitive links in Handbook/company/communications#all-hands (#16269) 2024-01-22 18:59:56 -06:00
Mike McNeil a750a23b24 🕳️👖 vs 🐍👖 (#16265)
Malware detection is not exclusively "vuln management" (arguably not VM
at all)


like finding a snake in your pants vs a hole in your pants
2024-01-22 18:28:56 -06:00
Luke Heath 0f245df4fe Clarification and typo fix in releasing Fleet docs (#16266) 2024-01-22 17:13:07 -06:00
Luke Heath 0430738030 Prepare v4.43.2 (#16261) 2024-01-22 15:55:43 -06:00
Noah Talerman 8b33ab0dc2 Update story issue template (#16233)
- Clarify that documentation changes can be either in public-facing docs
(fleetdm.com/docs) or contributor docs
2024-01-22 12:27:00 -06:00
RachelElysia 8f82c24cf4 Fleet UI: Update software icons (#16224) 2024-01-22 13:02:27 -05:00
Roberto Dip f078660243 use the configured EntityID for audience validation on MDM SSO (#16144)
for #16139 this fixes a copy/paste error that caused the MDM SSO flow to
validate audiences using the global config EntityID

since we also consider an audience valid if you set EntityID to be:

- the same in both (case for local dev)
- your Fleet URL or the full path to the SSO API endpoint (QA)

we didn't notice this until now.
2024-01-22 14:30:45 -03:00
Jacob ShandlingandJacob Shandling f0db77a4b7 fix a typo in the regex for a test (#16253)
Correct the regex to match 1 or 2 digits, not 1 or 2 backslashes

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-01-22 16:37:44 +00:00
Victor Lyuboslavsky a5482f6e6a Team host expiry. (#16188)
Teams can configure their own host expiry setting. If global host expiry
is enabled, teams cannot disable host expiry, but they can set a longer
(or shorter) expiry time (in days).
- Added `host_expiry_settings` to team spec, which can be used via
fleetctl apply.
- Added `host_expiry_settings` to PATH /fleet/teams/:id endpoint.


#15609 (parent)
#15966 (subtask)

TODO: Create PR for API docs change: added parameter to `PATCH
/fleet/teams/:id` endpoint

# Checklist for submitter

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-01-22 10:00:02 -06:00
Victor Lyuboslavsky 3669089a11 Re-enabling tests in fleetd release flow. (#16229)
#16165 

Fixed test by adding missing dependencies. Added back test to
fleetd-chrome release workflows.
2024-01-22 09:54:16 -06:00
RachelElysia 11b5488b50 ChromeOS tables: Surface ChromeOS errors in Fleet UI for privacy_preferences columns (#16196) 2024-01-22 09:43:48 -05:00
Mike McNeil ee5609830b Website: Footer pt3 + pricing (#16249)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any permissions changes (docs/Using
Fleet/manage-access.md)
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-01-21 23:55:01 -06:00
Mike McNeil 06680c7939 Website: Footer links pt 2: Update layout.ejs (#16248)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any permissions changes (docs/Using
Fleet/manage-access.md)
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-01-21 23:30:08 -06:00
Mike McNeil fa43332fb8 Update footer link (#16244)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any permissions changes (docs/Using
Fleet/manage-access.md)
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-01-21 23:07:58 -06:00
Mike McNeil fa75fb300e Frame hero text in a more positive way (#16247) 2024-01-21 19:09:53 -06:00
Victor Lyuboslavsky e0ece3652e Fixing tests due to known exec after write Linux issue. (#16243)
Replaces fix in https://github.com/fleetdm/fleet/pull/16241
2024-01-21 10:40:41 -06:00
Luke HeathandSam Pfluger 97824f1ada Update open-positions.yml (#16237)
I'd like to remove these positions until we're ready to actively grow
the team again.

---------

Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2024-01-20 11:28:25 -06:00
Mike McNeil 702ddb8de9 Zero trust access on endpoints (#16238)
…is inevitably delivered by the people who manage those endpoints.
2024-01-19 16:42:08 -06:00
Noah Talerman 6c16b6a377 Fix typo in UI (#16220) 2024-01-19 14:47:51 -05:00
Noah Talerman 28e1d2bf12 Add redirect from GitOps article => GitOps repo (#16228)
- Almost the entire article is invalid because we took down the GitHub
action while we’re working on updating it.
- Keep the heavily trafficked link up 
- Point folks to repo so they know that Fleet GitOps is coming soon.
2024-01-19 14:47:32 -05:00
Roberto DipandJacob Shandling 4d90b8ee6b filter for hosts_count > 0 in software title query (#16225)
for #15964, pair programmed with @jacobshandling 
---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-01-19 15:42:42 -03:00
Eric 433fe225d8 Website: Update social meta images (#16223)
Closes: #15987

Changes:
- Updated the default meta image for twitter for pages without a meta
image to be the Fleet logo on a white background.
- Updated the default meta image for other social previews (Linkedin,
Slack, etc) to be a cloud city image.
2024-01-19 11:36:45 -06:00
Eric f26f7b4904 Add change for #15747 (#16222)
Added a change for #15747
2024-01-19 12:09:12 -05:00
Rachael Shaw 8e11d4d352 Add link to GitOps repo (#16213)
Added link to https://github.com/fleetdm/fleet-gitops
2024-01-19 10:37:24 -06:00