Commit Graph
2674 Commits
Author SHA1 Message Date
Noah Talerman 5b41bb4c53 API reference: GET /commands default page length and sort (#37899)
These undocumented defaults cause confusion:
https://github.com/fleetdm/fleet/issues/32785#issuecomment-3715226225
2026-01-06 11:14:31 -06:00
Scott Gress e35684268d Add auto-update schedule to software activity updates (#37715)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #35458

# Details

This PR adds new metadata to the `ActivityEditedAppStoreApp` activity
relating to the app's auto-update schedule. The data will be included
with every `ActivityEditedAppStoreApp` activity regardless of whether
the values changed. I have an open question about this on the [activity
docs
PR](https://github.com/fleetdm/fleet/pull/36534/changes#r2648884183).

One functional change to note here is that the act of recording the
activity has been moved up a level into the endpoint code, because the
activity now contains metadata from two different service methods (one
that updates the VPP app, and one that creates the auto-update
schedule).

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

## Testing

- [X] Added/updated automated tests
- [X] QA'd all new/changed functionality manually
2026-01-06 10:52:26 -06:00
Nico 19113d22be Add Testing NATS logging local development docs (#37759)
**Related issue:** Resolves #37854 

<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
Adds instructions on how to set up a NATS server locally to use as a log
destination.
Follow-up of https://github.com/fleetdm/fleet/pull/36527.
2026-01-06 09:11:58 -03:00
b6d19de0d9 Add support for publishing logs to NATS. (#36527)
**Related issue:** Resolves
[34890](https://github.com/fleetdm/fleet/issues/34890)

# Checklist for submitter
- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.

## Testing
- [X] Added/updated automated tests
- [X] QA'd all new/changed functionality manually

## New Fleet configuration settings
Looking at other log destinations, I couldn't find anything relevant in
GitOps. Please let me know if I missed something, however.

## fleetd/orbit/Fleet Desktop
I've tested this on both Linux and MacOS.

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
Co-authored-by: nulmete <nicoulmete1@gmail.com>
2026-01-06 09:10:32 -03:00
Allen Houchins cc50ede021 Typo fix (#37872)
This pull request makes a minor update to the `docs/scripts.yml` file,
standardizing the formatting of a script step's name for consistency.
2026-01-05 15:28:43 -06:00
Steven Palmesano cb4e418f4c API-Only -> API-only (#37751) 2026-01-05 11:42:23 -06:00
Noah Talerman f2f1c13f38 [YAML reference] Simplify language for hash_sha256 (#37852) 2026-01-05 10:54:07 -06:00
Steven Palmesano aa56063553 Format SQL query for readability (#37753)
Sorry for having so many PRs on this one!

Thank you again for correcting my original formatting. I was looking
over this more and wanted to improve how it appears on the site for
better readability.
2026-01-05 10:53:28 -06:00
Lucas Manuel Rodriguez 2dafd11355 Rollback Entra legacy 'device ID' ingestion (#37687)
Resolves #37686.

Rolling back the detail query change in
https://github.com/fleetdm/fleet/commit/527c2230e9d0b3edd662741b3aa91b0b8e89c372.
The test in the original commit was not related to the change so I kept
it as it was added to make sure order of processing of query results.

I tested the ingested device ID matches the one in Entra and that Yes/No
compliant functionality works as expected.

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

## Testing

- [x] QA'd all new/changed functionality manually
2026-01-05 13:28:43 -03:00
Steven Palmesano 6080ca6a1e Add FDA pre-approval for fleetd (#37781) 2026-01-05 09:35:36 -05:00
Steven Palmesano 424ae271c8 Tines reorg (#37731)
Resolves #34967.
2025-12-29 13:04:49 -06:00
Steven Palmesano 239c1fd62b Solutions symlinks (#37732)
Documentation and one symlink created.

Also, moved an existing profile in the iOS directory and updated the
relevant article that links to it.
2025-12-29 12:42:56 -06:00
Noah Talerman c0c54ca1f8 API docs typo: Change labels and configuration fields to body (#37656) 2025-12-23 14:06:55 -06:00
Noah Talerman e1aded2e49 Use "array" instead of "string[]" (#37655)
To be consistent
2025-12-23 14:04:29 -06:00
Magnus Jensen 8cf232513e Small updates to MDM overview (Contributing docs) (#37609)
As part of the on-call responsibilities, I looked over the MDM overview,
and did some small updates/changes.
2025-12-22 17:05:29 -04:00
Marko Lisica 59f318c77a Clarify platform filter description in API docs (#36618)
Related to:

- #34072
2025-12-22 12:58:20 -06:00
Jonathan KatzandMarko Lisica 5750e4393a Docs change: GET setup_experience/software allows comma separated values (#37499)
**Related issue:** #35554 

Ability to add multiple `platform` values is added to "List setup
experience software" (`GET api/v1/fleet/setup_experience/software`) in
PR #37468. This change is similar to how `platform` can be set in the
"List software" endpoint (`GET /api/v1/fleet/software/titles`).

---------

Co-authored-by: Marko Lisica <83164494+marko-lisica@users.noreply.github.com>
2025-12-22 13:25:19 -05:00
Rachael Shaw 45b162f940 Preview of v4.78.0 doc changes (#35929) 2025-12-19 17:07:58 -06:00
Steven Palmesano f955f233ec Fix dashes so the formatting will show correctly on GitHub (#37492)
Sorry for opening another PR on this! Not sure how, but some weird
dashes snuck in and it threw off the formatting.

Screenshots of the rich text before and after below.

<img width="1049" height="276" alt="Screenshot 2025-12-18 at 12 19 15"
src="https://github.com/user-attachments/assets/1fefafda-0b94-4f20-a39a-ace4fa874457"
/>
<img width="1077" height="322" alt="Screenshot 2025-12-18 at 12 20 38"
src="https://github.com/user-attachments/assets/ef7274d2-501a-4394-8c34-78a9a30c43c2"
/>
2025-12-19 09:43:55 -06:00
Steven Palmesano 0ae3392a4a Rename Android config profiles for consistency (#37486)
The file names should describe what they do, not the policies that they
use inside.
2025-12-19 09:43:38 -06:00
George Karr f616261f59 Add engineering spec review checklist (#37333)
For #33200
2025-12-18 18:00:39 -06:00
Allen Houchins 0703dc5e35 Add 2 new app categories: 🔐 Security and 🛠️ Utilities (#37098)
This pull request adds support for two new software categories,
"Security" and "Utilities", across the application. The changes ensure
these categories are available in the database, frontend type
definitions, UI elements, documentation, and are fully tested in both
migration and integration test suites.

**Database and Migration Updates:**
* Added "Security" and "Utilities" entries to the `software_categories`
table and updated initial data in `schema.sql`.
* Introduced a new migration
(`20251210000000_AddSecurityAndUtilitiesCategories.go`) to insert/remove
these categories, with an accompanying test to verify migration
behavior.
[[1]](diffhunk://#diff-57da59e73fff8f2ffccd167299027899614281c591b79715b7000bed0e9d8516R1-R31)
[[2]](diffhunk://#diff-5e6db34b45e83ec5cf2b9cb41e4bfd4ee934f456dd9c0ae4313a448d39319c72R1-R28)

**Frontend and Documentation Updates:**
* Updated the `SoftwareCategory` type and category lists to include
"Security" and "Utilities", ensuring they appear in the UI and are
selectable.
[[1]](diffhunk://#diff-4297079e443d574eb530c70ef48de3cab80e56f783c7b395d58c31c29be6bb0eL77-R79)
[[2]](diffhunk://#diff-405dcd4f0bd6881e4b20a75212467d13c143ddc486b5c9d29ed9035033c32361R25-R26)
* Added documentation for the new categories in `yaml-files.md`.

**Testing Enhancements:**
* Added and updated tests to verify the new categories are displayed and
handled correctly in both frontend and backend integration tests.
[[1]](diffhunk://#diff-d151ee297fdaf54f8ea7027bc46de12247c43406b464265f24ade5a49cb19e49R210-R211)
[[2]](diffhunk://#diff-bbd0c5a6bc2f9a24e633031d4c6a3f5b0be7cbfe78ef1b56cdf9a7a2c32e21e2R19358-R19365)
[[3]](diffhunk://#diff-2bd8ca2ddaad7aac0c438a2afd76a26872378249f757c9c81a31005d0e57cf1fR18447-R18460)
2025-12-18 13:26:50 -06:00
Steven Palmesano ccc75121b1 Add best practices to Solutions (#37489)
So we don't forget.
2025-12-18 12:08:56 -06:00
Magnus Jensen 991ddc8cb3 remove product group guides mentions in contributing docs (#37325)
I was just browsing around and saw the concept of product group guides
is gone, so just cleaning up some old links
2025-12-18 09:42:47 -06:00
Steven PalmesanoandNoah Talerman 819ae07d3d Improve Windows migrate to Fleet notification (#37310)
This version shows the notification every five minutes, has a custom
title, runs in the user context, and has a more detailed message since
we no longer have the 255 character limit.

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2025-12-17 15:35:44 -06:00
Steven Palmesano f9c15047cf Fix script reference (#37148)
Forgot to update the reference in the policy.
2025-12-17 15:35:33 -06:00
Rachael Shaw 01746ed6ab Docs: Clarify expected GitOps file extension (#37422)
Related to:
+ https://github.com/fleetdm/fleet/issues/30161
+ https://github.com/fleetdm/fleet/issues/36212
2025-12-17 14:36:41 -06:00
Konstantin Sykulev c39a5b2e2d Adds activities for certificate templates (#36903)
**Related issue:** Resolves #36701

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)

## Testing

- [x] Added/updated automated tests
- [x] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)
- [x] QA'd all new/changed functionality manually

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **New Features**
* Added activity tracking for Android certificate template edits and
deletions via GitOps.

* **Chores**
* Updated certificate template batch operations to track which teams
were affected by changes.

<sub>✏️ Tip: You can customize this high-level summary in your review
settings.</sub>

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2025-12-17 11:08:40 -06:00
Luke Heath 37420f62e7 Change API endpoint from POST to GET for Android token (#37368) 2025-12-17 10:56:29 -06:00
Magnus JensenandRachael Shaw 5065843ec9 Update incorrect teams VPP gitops description (#37061)
Clarify the behavior of the 'teams' field in VPP configuration.

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
2025-12-16 14:31:10 -06:00
George Karr aca85c6cd4 Mention load testing for 3rd party integrations (#37357) 2025-12-16 14:15:32 -06:00
Victor Lyuboslavsky af55ec2db8 Modular monolith README (#37186) 2025-12-15 18:04:29 -06:00
kitzyandDale Ribeiro 5e95a5eb4a Remove port 8220 from docker-compose configuration (#37004)
This port is not actually needed.

---------

Co-authored-by: Dale Ribeiro <dale@fleetdm.com>
2025-12-15 10:27:09 -05:00
Jake Stenger 2a5629248c For Github issue: 13323 (#36840)
[Github issue:
13323](https://github.com/fleetdm/confidential/issues/13323#event-21368586679)
2025-12-12 10:17:28 -08:00
Scott GressandJuan Fernandez 9e12e3cb72 Add activities for enabling/disabling "update new hosts to latest" (#37089)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #37088

# Details

This just adds the new activities for use in the API handler and the
front-end. I neglected to include this in the spec so I'm putting up a
quick PR to keep from adding to the back-end ticket scope.

# Checklist for submitter

No checklist items apply here; it just needs to implement what's laid
out in https://github.com/fleetdm/fleet/pull/35777/files.

---------

Co-authored-by: Juan Fernandez <juan@fleetdm.com>
2025-12-12 11:04:36 -06:00
Steven Palmesano 147814405d Add Wi-Fi profile example (#37177) 2025-12-12 08:26:47 -06:00
Luke Heath 3a183e6772 Add PR review to daily standup, remove incoming bug triage (#37090) 2025-12-11 15:31:51 -06:00
Steven Palmesano 7530a0a55c Remove link to "Get host's Google Chrome profiles" (#37132)
This doesn't exist any more
2025-12-11 12:34:32 -06:00
Sarah Gillespie d619746ebf Ingest Windows host certificates via osquery (#36771) 2025-12-11 09:53:41 -06:00
Noah Talerman 9267541860 Releasing Fleet steps: Wrong Helm chart (#37051) 2025-12-10 14:53:10 -06:00
Ian Littman fe2a9a867e Swap minio to rustfs (#36851)
Resolves #36909.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

## Testing

- [x] Added/updated automated tests

- [x] QA'd all new/changed functionality manually
2025-12-10 10:03:48 -06:00
Rachael Shaw ffcf314a3c YAML indentation fix in query library (#37022)
Follow-up from https://github.com/fleetdm/fleet/pull/36994
2025-12-09 16:06:18 -06:00
Josh Roskos a9807ec904 Update Get MCP client configurations query (#36638)
Updating:
https://fleetdm.com/queries/get-mcp-client-configurations#query-detail
Reference:
https://fleetdm.slack.com/archives/C062D0THVV1/p1764781232122449

cc: @karmine05
2025-12-09 14:23:53 -06:00
Steven Palmesano e7291062ec Add CrowdStrike Falcon System Extension policy (#36994) 2025-12-09 14:16:35 -06:00
Jonathan Katz b8d2ba371e Update replica db setup and guide (#36918)
**Related issue:** Resolves #35937
Changes:
- Fix `make db-replica-setup`
- mention the tool in
`docs/contributing/getting-started/testing-and-local-development.md`.
2025-12-08 17:07:04 -05:00
Steven PalmesanoandNoah Talerman 7fb0ab105a Windows MDM migration notification (#36525)
Related to https://github.com/fleetdm/confidential/issues/12925

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2025-12-08 14:10:46 -06:00
Josh Roskos ed17e84d05 Update SSO configuration paths in documentation (#36894)
Updates from customer call today: 
  - Updated image to reference `Fleet users` callback URL
  - Updated *Fleet configuration* instructions for UI changes
2025-12-08 14:04:49 -06:00
Victor Lyuboslavsky 103d537dc5 Change status to delivered in flowchart. (#36800)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #36795
2025-12-08 10:07:32 -06:00
Victor Lyuboslavsky 321ed1dc12 Update MySQL versions we test with to 8.4.7 and 9.5.0 (#36803)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #36801

Test and docs changes only.

Passing 8.4.7 tests in this workflow run:
https://github.com/fleetdm/fleet/actions/runs/19978256106/job/57299389148
2025-12-08 09:12:05 -06:00
Steven Palmesano 6defeec1b9 Fix broken scep_proxy references (#36777) 2025-12-05 17:32:55 -06:00