Commit Graph
1995 Commits
Author SHA1 Message Date
Luke Heath 15ba5f3a20 Update supported browsers (#18960) 2024-05-13 17:10:21 -05:00
Rachael ShawandGeorge Karr 7ca3bda4a4 Recategorize & reorganize /mdm/ REST API endpoints (#18886)
Original PR for API design: https://github.com/fleetdm/fleet/pull/16728

---------

Co-authored-by: George Karr <georgekarrv@users.noreply.github.com>
2024-05-10 16:57:06 -05:00
db070837c8 API design: Create API endpoint to turn disk encryption for teams crossplatform (#18885)
Original PR: https://github.com/fleetdm/fleet/pull/16129

---------

Co-authored-by: Marko Lisica <83164494+marko-lisica@users.noreply.github.com>
Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2024-05-09 13:57:38 -05:00
Rachael Shaw d1791518a4 Docs: Reduce words in a note (#18884)
published to nvd -> published
2024-05-09 13:43:11 -05:00
Jahziel Villasana-EspinozaandMartin Angers c88a7cf6b0 feat: software added and deleted global activities (#18798)
> Related issue: #18330 

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality

## Notes
- ~I added an `includeTitle bool` parameter to
`ds.GetSoftwareInstallerMetadata`. This allows for the title of the
software (from the `software_titles` page) to be fetched in
`svc.DeleteSoftwareInstaller` without an additional call to the DB.~ We
wound up deciding to just fetch the title every time.

---------

Co-authored-by: Martin Angers <martin.n.angers@gmail.com>
2024-05-08 10:08:28 -04:00
Marko Lisica 643a3eb34a Docs: Reminder for APNs and ABM renewal (#16919)
Improve docs for APNs renewal:
- Learn users that they should check that Common name (CN) of
certificate in APNs portal should match one used in Fleet
2024-05-07 14:04:06 -04:00
Roberto Dip e5283ef2a8 Merge remote-tracking branch 'origin/main' into feat-software-installers 2024-05-07 13:37:29 -03:00
Martin Angers 7bb726ba8e Create and return upcoming/past host activities for software installs (#18772) 2024-05-07 11:28:16 -04:00
Rachael ShawandMarko Lisica 6fa8763714 API design: Add declaration (DDM) profiles for macOS (#18718)
Fresh PR to avoid product design PRs messing with the PR open time KPI
(original here: https://github.com/fleetdm/fleet/pull/17369)

---------

Co-authored-by: Marko Lisica <83164494+marko-lisica@users.noreply.github.com>
2024-05-02 17:33:06 -05:00
e213ebde45 API design: Resend configuration profile (#18717)
Fresh PR to avoid product design PRs messing with the PR open time KPI
(previously https://github.com/fleetdm/fleet/pull/17711)

---------

Co-authored-by: Marko Lisica <83164494+marko-lisica@users.noreply.github.com>
Co-authored-by: George Karr <georgekarrv@users.noreply.github.com>
2024-05-02 17:08:22 -05:00
Rachael ShawandMarko Lisica 0bd2f00495 Permissions: Resend a configuration profile (#18724)
Fresh PR to avoid product design PRs messing with the PR open time KPI
(previously https://github.com/fleetdm/fleet/pull/17841)

Co-authored-by: Marko Lisica <83164494+marko-lisica@users.noreply.github.com>
2024-05-02 17:06:36 -05:00
Rachael ShawandMarko Lisica 080d466121 API design: Add manual labels via UI and API (#18716)
Fresh PR to avoid product design PRs messing with the PR open time KPI
(previously https://github.com/fleetdm/fleet/pull/17670)

---------

Co-authored-by: Marko Lisica <83164494+marko-lisica@users.noreply.github.com>
2024-05-02 16:59:03 -05:00
Rachael ShawandNoah Talerman 74eb6c4f01 API design: Add critical policy and resolution data to device health API (#18715)
Fresh PR to avoid product design PRs messing with the PR open time KPI
(original: https://github.com/fleetdm/fleet/pull/16982)

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2024-05-02 16:28:34 -05:00
Rachael Shaw 7cfb7721b3 FAQ: Add doc link to "How do I contact Fleet for support?" (#18654)
Add doc link to "How do I contact Fleet for support?"
2024-04-30 15:21:32 -05:00
Rachael Shaw 2e2137129a Simplify "Is Fleet MIT licensed?" answer (#18653)
Simplify the language in "Is Fleet MIT licensed?"
2024-04-30 15:09:59 -05:00
Tim Lee 0a27843b83 bump golangci-lint to 1.55.2 (#18604) 2024-04-30 08:59:14 -06:00
Michael PintoandRobert Fairburn 373e9153b7 Add 2023 penetration test (#18375)
Co-authored-by: Robert Fairburn <8029478+rfairburn@users.noreply.github.com>
2024-04-29 14:39:28 -05:00
Rachael ShawandEric 895d4bc2f7 Use "Fleet's agent (fleetd)" naming in the docs (#18138)
For #16512

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-04-29 11:12:03 -05:00
Marko LisicaandRachael Shaw a0a8579b56 API design: API endpoint for updating a host's manual labels (#16979)
API design for: 
- #16767

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
2024-04-25 15:53:01 -05:00
Rachael ShawandVictor Lyuboslavsky 1657b38eba #17361 API changes: Add fleetd version to host details (#17814)
For #17361.

---------

Co-authored-by: Victor Lyuboslavsky <victor@fleetdm.com>
2024-04-25 13:26:28 -05:00
Rachael Shaw de26973953 #17148 API changes: See if scripts are enabled for a host (#17813)
For #17148.
2024-04-25 13:20:01 -05:00
Marko Lisica 28e501cd3c Docs change: Use new Software Update (DDM) for macOS Sonoma (14) and higher (#17487)
Docs changes related to:

- #17295
2024-04-25 13:19:03 -05:00
Grant BilstadandRachael Shaw 414c27d53b Add link to file carve contributor docs (#18309)
File carves were moved to their own section in contributor docs
https://github.com/fleetdm/fleet/pull/16877
Fixed link on API page

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
2024-04-25 10:19:33 -06:00
Rachael Shaw 63d91526d2 A few capitalization fixes in the docs (#18416)
Sentence-casing.
2024-04-18 16:45:55 -05:00
Lucas Manuel Rodriguez d0b02fa985 Add sequence diagram for NVD vulnerability processing (#18216)
#17966

Better view here:
https://github.com/fleetdm/fleet/blob/17966-add-sequence-diagram-oncall/docs/Contributing/Vulnerability-processing.md#cpe-and-cve-data-generation-workflow

Added these docs during my oncall time (and also during the VulnCheck PR
review).

@mostlikelee Let me know if I got this right.
2024-04-17 13:28:39 -03:00
Lucas Manuel Rodriguez e7f61305a9 New APIs to add/remove manual labels to/from a host (#18283)
#16767

To create a manual label:
```sh
cat labels.yml
---
apiVersion: v1
kind: label
spec:
  name: Manually Managed Example
  label_membership_type: manual
  hosts:
    - lucass-macbook-pro.local
```

To add/delete a manual label to/from a host:
```
curl -k -v -X POST -H "Authorization: Bearer $TEST_TOKEN" https://localhost:8080/api/latest/fleet/hosts/1/labels -d '{"labels": ["Manually Managed Example"]}'

curl -k -v -X DELETE -H "Authorization: Bearer $TEST_TOKEN" https://localhost:8080/api/latest/fleet/hosts/1/labels -d '{"labels": ["Manually Managed Example"]}'
```

API draft changes: https://github.com/fleetdm/fleet/pull/16979/files
Figma with error strings:
https://www.figma.com/file/JiWoAiuHlkt76s3o3Uyz6h/%2316767-API-endpoint-for-updating-a-host's-manual-labels?type=design&node-id=2-130&mode=design&t=pxRPhrn6E1bOCrEd-0

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [X] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
~- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.~
- [X] Added/updated tests
- ~[ ] If database migrations are included, checked table schema to
confirm autoupdate~
- ~For database migrations:~
- ~[ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.~
- ~[ ] Confirmed that updating the timestamps is acceptable, and will
not cause unwanted side effects.~
- ~[ ] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).~
- [x] Manual QA for all new/changed functionality
  - ~For Orbit and Fleet Desktop changes:~
- ~[ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.~
- ~[ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).~
2024-04-16 06:37:58 -03:00
George Karr fa5e224a4a Add feature to resend MDM configuration profiles (#18280)
Includes PRs #18111, #18212, and #18271
2024-04-15 16:48:42 -05:00
Sarah Gillespie ecdcb7c2fb Add activity item for resend configuration profile (#18271) 2024-04-15 14:18:09 -05:00
Victor Lyuboslavsky 1dc1e23b65 Removed current_instance_checks from docs. (#18186)
#16661 

Removed current_instance_checks from docs.
2024-04-15 10:25:04 -05:00
Rachael ShawandNoah Talerman 29b482fffa #17230 API design: Fleet in your calendar (#17552)
REST API updates for #17230.

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2024-04-12 18:01:52 -05:00
Noah TalermanandRachael Shaw 0888cdb8de Update end user auth and SSO docs (#18127)
Docs improvements uncovered during
[dogfooding](https://github.com/fleetdm/confidential/issues/2506):

- Update end user auth docs to link to SSO docs. So the user knows what
do to get the necessary info from their IdP (create an Okta/GW app)
- Cut content from SSO docs and move Okta and Google Workspace to top
level headers
- "IDP" => "IdP"
- Use **bold** styling to indicate UI elements in docs (instead of
_italics_)

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
2024-04-12 16:39:56 -05:00
Marko Lisica b032ddf06e Add missing searchable fields to docs (#17825)
Docs are missing some of the searchable fields.
2024-04-12 17:34:38 -04:00
Roberto Dip 3b96743932 document research done to extract name and version from installers (#18241)
copying what's described here
https://github.com/fleetdm/fleet/issues/17984#issuecomment-2051911744
for future reference.
2024-04-12 17:16:13 -03:00
Rachael Shaw 57a28ed18d #14916 Configuration change: Host status webhook per-team (#15612)
Adds `webhook_settings.host_status_webhook` options to team config for
#14916.

Also updated conceptual docs that reference this config (and cut down
some content to make room).
2024-04-10 15:28:17 -05:00
Noah Talerman 65ab7a896d Remove duplicate DEP profile example (#18114)
- Remove duplicate
- Add redirect so the example profile can move later w/o breaking links
- Update links
2024-04-09 09:47:47 -04:00
Roberto Dip 02f4d5c134 run make generate-docs for DDM activities (#17888) 2024-04-08 13:19:56 -03:00
Brock WaltersandVictor Lyuboslavsky 8d0d309a1f Update macos-install-wine.sh with codesign warning (#17982)
The Wine developer does have an Apple Develeoper certificate but the
"Wine Stable" app bundle is not code-signed or notarized post-install &
disables Gatekeeper for the install. This adds a warning to the script
user about the app not being signed. post-install

---------

Co-authored-by: Victor Lyuboslavsky <victor.lyuboslavsky@gmail.com>
2024-04-05 16:14:57 -04:00
Marko Lisica 4585a6e2c2 API design: Pre-fill and lock local account creation screen during out-of-the-box macOS setup (#17118)
API design for:
- #9147
2024-04-04 14:38:42 -04:00
Victor LyuboslavskyandNoah Talerman 5a3c54c0b6 Updated 1Password policy to only search 1 level deep for performance reasons. (#18003)
#17827 

Updated 1Password policy to only search one level deep for performance
reasons.

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2024-04-04 09:33:17 -05:00
Rachael Shaw 1d80aa7668 When flagging a parameter as premium-only, always include a period. (#18038)
For better readability: add periods as separation between the Fleet
Premium message and parameter descriptions.
   _Available in Fleet Premium_. Description text.
 _Available in Fleet Premium_ Description text.
2024-04-03 11:48:22 -05:00
87fe581b93 Scripts API: documented missing parameter and improved copy (#17881)
- Updated `GET /api/v1/fleet/scripts`: documented `team_id` parameter
that was missing
- Replaced "Upload" with "Add" since that's the language we want to use
across the product and docs.
- Removed articles from headings

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
Co-authored-by: Rachael Shaw <r@rachael.wtf>
2024-04-01 16:53:00 -05:00
Noah Talerman 4ae6b362b9 Cut content from CIS Benchmarks (#17887)
- Remove "Overview" header 
- Cut "MDM required" and "Fleetd required" sections
- Move "How to add" above "Requirements."
- Cut the "Audit vs. remediation" section
2024-04-01 11:34:39 -04:00
Katheryn Satterlee 2479c21622 Update fleetctl-CLI.md (#17975) 2024-04-01 08:53:00 -05:00
George KarrandRachael Shaw b0bb2e6ab5 Update FAQ.md (#17707)
This instructions were inaccurate following these steps only `Fleet
Osquery` was installed not `orbit`

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
2024-03-30 02:33:41 -05:00
Dave Herder f4ab2125cc Update enroll-hosts.md (#17834) 2024-03-29 16:05:46 -07:00
George Karr 0752993c93 Update MDM-macOS-setup.md (#17807) 2024-03-26 12:36:38 -05:00
George KarrandSam Pfluger c739ed2472 Update Releasing-Fleet.md (#16725)
Updating broken link

---------

Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2024-03-26 12:02:09 -05:00
Noah Talerman 4271ca7fd6 Update rest-api.md (#17794)
- Clarify that hostnames are fully qualified domain names (FQDNs). FQDN
= hostname + domain.

For the following issue: #16895
2024-03-26 11:16:28 -05:00
Noah Talerman a0e3407f21 Update rest-api.md (#17801)
- Fix anchor link
2024-03-25 09:41:12 -04:00
EricandMike McNeil 6ae3880704 Website: Update build script to exclude folders with an underscore prefix & rename docs/Deploy/kubernetes/ (#17817)
Closes: #17582

Changes:
- Updated the `build-static-content` script to not generate HTML pages
for files in subfolders that are prefixed with an underscore
- Renamed the `docs/Deploy/kubernetes` folder »
`docs/Deploy/_kubernetes`
- Documented this new behavior on the communications page of the
handbook.
- Updated commands on the Deploy Fleet on Kubernetes page.

---------

Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
2024-03-22 18:15:01 -05:00