Commit Graph
14526 Commits
Author SHA1 Message Date
Onasis Munro ed526be3bb Update fleet-4.55.0.md (#24055) 2024-11-26 13:11:38 -06:00
Onasis Munro fa4af44d72 Update fleet-4.54.0.md (#24056) 2024-11-26 13:09:55 -06:00
Onasis Munro 42a0c3aea1 Update fleet-4.56.0.md (#24054) 2024-11-26 13:09:43 -06:00
Onasis Munro 0d8808a6f9 Update fleet-4.58.0.md (#24023) 2024-11-26 13:09:26 -06:00
Onasis Munro a8cb340034 Update fleet-4.57.0.md (#24064) 2024-11-26 12:13:42 -06:00
jacobshandlingandJacob Shandling ec7bb8be09 UI - Fix DUP banners for Fedora disk encryption (#24153)
## Addresses unreleased bug where banners were not functioning for
Fedora host

<img width="1464" alt="Screenshot 2024-11-25 at 4 39 05 PM"
src="https://github.com/user-attachments/assets/78c3adee-ff45-4236-b1b1-299d79575cb6">


- [x] Manual QA for all new/changed functionality

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-11-26 10:09:57 -08:00
Allen Houchins c0c2474763 Updated Zoom download URL (#24151)
Updated Zoom download URL to address this issue:
fleetdm/confidential#8977

More info here:
https://fleetdm.slack.com/archives/C019WG4GH0A/p1732570447472539
2024-11-26 10:35:38 -06:00
Ian Littman 6fb9ddfdcd Bump retries/timeouts for NVD pulls (#24160)
For #24132

Drops retry wait a bit as there doesn't seem to be a point in waiting
that long (I pulled feeds with a 10s retry interval in curl earlier).

Total time to pull feeds and build the CPE DB was ~4 hours this evening
(~6pm to ~10pm CST).

# Checklist for submitter

- [x] Manual QA for all new/changed functionality
2024-11-26 09:08:10 -06:00
Mike McNeil 2f0af27394 Website: Talk to an engineer (#24159) 2024-11-25 21:55:22 -06:00
Isabell Reedy 63d958d762 Removing finance KPIs we no longer use (#24147) 2024-11-25 18:23:18 -06:00
Rachael Shaw 9a10eb30da Allow clicking through handbook back-to-top button container (#24154)
This fix was already applied to the button on the docs pages, but not
the handbook.
2024-11-25 17:47:42 -06:00
Jahziel Villasana-Espinoza d4b0edf8c9 fix: small typo (#24149)
> No issue, just something I noticed

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
2024-11-25 18:00:07 -05:00
Noah Talerman a2b925c0f6 Email 2FA will be paid (#23986)
Update the pricing page for this coming soon feature
2024-11-25 13:57:16 -08:00
Noah Talerman 0fad882529 Fleet 4.59.0: fix typo (#24133) 2024-11-25 13:57:04 -08:00
Eric 5f5b7bb273 Website: Update CRM helper to handle contacts with no stage. (#24143)
Closes: https://github.com/fleetdm/confidential/issues/8975

Changes:
- Updated the update-or-create-contact-and-account helper to only check
the current stage value of a contact record if the value is set.
2024-11-25 14:58:25 -06:00
Luke Heath e8021462f5 Create mac-mozilla-firefox.yml (#24140) 2024-11-25 14:52:33 -06:00
RachelElysia 768d848946 Fleet UI: 4.60 unreleased bug fix for scrollable content (#24139) 2024-11-25 15:51:53 -05:00
Eric da13fb15fa Website: /endpoint-ops » /observability (#24111)
Closes: #24106

Changes:
- Changed the /endpoint-ops page to be at /observability
- Added a redirect for /ednpoint-ops that redirects users to the
/observability page with original query parameters intact.
2024-11-25 14:20:19 -06:00
Eric c53332259f Website: Update license dispenser form (#23838)
Closes: https://github.com/fleetdm/confidential/issues/7696

Changes:
- Added `stripe` as a dependency
- Updated the license dispenser form to take users to a stripe hosted
checkout page where they can provide their billing address and Tax ID
depending on their location.
- Updated the receive-from-stripe webhook to fulfill license dispenser
purchases made via stripe checkout
- Added a new action: get-stripe-checkout-session-url. This action
creates a Stripe Checkout session and returns the URL
- Updated the customer dashboard to have a link that users can visit to
update their billing information, add more hosts to their Fleet premium
license, or cancel their subscription.
- Added a new action: redirect-to-stripe-billing-portal. An action that
redirects users to a Stripe-hosted billing portal.
2024-11-25 13:55:56 -06:00
Lucas Manuel Rodriguez 7d04119245 Release fleetd 1.36.0 (#24136) 2024-11-25 16:34:09 -03:00
Konstantin Sykulev 1446d28029 github cli false negative vulnerability (#24100)
Added a cpe translation for the `gh` command. The software is identified
as `gh`, however, the cpe (`cpe:2.3:a:github:cli:2.62.0:*:*:*:*:*:*:*`)
name is labeled as `cli`, thus the mismatch.

https://github.com/fleetdm/fleet/issues/24009

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-11-25 12:32:10 -06:00
jacobshandlingandJacob Shandling bb4e3c632e UI - Fix another (less) flakey frontend test (#24110)
- [x] Added/updated tests

test-js (ubuntu-latest) SuccessCount / RunCount:
3/3

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-11-25 10:28:58 -08:00
Allen Houchins f47c44f685 Enable macOS Setup Experience for Workstations team (#24125)
In support of: https://github.com/fleetdm/confidential/issues/8790

I made the following changes to support the macOS Setup Experience in
`dogfood` for the Workstations team
- moved Software titles to their own dedicated folder and `yml` files so
they could be called via path
- edited the `macos_setup` configuration in the Workstations team yml
file.
- edited the `macos_setup_assistant` json file to skip certain items
during initial setup
- completed a `dry-run` successfully before submitting this pull request

# Expected behavior
When an ADE Mac boots for the first time, macOS Setup Experience will
automatically install Google Chrome, Zoom, Slack, and 1Password.

- Google Chrome will be downloaded via URL
- Zoom will be downloaded via URL
- Slack will be downloaded via VPP
- 1Password will be downloaded via VPP

No scripts have been included at this time and will be tracked in a
separate issue.
2024-11-25 12:27:56 -06:00
Luke Heath 95c51ac4d2 Update Engineering handbook (#24127) 2024-11-25 11:17:07 -06:00
Victor Lyuboslavsky 5abcf2ef3a Drop duplicate MySQL indexes. (#24107)
#24109 
Duplicate indexes identified after running pt-duplicate-key-checker
https://docs.percona.com/percona-toolkit/pt-duplicate-key-checker.html

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- For database migrations:
- [x] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [x] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [x] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
2024-11-25 10:03:19 -06:00
Martin Angers f0e1dccc8a Bugfix: use an HTTP client that supports proxies for APNS push notifications (#23988) 2024-11-25 09:45:38 -05:00
61a79f536b Include Linux disk encryption status in configuration profiles aggregate status response when applicable, fix disk encryption/MDM configuration order-of-operations issues, add integration tests for LUKS (#24114)
## Addresses #24112, #24116, #23587

**For #24112, Counts included:**
<img width="1392" alt="Screenshot 2024-11-22 at 5 31 06 PM"
src="https://github.com/user-attachments/assets/2bb306d7-1130-4106-aef8-475b8be1f6b2">

- [x] Include counts when disk encryption is enforced
- [x] Exclude counts when disk encryption isn't enforced
__
- [x] Added/updated tests

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
Co-authored-by: Ian Littman <iansltx@gmail.com>
2024-11-25 08:34:43 -06:00
Lucas Manuel Rodriguez 5cb85603a7 Lock rust dependencies for apple-codesign (#24123)
Fixes the following failures:
https://github.com/fleetdm/fleet/actions/runs/11984354126/job/33415026230
2024-11-25 11:04:21 -03:00
RachelElysia 65244eb556 Fleet UI: Fix learn more about JIT provisioning link (#24092) 2024-11-25 08:57:51 -05:00
RachelElysia b45aa4761d Fleet UI: Add more description to delete host modal (#24089) 2024-11-25 08:57:27 -05:00
RachelElysia 1f206a87b5 Fleet UI: Fix VMs bold letter bug (#23903) 2024-11-25 08:56:38 -05:00
Mike McNeil 4735340b07 Update transparency.ejs (#24117) 2024-11-24 21:17:47 -06:00
Alex Mitchell 8b7f7ed781 Update communications.md (#24072)
Switched the order of getting a contract reviewed and getting a contract
signed.
2024-11-23 00:27:32 -06:00
Ian LittmanandTim Lee 195bb861e0 Update contributor API docs to cover LUKS trigger/escrow endpoints (#23583, #23584) (#23943)
Other cleanup:

* Remove orphaned FileVault rotation ToC link
* Revise transparency endpoint to reference new "About Fleet"
terminology
* Remove enforce_bitlocker_encryption Fleet Desktop notification (that
notification is on Orbit config, which we don't document in contributor
docs, not on the Fleet Desktop endpoint)

---------

Co-authored-by: Tim Lee <timlee@fleetdm.com>
2024-11-22 20:51:57 -06:00
Jahziel Villasana-Espinoza ee73249f32 fix: return a better error when attempting to turn off MDM for a Windows host (#24044)
> Related issue: #23158

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-11-22 19:54:06 -05:00
RachelElysiaandJacob Shandling a6809039c8 FE: Fix flaky host summary tooltip test (#24029)
Let's see if this is any better

- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality

`test-js (ubuntu-latest)` SuccessCount / RunCount:
5/5 🎉 

___
after merging `main`:
`test-js (ubuntu-latest)` SuccessCount / RunCount:
5/5 
__

10/10 total 🎉🎉

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-11-22 15:34:51 -08:00
Luke Heath 3b64f10a77 Comment out flakey frontend test (#24105) 2024-11-22 17:09:35 -06:00
Rachael Shaw 7255596009 Add redirect for disk encryption guide (#24102)
For unreleased bug #24010
2024-11-22 16:40:13 -06:00
Luke Heath 18391b5901 Add TUF handbook page (#23674) 2024-11-22 14:27:26 -06:00
Eric a95a83cf2b Docs: change name of "Deploy Fleet" page (#23985)
Closes: #23759

Changes:
- Added a title meta tag to the "Deploy Fleet" documentation page to
change the name to "Hosting Fleet"

> Note: This only changes the title of the page in the UI on
fleetdm.com, the URL will still be `/docs/deploy/deploy-fleet`
2024-11-22 13:39:37 -06:00
Luke Heath 6c88513963 Update Reference-Architectures.md (#23990) 2024-11-22 13:39:27 -06:00
Tim Lee 7b932e8e49 linux key escrow progress windows (#24069) 2024-11-22 12:30:13 -07:00
Jahziel Villasana-Espinoza 5dab4f51b5 feat: do not run setup experience on hosts in a team with no software or script configured (#24073)
> Related issue: #24024 

# Checklist for submitter

Demo video: https://www.youtube.com/watch?v=F7p2PyJce7E

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-11-22 13:52:28 -05:00
Eric 2902d01691 Website: Updating bottom heading padding on software management page. (#24090)
Closes: #24066


Changes:
- Updated the padding on the bottom heading on the software management
page on smaller screens
2024-11-22 12:35:00 -06:00
Marko Lisica 04d1ded81a Remove step to apply env variables to profiles (fleetctl gitops is doing this) (#24078)
I beleive we don't need this step anymore, since `fleetctl gitops` will
replace it with real value and send to the server. This should be done
in #17309.
2024-11-22 19:30:40 +01:00
Mike McNeilandEric 3dd2a80bcc Add some comments and get eric started (#23666)
Co-authored-by: Eric <eashaw@sailsjs.com>
2024-11-22 12:14:50 -06:00
Noah Talerman 6e0327220b Enforce macOS 15.1.1 (#24075)
Deadline is Monday after 🦃 Thanksgiving (US holiday)
2024-11-22 13:00:40 -05:00
Lucas Manuel Rodriguez a8ba004c61 Add expiration checks for targets and snapshot roles (#24081)
[#8489](https://github.com/fleetdm/confidential/issues/8489)

We had the timestamp check.
Robert added the root check recently.
Am now duplicating the check for `snapshot` and `targets` metadata
files.

PS: Please review with whitespace changes disabled.
2024-11-22 14:46:03 -03:00
Drew Baker 87fac42da7 Update introducing-workbrew.md (#24076) 2024-11-22 12:43:18 -05:00
Mike McNeil 96f47af89a Update endpoint-ops.ejs (#24079) 2024-11-22 10:47:30 -06:00