Commit Graph
13338 Commits
Author SHA1 Message Date
Victor Lyuboslavsky 84ee756b1b Include known_vulnerability field when query is a CVE. (#21363)
Update to #19857 after customer feedback.

If the search query is in CVE format (CVE-YYYY-<4+digits>), we always
return if that exact match is a CVE known to Fleet.

# Checklist for submitter

- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-08-16 14:09:52 +02:00
Jahziel Villasana-Espinoza 1fef99af47 feat: macOS MDM migration updates (#21359)
> Related issue: #19625 

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [x] Orbit runs on macOS, Linux and Windows. Check if the orbit
feature/bugfix should only apply to one platform (`runtime.GOOS`).
- [x] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [x] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-08-15 21:21:58 -04:00
Noah Talerman d3805abe41 Fleet Desktop is supported on CentOS 8+ (#21167)
https://github.com/fleetdm/fleet/pull/20679#issuecomment-2273539991
2024-08-15 18:06:13 -07:00
Jahziel Villasana-Espinoza 3fbe6cb881 fix: rename context 2024-08-15 19:03:21 -04:00
Jahziel Villasana-Espinoza 715068e27f fix: add missing comments 2024-08-15 19:00:47 -04:00
Jahziel Villasana-Espinoza 27429a4ae5 fix: undo editor changes 2024-08-15 18:55:18 -04:00
Jahziel Villasana-Espinoza efd675c5bb fix: feedback 2024-08-15 18:52:39 -04:00
Brock Walters 2eb755918f Update MDM-setup.md (#21349)
Clarify verbiage in the ABM section on MDM Status.
2024-08-15 17:53:40 -04:00
Jahziel Villasana-Espinoza 7b5377899c chore: merge main 2024-08-15 17:52:25 -04:00
George Karr 4054978468 Update job-migration.yaml (#21354)
Adding ttl so the job will clean itself up after success so a helm
upgrade doesn't require `kubectl delete job fleet-migration` before
continuing.
2024-08-15 16:45:24 -05:00
Jahziel Villasana-Espinoza bbe01b06c9 chore: changes file 2024-08-15 17:23:13 -04:00
Jahziel Villasana-Espinoza e0135fc568 fix: cleanup tasks for MDM migration updates (#21325)
> No issue, just cleanup  

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [x] Orbit runs on macOS, Linux and Windows. Check if the orbit
feature/bugfix should only apply to one platform (`runtime.GOOS`).
- [x] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [x] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-08-15 17:16:56 -04:00
Tim Lee c2635fe05b Add Software Vulnerability Filters (#21312) 2024-08-15 12:36:47 -06:00
Drew BakerandSam Pfluger 8dadf4665d Update README.md (#21207)
Added handbook process for uploading contacts from an event to
SalesForce

Closes fleetdm/confidential/issues/6352

---------

Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2024-08-15 13:03:40 -05:00
Eric 58e62ba75f Vulnerability dashboard: update priority patch progress calculation. (#21348)
Changes:
- Optimized patch progress calculation
- Moved patch progress calculation to a new action
`get-priority-vulnerabilities` that is called after the dashboard page
laods
- Added a loading state to the patch progress section of the dashboard
page.
2024-08-15 13:02:45 -05:00
Roberto Dip ade1d06fd6 add windows configuration profiles to workstations canary (#21336)
Adding a few Windows configuration profiles so we can dogfood them. Most
of the profiles are adaptations from the macOS profiles.

I'm not an expert, adding them to the canary team for now to avoid
breaking anyone's machine.
2024-08-15 14:02:05 -03:00
Michael Pinto 16d6757681 addition of CSM health check directions (#20860)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
- [ ] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [ ] Orbit runs on macOS, Linux and Windows. Check if the orbit
feature/bugfix should only apply to one platform (`runtime.GOOS`).
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-08-15 09:23:12 -05:00
Dante Catalfamo d7d9f335d5 Guide: Self-Service VPP Update (#21326)
#21062
2024-08-15 09:48:48 -04:00
Lucas Manuel Rodriguez 5554d05305 Use edge channels in "Compliance exclusions" team (#21335)
The more hosts dogfood the `edge` channels the better.
2024-08-15 10:12:04 -03:00
github-actions[bot]andlucasmrod e21b2640c9 Update versions of fleetd components in Fleet's TUF [automated] (#21333)
Automated change from [GitHub
action](https://github.com/fleetdm/fleet/actions/workflows/fleetd-tuf.yml).

Co-authored-by: lucasmrod <lucasmrod@users.noreply.github.com>
2024-08-15 06:21:54 -03:00
Katheryn Satterlee 79a5b19d18 Fix broken link to configuration docs. (#21327) 2024-08-14 20:59:02 -05:00
Sam PflugerandMike McNeil 89a9be3629 Handbook: leadership»CEO shadow program (#21332)
Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
2024-08-14 20:53:11 -05:00
JD c25b22be88 Enforce Sonoma 14.6 and iOS/iPadOS 17.6 (#21314)
Enforce updates https://github.com/fleetdm/confidential/issues/7469
2024-08-14 12:11:48 -07:00
Martin Angers 6220b2ed0e Add checkbox to change frontend/CLI if API paths are modified (#21316) 2024-08-14 14:28:48 -04:00
Victor Lyuboslavsky 0e39fec234 In policy webhook, made sure the failing_host_count is never 0 (#21248)
#20599 

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
2024-08-14 19:55:47 +02:00
Victor Lyuboslavsky d2dba3386d Added "Sources" section to vulnerability processing page. (#21243)
# Docs for #19857
2024-08-14 19:55:25 +02:00
Sam Pfluger f7551a7e80 Handbook: Add heading formatting convention to communications (#21302) 2024-08-14 12:39:28 -05:00
Ian Littman 49300bc844 Don't panic on zero-length NVD description_data array fields (#21250)
#21242

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)

QA'd manually (see repro scenario in the linked bug). Happy to dig into
adding tests here if it's worth the time to build them now that the
upstream data feed has been patchd.
2024-08-14 10:53:47 -05:00
RachelElysia ae4df76e4d Fleet UI: Improve CVE search responses (#21286) 2024-08-14 11:41:56 -04:00
Dante Catalfamo 9a5e5372eb SSVPP Backend and CLI (#21132)
#19882 and #20532
2024-08-14 10:25:32 -04:00
Victor Lyuboslavsky 985781a04b Added index to query_results DB table to speed up finding last query timestamp for a given query and host. (#21303)
#21296 
Added index to query_results DB table to speed up finding last query
timestamp for a given query and host.

# Checklist for submitter

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added/updated tests
- [x] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [x] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [x] Manual QA for all new/changed functionality
2024-08-14 15:00:27 +02:00
George Karr 38edb2dbf7 Update release-qa.md (#21257)
Adding path to remember to verify Software install / download.
2024-08-13 23:37:27 -05:00
Mike McNeilandSam Pfluger c2eb6e7b22 Handbook: Add step for updating financial model when approving new po… (#21262)
…sitions

---------

Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2024-08-13 23:35:40 -05:00
Eric 56bae99430 Handbook: update ordered lists markdown formatting handbook section. (#21293)
Closes:  #21036

Changes:
- Removed the inaccurate section about formatting ordered lists in
Markdown content in the handbook.
2024-08-13 20:41:45 -05:00
9041f49d7f Website: update features on pricing page (#20993)
- Removed duplicate and redundant features
- Reordered features by order of operation from the POV of an IT admin
- Consolidated use cases
- Renamed some features for clarity

See [this
doc](https://docs.google.com/document/d/1z7X__TmJIpRXQF-Mx9NK4EChwkX73fj0ymLnIJM2GnQ/edit?usp=sharing)
for more details, including methodology for the organization and
styling.

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2024-08-14 09:32:41 +09:00
Mike Thomas 01014f53e6 Handbook: guidelines for consistent headings and titles (#21172)
To help the team write better, more consistent docs and guides: 

- I added guidelines for writing headings and titles. In particular for
reference vs. guides.
- I cleaned up that handbook section while I was there.

# Checklist for submitter

- [x] Manual QA for all new/changed functionality
2024-08-13 17:27:27 -05:00
Noah Talerman e9b2217ae8 Update Fleet server configuration docs (#21283)
- Osquery configuration isn't server config
- Condense top section by removing examples
2024-08-13 13:56:04 -07:00
Noah Talerman 87f21b018f Fleet 4.55.0 was shipped Aug. 9 (#21288) 2024-08-13 13:47:29 -07:00
Sharon Katz 2e138ed244 add missing change log for 4.55.0 (#21285) 2024-08-13 13:29:58 -07:00
Jahziel Villasana-Espinoza d3870f2906 feat: pre sonoma migration features (#21266)
> Related issue #20311

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [ ] Orbit runs on macOS, Linux and Windows. Check if the orbit
feature/bugfix should only apply to one platform (`runtime.GOOS`).
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [x] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-08-13 16:14:35 -04:00
Noah Talerman dc6ad94de3 Guide: "Enforce disk encryption when macOS hosts automatically enroll" and "Rotate FileVault (disk encryption) key w/o prompt" (#21202)
- Guide update for the "Enforce disk encryption when macOS hosts
automatically enroll" (#16866) and "Rotate FileVault (disk encryption)
key w/o prompt" (#13157) stories.
2024-08-13 11:40:15 -07:00
Sarah Gillespie 73658ddeb8 Update MDM migration flow with offline dialog (#21274) 2024-08-13 12:59:50 -05:00
1759e6d388 Add context for story point ranges (#21171)
While I haven't seen this exact story point mapping to expected
completion time, it intuitively makes sense from an Agile/iterative dev
perspective, and accounts for e.g. longer tasks being disproportionately
more uncertain than shorter tasks.

Let me know if I got the rationale correct here, as spelling that
rationale out feels like a useful thing to have in the handbook,
particularly for engineers coming from environments where story points
might've been converted more linearly to expected level of effort.

---------

Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
2024-08-13 12:59:49 -05:00
Rebecca 5af77bfced Update communications.md T.V. (#21275)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
- [ ] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [ ] Orbit runs on macOS, Linux and Windows. Check if the orbit
feature/bugfix should only apply to one platform (`runtime.GOOS`).
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-08-13 12:28:00 -05:00
Martin Angersandgillespi314 c1c5c77dfc Fix download software installer path (#21255)
Co-authored-by: gillespi314 <73313222+gillespi314@users.noreply.github.com>
2024-08-13 11:45:03 -05:00
Robert Fairburn 07314c8d04 Update dogfood aurora version to latest (#21224) 2024-08-13 10:00:34 -05:00
Victor Lyuboslavsky f891f4324d Schedule maintenance window over "Free" events. (#21269)
#21268 
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
2024-08-13 16:08:23 +02:00
Victor Lyuboslavsky b2cfc4082e Added required "software" for GitOps YAML (#21271)
Fixes GitOps on main.
2024-08-13 16:03:29 +02:00
Martin Angers 08763d59f1 Feature branch for the Store Bootstrap Packages in S3 story (#21260) 2024-08-13 08:27:10 -04:00
Victor Lyuboslavsky ca4c2cea72 Update label name in configuration profile (#21246)
#21163 
Fixed bug where configuration profile was still showing the old label
name after the name was updated.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-08-13 13:57:32 +02:00