Commit Graph
14501 Commits
Author SHA1 Message Date
Martin Angers f0e1dccc8a Bugfix: use an HTTP client that supports proxies for APNS push notifications (#23988) 2024-11-25 09:45:38 -05:00
61a79f536b Include Linux disk encryption status in configuration profiles aggregate status response when applicable, fix disk encryption/MDM configuration order-of-operations issues, add integration tests for LUKS (#24114)
## Addresses #24112, #24116, #23587

**For #24112, Counts included:**
<img width="1392" alt="Screenshot 2024-11-22 at 5 31 06 PM"
src="https://github.com/user-attachments/assets/2bb306d7-1130-4106-aef8-475b8be1f6b2">

- [x] Include counts when disk encryption is enforced
- [x] Exclude counts when disk encryption isn't enforced
__
- [x] Added/updated tests

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
Co-authored-by: Ian Littman <iansltx@gmail.com>
2024-11-25 08:34:43 -06:00
Lucas Manuel Rodriguez 5cb85603a7 Lock rust dependencies for apple-codesign (#24123)
Fixes the following failures:
https://github.com/fleetdm/fleet/actions/runs/11984354126/job/33415026230
2024-11-25 11:04:21 -03:00
RachelElysia 65244eb556 Fleet UI: Fix learn more about JIT provisioning link (#24092) 2024-11-25 08:57:51 -05:00
RachelElysia b45aa4761d Fleet UI: Add more description to delete host modal (#24089) 2024-11-25 08:57:27 -05:00
RachelElysia 1f206a87b5 Fleet UI: Fix VMs bold letter bug (#23903) 2024-11-25 08:56:38 -05:00
Mike McNeil 4735340b07 Update transparency.ejs (#24117) 2024-11-24 21:17:47 -06:00
Alex Mitchell 8b7f7ed781 Update communications.md (#24072)
Switched the order of getting a contract reviewed and getting a contract
signed.
2024-11-23 00:27:32 -06:00
Ian LittmanandTim Lee 195bb861e0 Update contributor API docs to cover LUKS trigger/escrow endpoints (#23583, #23584) (#23943)
Other cleanup:

* Remove orphaned FileVault rotation ToC link
* Revise transparency endpoint to reference new "About Fleet"
terminology
* Remove enforce_bitlocker_encryption Fleet Desktop notification (that
notification is on Orbit config, which we don't document in contributor
docs, not on the Fleet Desktop endpoint)

---------

Co-authored-by: Tim Lee <timlee@fleetdm.com>
2024-11-22 20:51:57 -06:00
Jahziel Villasana-Espinoza ee73249f32 fix: return a better error when attempting to turn off MDM for a Windows host (#24044)
> Related issue: #23158

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-11-22 19:54:06 -05:00
RachelElysiaandJacob Shandling a6809039c8 FE: Fix flaky host summary tooltip test (#24029)
Let's see if this is any better

- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality

`test-js (ubuntu-latest)` SuccessCount / RunCount:
5/5 🎉 

___
after merging `main`:
`test-js (ubuntu-latest)` SuccessCount / RunCount:
5/5 
__

10/10 total 🎉🎉

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-11-22 15:34:51 -08:00
Luke Heath 3b64f10a77 Comment out flakey frontend test (#24105) 2024-11-22 17:09:35 -06:00
Rachael Shaw 7255596009 Add redirect for disk encryption guide (#24102)
For unreleased bug #24010
2024-11-22 16:40:13 -06:00
Luke Heath 18391b5901 Add TUF handbook page (#23674) 2024-11-22 14:27:26 -06:00
Eric a95a83cf2b Docs: change name of "Deploy Fleet" page (#23985)
Closes: #23759

Changes:
- Added a title meta tag to the "Deploy Fleet" documentation page to
change the name to "Hosting Fleet"

> Note: This only changes the title of the page in the UI on
fleetdm.com, the URL will still be `/docs/deploy/deploy-fleet`
2024-11-22 13:39:37 -06:00
Luke Heath 6c88513963 Update Reference-Architectures.md (#23990) 2024-11-22 13:39:27 -06:00
Tim Lee 7b932e8e49 linux key escrow progress windows (#24069) 2024-11-22 12:30:13 -07:00
Jahziel Villasana-Espinoza 5dab4f51b5 feat: do not run setup experience on hosts in a team with no software or script configured (#24073)
> Related issue: #24024 

# Checklist for submitter

Demo video: https://www.youtube.com/watch?v=F7p2PyJce7E

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-11-22 13:52:28 -05:00
Eric 2902d01691 Website: Updating bottom heading padding on software management page. (#24090)
Closes: #24066


Changes:
- Updated the padding on the bottom heading on the software management
page on smaller screens
2024-11-22 12:35:00 -06:00
Marko Lisica 04d1ded81a Remove step to apply env variables to profiles (fleetctl gitops is doing this) (#24078)
I beleive we don't need this step anymore, since `fleetctl gitops` will
replace it with real value and send to the server. This should be done
in #17309.
2024-11-22 19:30:40 +01:00
Mike McNeilandEric 3dd2a80bcc Add some comments and get eric started (#23666)
Co-authored-by: Eric <eashaw@sailsjs.com>
2024-11-22 12:14:50 -06:00
Noah Talerman 6e0327220b Enforce macOS 15.1.1 (#24075)
Deadline is Monday after 🦃 Thanksgiving (US holiday)
2024-11-22 13:00:40 -05:00
Lucas Manuel Rodriguez a8ba004c61 Add expiration checks for targets and snapshot roles (#24081)
[#8489](https://github.com/fleetdm/confidential/issues/8489)

We had the timestamp check.
Robert added the root check recently.
Am now duplicating the check for `snapshot` and `targets` metadata
files.

PS: Please review with whitespace changes disabled.
2024-11-22 14:46:03 -03:00
Drew Baker 87fac42da7 Update introducing-workbrew.md (#24076) 2024-11-22 12:43:18 -05:00
Mike McNeil 96f47af89a Update endpoint-ops.ejs (#24079) 2024-11-22 10:47:30 -06:00
Sharon Katz d80161a5b9 Added statistics for number of saved queries. (#24043)
Added statistics for number of saved queries.
2024-11-22 11:24:29 -05:00
Sarah Gillespie 9de98d80b7 Apply minimum OS version enforcement to MDM SSO endpoint (#23856) 2024-11-22 09:56:36 -06:00
Mike Thomas fa1065d0f9 Update software-management-feature-slide-1-1072x480@2x.png (#24065)
Updated image to remove placeholders
2024-11-22 10:41:26 +09:00
Mike McNeil ca27263cf6 Typofix: Update software-management.ejs (#24053) 2024-11-21 18:26:07 -06:00
Eric e8a0092d9f Website: Update endpoint-ops landing page view action (#24052)
Changes:
- Updated the endpoint ops view action to use the user's
primaryBuyingSituation for personalization if it is set, and to default
to the IT view if not (Note: this behavior is overridden with a purpose
query string. e.g., ?purpose=security.
2024-11-21 17:43:58 -06:00
Eric 948a790410 Website: update default personalization on endpoint ops page. (#24000)
Closes: #23987

Changes:
- Updated the endpoint ops page to default to the IT personalization if
no primaryBuyingSituation or `purpose` query string is provided/set
2024-11-21 17:26:57 -06:00
Eric 2f616fa93a 2024-11-21 Website: browser compatibility fixes (#24051)
Closes: #24046
Closes: #24047
Closes: #24048
Closes: #24050
Related to: #23574


Changes:
- Fixed the width of the login form on mobile devices
- Updated video modal styles on the /customer-stories page 
- Fixed the vertical alignment of the search input placeholder on the
/queries page
- Updated the height of the cards on the /customer-stories page
- Updated the horizontal padding on the /guides page
2024-11-21 17:15:53 -06:00
Konstantin SykulevandIan Littman 46f10b85cd Improved label(s) validation when running queries (#23834)
Previously when passing labels to the query run endpoints that do not
exist, the labels would simply be ignored. Now the endpoint will return
an error indicating which labels are invalid. This change also affects
the `fleetctl query` command `--labels` flag.

https://github.com/fleetdm/fleet/issues/23015

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Ian Littman <iansltx@gmail.com>
2024-11-21 16:13:30 -06:00
Eric ecc2bfb1f0 Website: Prevent scrolling when mobile nav menu is open (#23992)
Closes: #23705

Changes:
- Updated the styles and layout of the website to prevent scrolling when
the mobile navigation menu is open.
- Updated padding on the mobile navigation menu to keep the Fleet logo
in the same place when the menu is opened.
2024-11-21 15:09:04 -06:00
Ian Littman 43f21c0d95 Improve LUKS escrow trigger error messages (#24030)
- [x] Added/updated tests
~~- [ ] Manual QA for all new/changed functionality~~ Testing as part of
E2E QA
2024-11-21 13:33:37 -06:00
Ian Littman fa93f34b5e Fix Orbit version check in LUKS escrow trigger endpoint (#24026)
The host context never includes Orbit version (only the hosts/{id}
endpoint does) so we need to grab that data when we need it.

# Checklist for submitter

- [x] Added/updated tests
~~- [ ] Manual QA for all new/changed functionality~~ will be part of
E2E QA
2024-11-21 12:41:38 -06:00
Sharon KatzandLuke Heath 6dcf78c2a8 Process exceptions for non-released code (#23393)
Process exceptions for non-released code.
Namely QA and ticket handling.

---------

Co-authored-by: Luke Heath <luke@fleetdm.com>
2024-11-21 12:59:48 -05:00
jacobshandlingandJacob Shandling 4a7654fc3d UI - remove an inaccurate comment (#24022)
Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-11-21 09:59:34 -08:00
jacobshandlingandJacob Shandling 830ff9dea5 UI - fix a small issue in the device user page banner logic, add test (#24001)
**Bug:**
<img width="1399" alt="Screenshot 2024-11-20 at 4 43 19 PM"
src="https://github.com/user-attachments/assets/31a3fd0e-3eda-461b-9c56-d4e821f8592f">


**Fixed:**
<img width="1391" alt="Screenshot 2024-11-20 at 4 44 48 PM"
src="https://github.com/user-attachments/assets/257b080a-d83e-4317-b3da-91922ed423a0">


- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-11-21 09:29:24 -08:00
Tim Lee f3dfbd5a78 Remove orbit artifact (#24018)
removing accidental commit of orbit build artifact
2024-11-21 11:13:40 -06:00
Ian Littman 5f7a06044e Populate disk encryption status when pulling a host by device auth token (#24014)
No performance impact since we're already querying that table.
@mostlikelee found this bug when trying to end-to-end test Linux disk
encryption escrow triggering (#23583). The added tests panic without the
extra line in the query.

# Checklist for submitter
- [x] Added/updated tests
~~- [ ] Manual QA for all new/changed functionality~~ Handled as part of
E2E LUKS testing
2024-11-21 10:49:39 -06:00
Tim Lee ee1c3c5b8d Linux Key Escrow - Agent (#23771) 2024-11-21 09:31:03 -07:00
Noah Talerman d75b51e065 Update Fleet-maintained apps guide (#23526)
For the following bug:
- #23304
2024-11-21 09:41:12 -05:00
Noah Talerman 98fb99f27a Update pricing-features-table.yml (#23995)
- Make it so you can CMD+F the YAML to figure out that policies on the
My device page are Fleet Premium only
2024-11-21 09:34:38 -05:00
Jahziel Villasana-Espinoza a3650beec8 fix: some guide cleanup (#23991)
> Related issue: #22753

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Manual QA for all new/changed functionality
2024-11-21 08:20:28 -05:00
jacobshandlingandJacob Shandling 332453f983 remove MDM middleware from 2 endpoints (#23997)
- Integration tests upcoming with
https://app.zenhub.com/workspaces/g-endpoint-ops-current-sprint-63bd7e0bf75dba002a2343ac/issues/gh/fleetdm/fleet/23587

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-11-20 16:51:00 -08:00
Eric 70d01d9a48 Website: Update testimonial sort order on /customer-stories, render testimonials server-side (#23996)
Changes:
- Updated the sort order of cards on the /customer-stories page
- Updated the cards on the /customer-stories page to be rendered
server-side.
- Updated styles for testimonial cards.
2024-11-21 08:55:47 +09:00
Jahziel Villasana-Espinoza 0683749d0b fix: use correct link (#23998)
> Related issue: #23942
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
2024-11-20 18:25:19 -05:00
Andrea Scarpino 12a92f3407 doc: firefox_preferences works on linux and windows (#23967)
Solves #23955

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] If paths of existing endpoints are modified without backwards
compatibility, checked the frontend/CLI for any necessary changes
- [ ] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
- [ ] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [ ] Orbit runs on macOS, Linux and Windows. Check if the orbit
feature/bugfix should only apply to one platform (`runtime.GOOS`).
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-11-20 16:46:07 -06:00
Sam Pfluger b1ed70fb33 Add single doc template to hiring steps (#23989) 2024-11-20 15:10:34 -06:00