Commit Graph
14540 Commits
Author SHA1 Message Date
Mike McNeil fa1a714f71 Website: fix typos in testimonials.ejs (#23849) 2024-11-15 11:17:47 -06:00
4b4fc976a2 Add team_identifier to macOS software (#23766)
Changes to add `team_identifier` signing information to macOS
applications on the `/api/latest/fleet/hosts/:id/software` API endpoint.

Docs: https://github.com/fleetdm/fleet/pull/23743

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [X] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [X] Added/updated tests
- [X] If paths of existing endpoints are modified without backwards
compatibility, checked the frontend/CLI for any necessary changes
- [X] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [X] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [X] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ X Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
- [X] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [X] Orbit runs on macOS, Linux and Windows. Check if the orbit
feature/bugfix should only apply to one platform (`runtime.GOOS`).
- [X] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [X] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).

---------

Co-authored-by: Tim Lee <timlee@fleetdm.com>
Co-authored-by: Ian Littman <iansltx@gmail.com>
2024-11-15 14:17:04 -03:00
Drew Baker 97bb941aff Drew p drawers fleet for observability (#23812) 2024-11-15 12:03:17 -05:00
Dante Catalfamo 167e2e3e28 Scope pending host profile rebuilds (#23772)
#21338
2024-11-15 11:55:30 -05:00
EugeneandSam Pfluger c460e9220c Lower case 'fleeties' throughout page (#23814)
Per line 1157, "fleeties" should be l/c

Lowercased fleeties on line 179, 290, 384, 914, 916, 931, 1030, 1058,
1060, 1315

Links for reference: 
- Using sentence case and capitalization
https://fleetdm.com/handbook/company/communications#using-sentence-case-and-capitalization
- Page link: https://fleetdm.com/handbook/company/communications

Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2024-11-15 10:00:42 -06:00
Eric 4f03956c72 Website: add /customer-stories (#23837)
For: #23721 

Changes:
- Added /customer-stories, a page that displays the testimonials from
testimonials.yml
- Changed the /testimonials redirect to go to the /customer-stories
page.
- Updated the "What people are saying" link on the homepage and the
header navigation.



@mike-j-thomas FYI: To make this PR quickly, I did not implement the
sort order in the wireframes or change the testimonials yaml.
2024-11-15 14:52:36 +09:00
Mike ThomasandDrew Baker bead026c64 Updated content on software-management (vulnerability-management) (#23795)
- updated hero messaging and image

@eashaw, we should follow up on this to rename the file to
"software-management" and set up redirects. I had a go but ran into some
issues, so I'll leave that to you 🙌

Co-authored-by: Drew Baker <89049099+Drew-P-drawers@users.noreply.github.com>
2024-11-15 10:23:16 +09:00
Jahziel Villasana-Espinoza b9df4c29e9 fix: update guide on lock/unlock/wipe (#23788)
> Related issue: #22753

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Manual QA for all new/changed functionality
2024-11-14 19:45:01 -05:00
Jahziel Villasana-Espinoza e27e916f74 fix: re-enroll devices that are removed from ABM and then added back (#23757)
> Related issue: #23200

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-11-14 18:31:12 -05:00
Noah Talerman 4eb8cefba9 Prioritized customer requests get ~customer request label (#23826) 2024-11-14 17:15:07 -06:00
Mike McNeilandEric f385a8dac3 Website: Doc nav changes -- Follow-up to #23717 (#23719)
Co-authored-by: Eric <eashaw@sailsjs.com>
2024-11-14 15:12:45 -06:00
Luke HeathandSam Pfluger c022d396dd Update open-positions.yml (#23809)
We currently have a full pipeline, so I'd like to pause this listing
until next year.

---------

Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2024-11-14 14:44:16 -06:00
Sam Pfluger 9bf9c263c3 Remove HOF position (#23815) 2024-11-14 14:38:23 -06:00
Victor Lyuboslavsky a541961a26 fleetd telemetry doc updates (#23423)
docs for #23413
2024-11-14 13:43:16 -06:00
Eric 035df55563 Website: add missing meta tags to fleetd authentication article. (#23804)
Changes:
- Added required meta tags to the Fleetd authentication guide to fix the
failing website deploy action.
2024-11-14 12:42:35 -06:00
RachelElysia 2bd4bf881a Fleet UI: Teams dropdown refactor (upgrade to react-select-5, accessible via keyboard) (#23288) 2024-11-14 12:31:31 -05:00
Sarah Gillespie b8c9816e53 Custom OS settings: "include any label" option for custom target (#23802) 2024-11-14 11:10:49 -06:00
Ian Littman 4f726a724c Allow Fleet Premium users to opt out of populating vulnerability details when populating software in the hosts list endpoint (#23710)
#23078

This endpoint is drastically more efficient, and returns a much smaller
response payload, when vulnerability details aren't returned, and
vulnerability details can be looked up more efficiently in the
/vulnerabilities/CVE-XXXX-YYYY endpoint as that endpoint returns the
description once overall rather than once per host.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-11-14 11:09:51 -06:00
Zach WassermanandEric 667e0fc996 Add website support to issue device certificates via EST (#23637)
For https://github.com/fleetdm/confidential/issues/8785

New fleetdm.com endpoint that validates an IdP auth token and then
requests a certificate using the provided CSR.

This is a customer hackathon result.

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-11-14 09:00:55 -08:00
gillespi314 de2dd61c1f Update schema 2024-11-14 08:35:00 -06:00
gillespi314 28e4cf6cf7 Merge branch 'main' into feat-include-any-label 2024-11-14 08:33:03 -06:00
Sarah Gillespie 16d0d8d58f Fix unreleased bugs with labels_include_any feature (#23734) 2024-11-14 08:30:32 -06:00
Lucas Manuel Rodriguez 5e45ef6acf Add fleetd-authentication.md guide (#23791)
Guide that documents how fleetd agents authenticate to Fleet and the TUF
server.
2024-11-14 07:47:54 -06:00
Konstantin Sykulev 48b992e268 Modify status code for software batch endpoint (#23711)
When using the `fleet/software/batch` endpoint, due to its async nature,
it should return a 202 (Accepted) rather than a 200 (Ok).

https://github.com/fleetdm/fleet/issues/23492

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-11-13 17:22:51 -06:00
RachelElysia b25034da47 Fleet UI: Prompted to re-enter password on SCEP/NDES credential updates (#23732) 2024-11-13 16:01:11 -05:00
Janis Watts f1ec0df483 Fixed the broken numbered list under "Feedback" (#23769) 2024-11-13 15:00:54 -06:00
RachelElysia f8e09ad4f3 Fleet UI: Disabled forms cannot be accessed via keyboard (#23727) 2024-11-13 15:38:28 -05:00
Luke Heath ae92a7036f Adding changes for Fleet v4.59.0 (#23292) (#23731) 2024-11-13 13:39:53 -06:00
Jahziel Villasana-Espinoza 6a26b894b3 fix: update test with new vulns (#23775)
> No ticket, just fixing a broken test

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Added/updated tests
2024-11-13 14:15:31 -05:00
Jahziel Villasana-Espinoza e3618e8335 fix: return error in gitops if using deprecated field and there are more than 1 abm tokens (#23768)
> Related issue: #22359

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-11-13 14:07:59 -05:00
Noah Talerman 12b66f9186 Update tutorials-and-guides.md (#23724)
- Certificates in fleetd is an advanced article about configuring fleetd
w/ custom certificates. I think "Custom OS settings" (configuration
profiles) is a better controls article
- Simplify titles of software links
2024-11-13 12:37:26 -06:00
Noah TalermanandIan Littman d130ebe1e8 Add Debian to supported operating systems (#23773)
- Debian is a popular Linux flavor for servers
- Several Fleet customers have Debian hosts enrolled (see usage stats
[here](https://docs.google.com/spreadsheets/d/1Mh7Vf4kJL8b5TWlHxcX7mYwaakZMg_ZGNLY3kl1VI-c/edit?gid=538901298#gid=538901298))
- @iansltx has tested Fleet w/ Debian 11 and 12

---------

Co-authored-by: Ian Littman <iansltx@gmail.com>
2024-11-13 12:33:49 -06:00
Katheryn SatterleeandRachael Shaw 3c85098821 Update Upgrading-Fleet.md (#23774)
Add TF upgrade instructions

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] If paths of existing endpoints are modified without backwards
compatibility, checked the frontend/CLI for any necessary changes
- [ ] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
- [ ] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [ ] Orbit runs on macOS, Linux and Windows. Check if the orbit
feature/bugfix should only apply to one platform (`runtime.GOOS`).
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
2024-11-13 12:33:24 -06:00
Robert Fairburn e20820dfe5 Deploy to free.fleetdm.com before dogfood (#23762) 2024-11-13 11:17:23 -06:00
jacobshandlingandJacob Shandling b2eb2bac7e Ignore .swp files (#23755)
Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-11-13 09:08:47 -08:00
Zach Wasserman 8c21dff636 Add capability to serve YARA rules via authenticated Fleet endpoints (#23343)
Implements the Fleet side of #14899

- Add new endpoints to update and retrieve yara rules
- Add support in fleetctl for applying the rules

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`, `orbit/changes/` or `ee/fleetd-chrome/changes`.
  See [Changes files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files) for more information.
- [x] Input data is properly validated, `SELECT *` is avoided, SQL injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for new osquery data ingestion features.
- [x] Added/updated tests
- [ ] If paths of existing endpoints are modified without backwards compatibility, checked the frontend/CLI for any necessary changes
- [x] If database migrations are included, checked table schema to confirm autoupdate
- For database migrations:
  - [x] Checked schema for all modified table for columns that will auto-update timestamps during migration.
  - [ ] Confirmed that updating the timestamps is acceptable, and will not cause unwanted side effects.
  - [x] Ensured the correct collation is explicitly set for character columns (`COLLATE utf8mb4_unicode_ci`).
- [x] Manual QA for all new/changed functionality
2024-11-13 09:01:08 -08:00
StepSecurity Bot 552e76b68e [StepSecurity] ci: Harden GitHub Actions (#23765) 2024-11-13 10:43:13 -06:00
Brock Walters 4cc2bbe719 Update discovering-chrome-ai-using-fleet.md (#23738)
removed some fluff.
2024-11-13 11:25:42 -05:00
Mike McNeil ee0c4c7fce Apple CSR was missing from rituals. (Turned autoIssue on.) (#23673) 2024-11-13 10:24:11 -06:00
Noah Talerman 02d3f118bf Update story issue template (#23741) 2024-11-13 10:23:10 -06:00
Noah Talerman 440235514e Fix Fleet 4.59 article: stray header (#23754) 2024-11-13 11:05:07 -05:00
Victor Lyuboslavsky dd2dde0b8f Adding logging to TestRenewEnrollmentProfilePrevented (#23742)
#22363 

The TestRenewEnrollmentProfilePrevented test timed out once in recent
history. I did not find any obvious issues with this test, but I added
logging which may help if it times out again in the future.

Also, I sped the test up.
2024-11-13 09:27:39 -06:00
Victor Lyuboslavsky 7e7000a043 Added binary UUIDs to backend patterns (#23752)
As discussed in last Backend sync.
2024-11-13 09:27:18 -06:00
RachelElysia 1fed4759d8 Fleet UI: Add enable automations slider to query forms (#23562) 2024-11-13 09:32:59 -05:00
Martin Angers e5febe960d Bugfix: create/update manual label returns outdated info when configured with a mysql replica (#23725) 2024-11-13 08:57:22 -05:00
Sam Pfluger ded196d339 Add folks to team tables (#23753) 2024-11-12 17:24:30 -06:00
Luke Heath 6ae225c211 Bump webpack dependency (#23745) 2024-11-12 16:03:10 -06:00
Onasis Munro 6972e4c7de Update README.md (#23716)
Added My position w/ my information

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] If paths of existing endpoints are modified without backwards
compatibility, checked the frontend/CLI for any necessary changes
- [ ] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
- [ ] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [ ] Orbit runs on macOS, Linux and Windows. Check if the orbit
feature/bugfix should only apply to one platform (`runtime.GOOS`).
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-11-12 15:58:05 -06:00
Dante Catalfamo 33a4887400 Swiftdialog Closed method (#23024) 2024-11-12 15:52:46 -05:00
Luke Heath 5ff5d99731 Remove codeowners for GitOps YAML applied to dogfood (#23739) 2024-11-12 13:36:52 -06:00