Commit Graph
15677 Commits
Author SHA1 Message Date
Sarah Gillespie ecaea6104d Add host certificates refetch to UI (#26630)
Fix unreleased UI bugs
2025-02-27 11:33:49 +00:00
Sarah Gillespie e02ad241ea Allow empty values when parsing distinguished name (#26627) 2025-02-26 15:59:20 -06:00
gillespi314 b2bf148b65 Update migration timestamp 2025-02-26 12:49:43 -06:00
gillespi314 c5386b1290 Merge branch 'main' into feat-23235-host-certificates 2025-02-26 12:43:19 -06:00
Sarah Gillespie 7a95f59f4a Update dashboard, manage hosts, and host details UI for Android MDM feature (#26577) 2025-02-26 12:03:56 -06:00
Mike McNeilandEric e336cdebba Website: Add Zapier webhook (#26372)
relates to https://github.com/fleetdm/confidential/pull/9650

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2025-02-26 11:18:20 -06:00
Victor Lyuboslavsky 3d5666d4c6 Added GET enterprise API endpoint. (#26555)
For #26218 

- Added `GET /api/_version_/fleet/android_enterprise` andpoint and tests
- Set up some testing infrastructure for Android service tests -- see
new README.md

# Checklist for submitter

- [x] Added/updated automated tests
- [x] Manual QA for all new/changed functionality
2025-02-26 10:47:05 -06:00
Martin Angers d903cf9081 Android: add test to verify that filtering hosts by android platform is supported (#26613) 2025-02-26 11:31:19 -05:00
Gabriel Hernandez f49a45f26d Feat UI finish cert api integration (#26598)
For #25464

UI work to integrate the host certificates UI with the finished API
endpoints


- [x] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
2025-02-26 15:32:53 +00:00
Martin Angers 4b21633e31 Fix activity actor name for setup experience items (#26599) 2025-02-26 09:52:41 -05:00
Allen Houchins 023acb85c2 Update configuring-full-names-in-google-workspace.md (#26591)
Fixed formatting issue.
2025-02-25 18:36:09 -05:00
Marko Lisica 727f9aaf4c Update Windows setup guide to include how to turn off MDM (#26562)
Changes:
- Windows MDM setup guide update: include instructions how to turn off
MDM
- Redirect: new link `learn-more-about/windows-mdm` that will be used in
the error message.
2025-02-25 18:35:41 -05:00
Eric 8fe2ee7ded 2025-02-25 Website test: Change homepage heading (#26529)
Changes:
- Reverted the homepage heading text changes from #25916
2025-02-26 08:19:14 +09:00
Dante CatalfamoandLucas Manuel Rodriguez a1e752341b Only allow once instance of fleet desktop at once (#25821)
#25396

---------

Co-authored-by: Lucas Manuel Rodriguez <lucas@fleetdm.com>
2025-02-25 16:46:06 -05:00
Lucas Manuel Rodriguez ae00add76e Update alpine to patch vulnerability with severity "HIGH" (#26593)
The vulnerability was posted by a prospect.

Posting manual command until we get #25902 done.
```sh
trivy image --ignore-unfixed --pkg-types os,library --severity CRITICAL,HIGH --show-suppressed fleetdm/fleet:v4.64.1
[...]
fleetdm/fleet:v4.64.1 (alpine 3.21.0)

Total: 2 (HIGH: 2, CRITICAL: 0)

┌────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬──────────────────────────────────────────────────────────┐
│  Library   │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                          Title                           │
├────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼──────────────────────────────────────────────────────────┤
│ libcrypto3 │ CVE-2024-12797 │ HIGH     │ fixed  │ 3.3.2-r4          │ 3.3.3-r0      │ openssl: RFC7250 handshakes with unauthenticated servers │
│            │                │          │        │                   │               │ don't abort as expected                                  │
│            │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-12797               │
├────────────┤                │          │        │                   │               │                                                          │
│ libssl3    │                │          │        │                   │               │                                                          │
│            │                │          │        │                   │               │                                                          │
│            │                │          │        │                   │               │                                                          │
└────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴──────────────────────────────────────────────────────────┘
```
2025-02-25 18:33:24 -03:00
Dante Catalfamo 347ab3955a Always allow passwords for users (#26334)
For #25834
2025-02-25 16:27:58 -05:00
Allen Houchins 5a37455a7b Update workstations-canary.yml (#26595)
Added santa-block-script.sh to the Workstations (canary) team
2025-02-25 16:00:18 -05:00
Martin Angers d249aa888b Android: add 'Android' builtin label, add new Android hosts to 'All hosts' and this label (#26585) 2025-02-25 14:44:48 -05:00
Martin Angers 0adf67e538 Fix conflicts 2025-02-25 14:39:35 -05:00
Allen Houchins 4c244657dd Adding santa for testing (#26586)
Adding santa for testing:
https://github.com/fleetdm/fleet/issues/24910
2025-02-25 14:11:03 -05:00
Jahziel Villasana-Espinoza 7ec49e1c63 fix: improve sanitation of python version strings to match CPEs (#26538)
> for #25991

![Screenshot 2025-02-21 at 3 33
00 PM](https://github.com/user-attachments/assets/a0ba59d5-40cc-48a9-9ba1-0e0beecafd44)


# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added/updated automated tests
- [x] A detailed QA plan exists on the associated ticket (if it isn't
there, work with the product group's QA engineer to add it)
- [x] Manual QA for all new/changed functionality
2025-02-25 13:59:35 -05:00
Allen HouchinsandDrew Baker 962dcee3c6 Create configuring-full-names-in-google-workspace.md (#26587)
New article for how to populate full name during macOS Setup experience
using Google Workspace.

---------

Co-authored-by: Drew Baker <89049099+Drew-P-drawers@users.noreply.github.com>
2025-02-25 12:50:10 -06:00
Scott Gress e013ce742a Show "Manage Automations" dropdown when no policies are present (#26298)
For #23243 

# Checklist for submitter

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.

## Details

This PR changes the behavior of the Manage Automations dropdown on the
Manage Policies page. Any user that has permission to manage policies
will now always see the dropdown. If there are no policies added for the
selected team (or no policies at all, in the case of "All teams" or
users on the free tier), the dropdown is disabled with a tooltip.

## Screenshots

**Free tier:**
<img width="753" alt="image"
src="https://github.com/user-attachments/assets/37a3b97a-74b3-4495-ace4-bfece30b3822"
/>

---

**Premium tier, All Teams:**
<img width="736" alt="image"
src="https://github.com/user-attachments/assets/bedd9a5f-e2aa-49da-8943-61bc69af9744"
/>

---

**Premium tier, team selected:**
<img width="744" alt="image"
src="https://github.com/user-attachments/assets/e1c2397b-1d19-46f2-b78d-e7a923f91c8f"
/>
2025-02-25 11:10:33 -06:00
EricandMike Thomas ad610b4fae Website: update link styles across the website. (#26544)
Closes: #25839

Changes:
- Updated the default styles for links on the Fleet website.

---------

Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
2025-02-25 11:08:23 -06:00
jacobshandlingandJacob Shandling 2cff9fa094 UI: Prevent wrong background color on custom settings tooltip hover (#26548)
## For a small unreleased bug:

### The bug: 
**(Cursor not captured by screenshots, moving into and out of the
tooltip)**

![ezgif-19a136d8ef938f](https://github.com/user-attachments/assets/66ce9403-fcbf-42ba-804d-7c0e917e6416)

### Fixed:
**(Cursor not captured by screenshots, moving into and out of the
tooltip)**

![ezgif-176a42a2e2c05c](https://github.com/user-attachments/assets/f17b35e4-a44c-4a5c-a11c-d66c5bb9edc4)

- [x] Manual QA for all new/changed functionality

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2025-02-25 10:48:29 -06:00
Martin Angers f5cf6a3c6f Add validation extension to the make decoder flow, validate order_key (#26567) 2025-02-25 10:42:17 -05:00
Allen Houchins 90b4e2eabf Update mac-enrollment-profile-up-to-date.yml (#26563)
Updated for clearer messaging. Also removed steps in dogfood since they
may or may not work as expected.
2025-02-25 00:48:46 -06:00
Jahziel Villasana-EspinozaandIan Littman dfc58d9600 fix: add index to os cve column (#26576)
> for #26178

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] If database migrations are included, checked table schema to
confirm autoupdate
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Ian Littman <iansltx@gmail.com>
2025-02-24 21:59:56 -05:00
Jahziel Villasana-Espinoza e6c5cf002a fix: don't re-use title ID from a windows app for a vpp app (#26546)
> for #25651

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added/updated automated tests
- [x] A detailed QA plan exists on the associated ticket (if it isn't
there, work with the product group's QA engineer to add it)
- [x] Manual QA for all new/changed functionality
2025-02-24 17:51:12 -05:00
Mike McNeil abfe3b3fe6 How to propose an idea for an article + how to write one (#26549) 2025-02-24 16:50:23 -06:00
Ian Littman f5ca50a340 Always record uploaded pkg files as "apps" source if they have a bundle ID to avoid conflicts with the same package appearing in inventory later (#26374)
For #26373.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] A detailed QA plan exists on the associated ticket (if it isn't
there, work with the product group's QA engineer to add it)
- [x] Manual QA for all new/changed functionality

Autoated tests cover the code in the changes.
2025-02-24 16:38:57 -06:00
Noah Talerman a14fd0d263 Terraform cleanup (#26379)
- Remove `dogfood/aws/` folder
- Update links in docs and guides
2025-02-24 17:35:50 -05:00
Martin Angers dd6124bff9 Add android_devices to hosts-related tables to delete (#26568) 2025-02-24 17:09:21 -05:00
Ian Littman 4abbb5e06e Add automated test coverage for VPP, FMA auto-install (#26571)
For #26190. Code is already merged, and tests didn't find any issues.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Added/updated automated tests
2025-02-24 15:56:49 -06:00
EugeneandNoah Talerman 9ef382389e Update yaml-files.md intro section for legibility and to call out missing or mispelled settings. (#26459)
Updated top text area for legibility and to call out what happens to
missing or mispelled settings.

These changes were prompted by
https://github.com/fleetdm/fleet/issues/26450

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2025-02-24 15:44:43 -06:00
Noah Talerman f9a8910919 Agent configuration: small clarification (#26498)
`script_execution_timeout` is in seconds
2025-02-24 15:31:51 -06:00
Noah Talerman b3dd8e58a3 YAML reference docs: fix indenting (#26566)
Fix example
[here](https://fleetdm.com/docs/configuration/yaml-files#example5):

![Screenshot 2025-02-24 at 3 18
38 PM](https://github.com/user-attachments/assets/64524043-190a-4194-af3a-b2ad2fb47358)
2025-02-24 15:23:02 -06:00
Ian Littman 91c90b681f Change default vuln feed concurrency from 5 to 1 (#26565)
We're seeing database load issues at the default concurrency level, so
need to pick a significantly more conservative default, which we've
rolled out to a number of environments already as an override.

QA'd by adding the following at the top of `newVulnerabilitiesSchedule`
in `cron.go`:

```go
	fmt.Printf("%+v\n", config)
```

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] A detailed QA plan exists on the associated ticket (if it isn't
there, work with the product group's QA engineer to add it)
- [x] Manual QA for all new/changed functionality
2025-02-24 15:15:04 -06:00
RachelElysia e98a93e8bc Fleet UI: Auto-install VPP apps (#26455) 2025-02-24 16:01:55 -05:00
Victor Lyuboslavsky bf7917b503 Basic Android enroll functionality (#26386)
For #26219 

Video explaining the PR: https://www.youtube.com/watch?v=t2hmpE7N-50

This PR includes:
- applying a default/dummy policy to Android enterprise
- Setting up PubSub topic and subscription to point at Fleet Server
- Generating device enrollment token
- Enrolling a device

Although some tests were added, this PR is mostly manually tested.
Integration tests are an outstanding task.

# Checklist for submitter

- [x] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [x] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [x] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [x] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
- [x] Added/updated automated tests
- [x] Manual QA for all new/changed functionality
2025-02-24 14:31:21 -06:00
Martin Angers 38f51ebc4e Fix indent 2025-02-24 14:30:22 -05:00
Martin Angers 8477856886 FIx conflicts 2025-02-24 14:28:34 -05:00
Martin Angers a141830f76 CHV: implement paginated list certificates endpoints (#26554) 2025-02-24 12:52:39 -05:00
Allen Houchins 713068f4c1 Update mac-enrollment-profile-up-to-date.yml (#26530)
Updated resolution language to be more accurate and user friendly.
2025-02-24 10:14:51 -06:00
Scott Gress 0c95c50a41 Make desktop server display manager restart (#26526)
For #25616 

# Checklist for submitter

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- For Orbit and Fleet Desktop changes:
- [X] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- Tested on macOS, Windows, Ubuntu, Fedora (w/ and without system tray)
and Debian (w/ and without system tray)

## Details

This PR addresses the issue that on Ubuntu, if a user restarts their
display manager (e.g. with `sudo systemctl restart gdm3`), the Fleet
Desktop tray icon disappears and doesn't come back. The solution in this
PR is to add a function that runs in a loop and checks whether the tray
icon still exists, and if not, kills the Fleet Desktop process. The
parent Orbit process already has code to restart the desktop if it dies.
We also update the Orbit checker to run every 15 seconds, to limit the
delay in the icon coming back after a restart.

Also included in this PR is a rename from `desktop_unix.go` to
`desktop_linux.go`, which will be used automatically for linux builds,
and a new `desktop_darwin.go` for macos builds, and the removal of
redundant build directives for all.
2025-02-24 10:14:45 -06:00
Victor Lyuboslavsky 902ef50ec8 Add GitOps-related comments from Backend Sync. (#26545)
Added GitOps-related comments to patterns.md as discussed on 2025/02/11
Backend Sync.
2025-02-24 09:11:04 -06:00
jacobshandlingandJacob Shandling b990b3c6d9 UI - GitOps Mode, 3/3 (#26537)
## For #26229 

- Remove feature flag
- Undo updates to 4 Policies automation modals to facilitate refactor
being implemented in parallel
- Remaining specs:

**Manage teams:**

![manage-teams](https://github.com/user-attachments/assets/af8d8d10-2add-4d8d-8961-61d0de44b067)

Empty:
<img width="1464" alt="Screenshot 2025-02-21 at 4 27 30 PM"
src="https://github.com/user-attachments/assets/17cf4fc2-cc4e-4f63-8276-3db79b44e9e1"
/>

**Team users:**

![team-users](https://github.com/user-attachments/assets/1bf106c1-bdf7-442c-a957-6c9eea6af14d)
Empty:
<img width="1464" alt="Screenshot 2025-02-21 at 4 29 01 PM"
src="https://github.com/user-attachments/assets/46dd0e44-2af3-4ca7-a0be-628e358a61d7"
/>

**Team agent options:**

![team-agent-options](https://github.com/user-attachments/assets/7d4ee8b6-03c7-48d2-8337-b2c33e50abe9)

**Team settings:**

![team-settings](https://github.com/user-attachments/assets/a67b45fc-a5ce-4267-b8fd-2f1e300d1fd8)


- [x] Changes file added for user-visible changes in `changes/`
- [x] Added/updated automated tests
- [ ] A detailed QA plan exists on the associated ticket (if it isn't
there, work with the product group's QA engineer to add it)
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2025-02-21 16:56:20 -08:00
Sam Pfluger 0595485f65 Add Communicate marketing priority level (#26547) 2025-02-21 18:53:37 -06:00
Ian Littman ce36352fcd Allow automatic creation of software install policy for VPP and FMA apps in API (#26440)
For #26190. FMA is included here because the previous implementation was
client-side. QA'd manually. Follow-up PR soon with automated test coverage.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added/updated automated tests
- [x] A detailed QA plan exists on the associated ticket (if it isn't
there, work with the product group's QA engineer to add it)
- [x] Manual QA for all new/changed functionality
2025-02-21 18:08:48 -06:00
Jahziel Villasana-Espinoza defe2dcf11 feat: add more vuln software to oqp (#26532)
> no issue. trying to make loadtests with vulnerable software more
accurate. these are the sw versions with most vulns from dogfood.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Manual QA for all new/changed functionality
2025-02-21 17:54:57 -05:00