Commit Graph
10627 Commits
Author SHA1 Message Date
Marko Lisica e8f979d7cf Move "Troubleshooting live queries" page to contributors docs (#16775)
- Cut down on user facing doc content so first time Fleet users can find
the right information. This could be moved into an "Advanced" section in
the future.
2024-02-19 16:39:12 +01:00
Lucas Manuel Rodriguez 6ea8f49f22 Replace fasthttp with Go's stdlib (reduces memory footprint) (#16922)
#16423

- To reduce memory footprint I'm replacing fasthttp with Go's stdlib
http package:
- To reduce CPU usage while Fleet is down am adding a connection check
before sending logs (otherwise osquery-perf spends a lot of CPU
marshaling JSON).

With fasthttp (memory start growing when I bring Fleet down, because it
starts to buffer logs):

![output_fasthttp_cut](https://github.com/fleetdm/fleet/assets/2073526/05161817-581c-4518-9751-7c014160e139)
With golang (memory start growing when I bring Fleet down, because it
starts to buffer logs):

![output_go_cut](https://github.com/fleetdm/fleet/assets/2073526/abdf899b-a812-478b-b638-28336513456a)
2024-02-19 11:33:19 -03:00
Mike McNeil d60463dc1b Handbook: Update product-groups.md (#16952)
- After driving the process along the CEO from 2020-2023, the Head of
Product Design took over for the CEO in the role of DRI for design
reviews in mid-to-late 2023 (I missed this update in the handbook)
- Added some other notes about how async participation works, since it
looks like we may have lost that philosophical language in the great
handbook migration from the departmental pages out into "Product groups"
2024-02-18 15:00:14 -06:00
Rachael ShawandTim Lee f3cbea355a #4345 API design: macOS and Windows OS vulnerabilities (#15492)
Updates "Get host OS versions" endpoint to include vulnerabilities
(https://github.com/fleetdm/fleet/issues/4345)

---------

Co-authored-by: Tim Lee <timlee@fleetdm.com>
2024-02-16 18:40:33 -06:00
Eric b2fce04c0e Website: Fix typo on /device-management (#16947)
Changes:
- ~~Fixes~~ Fixed a typo on the /device-management page.
2024-02-16 18:26:17 -06:00
Andrew Baker 5b04cc1ae9 Update osquery-5.11.0.md (#16946)
Fix typo
2024-02-16 18:56:23 -05:00
JD a2ddcfd4e2 Article osquery 5.11.0 release (#16938)
Article: osquery 5.11 release
https://github.com/fleetdm/confidential/issues/5232
2024-02-16 14:52:19 -08:00
50edcc07d0 Docs: Windows OS updates (#16270)
Docs for the "Windows OS updates" (#11951) user story

- Update "macOS updates" doc page to cross-platform "OS updates" page
- Update pricing page
- Update copy in the UI to clarify behavior of Windows updates

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
Co-authored-by: Rachael Shaw <r@rachael.wtf>
2024-02-16 14:30:00 -06:00
Noah Talerman c723bd48b5 Configuration files page (#16937)
- Update interface to match what Fleet accepts today
2024-02-16 14:10:03 -06:00
Robert Fairburn 7407328138 Dogfood update 2 (#16934) 2024-02-16 13:10:57 -06:00
Robert Fairburn c2aa7eea65 Disable external vuln processing in dogfood for the moment (#16933) 2024-02-16 12:51:58 -06:00
Jahziel Villasana-Espinoza 42cb32d005 feat: update permissions docs for lock/unlock/wipe (#16892)
Part of #9949

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Documented any permissions changes (docs/Using
Fleet/manage-access.md)
2024-02-16 13:26:33 -05:00
Rachael Shaw 06b0c4fee4 API design: Live query endpoint for ad-hoc queries (#16792)
API docs for https://github.com/fleetdm/fleet/issues/16805
2024-02-16 12:21:15 -06:00
Noah Talerman b11f0198ec Update story issue template (#16844)
- Clarify that the Figma link should take folks to the "ℹ️ Cover" page
- This way, everyone can see the status of the story: Work in progress,
Settled, Released
- This way, it's hard to accidentally link to the scratchpad file which
is not ready for dev
2024-02-16 10:16:36 -06:00
Jacob ShandlingandJacob Shandling cd895c45d6 UI – add correct breakpoint to SoftwareTable (#16911)
## Addresses #16910 
- This table's controls now break at the same breakpoint as those of
other tables, preventing these style issues:
https://www.loom.com/share/57144ff9703e4eb5a57b1af179a55923


- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-02-16 07:59:42 -08:00
Jacob ShandlingandJacob Shandling 2cf3b52424 UI – ensure checkbox ticks in hidden modals are also hidden (#16913)
## Addresses #16912

![Screenshot 2024-02-15 at 10 25
47 PM](https://github.com/fleetdm/fleet/assets/61553566/cdfc7677-bf28-4d1f-9bdd-0caa3dd1a837)


- [x] Changes file added for user-visible changes in `changes/` 
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-02-16 07:58:27 -08:00
Jacob ShandlingandJacob Shandling dd9a755f69 UI – Prevent loss of focus on Software titles table search field (#16917)
## Addresses #16752 


https://www.loom.com/share/10553b9c763541bfbda3da415d72afea?sid=68aa17d0-6868-4a9b-9072-d1079a2ce95e

- [x] Changes file added for user-visible changes in `changes/`
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-02-16 07:56:56 -08:00
Jahziel Villasana-EspinozaandGabriel Hernandez 05cfc3a364 Revert "fix: add observer and observer plus to lock/unlock permissions (#16886)" (#16924)
This reverts commit bd66898d38.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Gabriel Hernandez <ghernandez345@gmail.com>
2024-02-16 10:52:14 -05:00
Luke Heath e74b7b9201 Add Fleetd Chrome Extension to anatomy docs (#16762) 2024-02-16 09:14:00 -06:00
Eric ad927b3e4b Website: update content on device management page (#16915)
Closes: https://github.com/fleetdm/confidential/issues/5284

Changes:
- Updated the content on the /device-management page.
2024-02-16 20:47:51 +09:00
Isabell Reedy 695dd6bb52 Updating best slack practices to include using channels > DMs (#16888)
... ...
2024-02-15 22:28:51 -06:00
Sarah Gillespie 64b85f87f7 Restructure "Scaling Fleet" handbook page for ease of reference (#16850)
This PR consolidates various subheadings into one list that appears
"above the fold" to make it easier for contributors to find the info
they are looking for on the page. As it was previously, important info
was getting buried under the "Connect to Dogfood" instructions, which
gave the wrong impression about the scope of the page content.
2024-02-15 22:24:03 -06:00
Eric 79e6ae6840 Update integrations in pricing-features-table.yml (#16804)
Closes: https://github.com/fleetdm/confidential/issues/5350

Changes:
- Removed the feature for the Vanta integration (The Vanta integration
is already included in the "Premium integrations" feature)
2024-02-15 22:12:34 -06:00
Sam PflugerandMike McNeil 8dfea320ac Add #contact-the-ceo (#16774)
Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
2024-02-15 22:11:48 -06:00
Sam PflugerandMike McNeil 6a4d3cab5b Add asset discovery (#16806)
Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
2024-02-15 22:04:47 -06:00
Sam PflugerandMike McNeil d016bc7baa Add specific wording re digital ex dri (#16766)
Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
2024-02-15 22:01:11 -06:00
Lucas Manuel Rodriguez b7e544c226 Add instructions to build orbit from source (#16894)
Documentation changes for #16637.
2024-02-15 21:14:21 -03:00
Grant Bilstad 3c20cce575 Added some phython and bash examples (#16657)
Scripts in Bash and Python that some others might find helpful, or
assist when thinking about vulnerability API/pages
2024-02-15 16:23:41 -07:00
Sarah Gillespie 96bd31dc1f Add validation to reject requests to enqueue scripts for plain osquery hosts (#16893) 2024-02-15 14:34:16 -06:00
119d1df76f add permission check to software titles/versions endpoints (#16561)
relates to #16052

This adds a team permission check the `GET software/titles/:id`
endpoint. If the user should not be able to get the software title if it
is not on a host that is on the same team as the user (e.g. software
title 1 is on host 1, which is on team 1. A user who is only on team 2
should get a 403 response)

The UI is also updated to show the access denied error page when the we
receive a 403 response for the software title

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Roberto Dip <dip.jesusr@gmail.com>
Co-authored-by: Roberto Dip <me@roperzh.com>
2024-02-15 17:22:27 -03:00
RachelElysia 0f727001d7 [Styling released bugs] Fleet UI: Consistent capitalization, consistent empty state header (#16883) 2024-02-15 13:32:55 -05:00
RachelElysia c3ec182ba6 [Released bug] Fleet UI: Fix my device page last restarted date (#16879) 2024-02-15 13:31:44 -05:00
Lucas Manuel Rodriguez 763c137b67 [On-call improve docs] Versions of currently released fleetd components on Fleet's TUF (#16698)
Should tackle #14026.

This will run a daily Github action and create a PR if there's a new
update in our TUF on `edge` or `stable`.

E.g. somebody releases 1.22.0 fleetd to `stable` on our TUF and the next
day this automation runs and will create a PR that updates the versions
in `orbit/TUF.md` (or they can run the workflow manually).

Am happy to amend the shape of `orbit/TUF.md` (or we can iterate later).
2024-02-15 15:30:29 -03:00
RachelElysia edb70c955d [Released bug] Fleet UI: Fix software vulns crashing page (#16890) 2024-02-15 13:29:18 -05:00
Jahziel Villasana-Espinoza bd66898d38 fix: add observer and observer plus to lock/unlock permissions (#16886)
> Related issue: #16878

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any permissions changes (docs/Using
Fleet/manage-access.md)
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-02-15 14:40:36 -03:00
Benjamin Edwards d5a9e8f557 add vuln processing module to dogfood (#16742) 2024-02-15 11:22:35 -06:00
Martin Angers e1e1139da7 Fix duplicate activities created when running lock/unlocking scripts on hosts with scripts disabled (#16861) 2024-02-15 11:05:13 -06:00
Sarah Gillespie 10b1116d70 Fix unreleased UI bug when parsing API errors for lock and unlock modals (#16867) 2024-02-15 11:02:22 -06:00
Eric f5f9c32cf7 Website: update website footer (#16864)
Closes: #16802
Closes: https://github.com/fleetdm/confidential/issues/5097

Changes:
- Updated the layout of the website's footer
2024-02-15 09:04:41 +09:00
Eric 96946763ec Website: add page buttons to <scrollable-tweets> component (#16683)
Closes: #16304

Changes:
- Added page buttons to the `<scrollable-tweets>` component
2024-02-15 08:31:51 +09:00
George Karr 88da536110 Updating changelog for 4.44.1 (#16809) 2024-02-14 14:24:04 -06:00
Eric 8878613277 Update vscode_extensions override file & regenerate merged schema (#16829)
Changes:
- Added a newline before the code block in the example of the
`vscode_extensions` table override to fix the formatting of the page
generated for this table (see screenshot)
- Ran the `generate-merged-schema` script to regenerate
`osquery_fleet_schema.json`
<img width="860" alt="image"
src="https://github.com/fleetdm/fleet/assets/7445991/1f6f1b37-1240-4d16-b102-f67ecff5fb28">
2024-02-14 13:40:50 -06:00
Sarah Gillespie d3639cbbe6 Fix tooltip formatting of run script modal when scripts are disabled (#16848) 2024-02-14 13:32:54 -06:00
Eric ff5612e1dd Website: consolidate website layouts into single file (#16791)
Closes: #16790

Changes:
- Removed layout-sandbox.ejs
- Removed layout-customer.ejs
- Updated layout.ejs to:
- Hide links in the website header if a `hideHeaderLinks` variable is
passed into the page locals as `true`
- Hide links in the website footer (and reduce the footer size to 60px)
if a `hideFooterLinks` variable is passed into the page locals as `true`
- Show links to other admin pages on admin pages if a `showAdminLinks`
variable is passed into the page locals as true.
2024-02-14 13:05:44 -06:00
Victor Lyuboslavsky 98e9de6861 Adding new hosts sql tests. (#16826)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Added/updated tests
2024-02-14 10:35:22 -06:00
Andrew BakerandSam Pfluger a72d85602e Update ad proposal steps. (#16813)
Preview of guidelines template:

![image](https://github.com/fleetdm/fleet/assets/89049099/d95d38e5-7f5a-450a-b8d0-1a22a1ec249f)

..

---------

Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2024-02-14 09:52:59 -06:00
Victor Lyuboslavsky e1aac9c776 Adding tests for new live query endpoints. (#16823)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any permissions changes (docs/Using
Fleet/manage-access.md)
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-02-14 09:43:21 -06:00
Lucas Manuel Rodriguez a5a7df4527 Return 405 when receiving POST request on the route path (#16750)
#16182

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality
2024-02-14 12:40:43 -03:00
Sarah Gillespie 059e21d7b3 Fix unreleased UI bug in unlock modal (#16815) 2024-02-14 09:21:28 -06:00
Noah Talerman 260fd225e8 fleetdm.com/tables: vscode_extensions (#16779)
- Add override file
- Add description
- Add example query
- Add note: Querying for VS Code extensions requires joining against the
`users` table.
- Add columns
2024-02-14 10:05:31 -05:00