Commit Graph
18035 Commits
Author SHA1 Message Date
Jorge Falcon fc94901cac Dogfood & Dogfood Free - Terraform deprecation fixes (#32101)
Added support to allow terraform plan (dry-run) without apply for
dogfood deployment action

Updated infrastructure/dogfood/terraform/aws-tf-module/docker/main.tf
- Allow hashicorp/aws `>= 5.68.0` instead of `~> 5.0`

Updated infrastructure/dogfood/terraform/aws-tf-module/main.tf
- Updated occurences of `data.aws_region.current.id` ->
`data.aws_region.current.region`
- Updated occurences of `data.aws_region.current.name` ->
`data.aws_region.current.region`
- Allow hashicorp/aws `>= 5.68.0` instead of `~> 5.0`
- `tf-mod-root-v1.15.2` -> `tf-mod-root-v1.17.0`
- `tf-mod-addon-migrations-v2.0.1` -> `tf-mod-addon-migrations-v2.1.0`
- `tf-mod-addon-osquery-carve-v1.1.0` ->
`tf-mod-addon-osquery-carve-v1.1.1`
- `tf-mod-addon-logging-alb-v1.3.0` -> `tf-mod-addon-logging-alb-v1.4.0`
- `tf-mod-addon-ses-v1.3.0` -> `tf-mod-addon-ses-v1.4.0`
- `tf-mod-addon-external-vuln-scans-v2.2.1` ->
`tf-mod-addon-external-vuln-scans-v2.3.0`

Updated infrastructure/dogfood/terraform/aws-tf-module/free.tf
- Updated occurences of `data.aws_region.current.id` ->
`data.aws_region.current.region`
- Updated occurences of `data.aws_region.current.name` ->
`data.aws_region.current.region`
- `tf-mod-byo-vpc-v1.13.0` -> `tf-mod-byo-vpc-v1.18.3`
- `tf-mod-addon-ses-v1.3.0` -> `tf-mod-addon-ses-v1.4.0`
- `tf-mod-addon-migrations-v2.0.1` -> `tf-mod-addon-migrations-v2.1.0`

Updated infrastructure/dogfood/terraform/aws-tf-module/free-ecs-hosts.tf
- Updated occurences of `data.aws_region.current.name` ->
`data.aws_region.current.region`
2025-08-19 22:48:19 -04:00
Jahziel Villasana-EspinozaandNoah Talerman e50d913bc0 add note about support for fedora and centos coming (#32095)
# Checklist for submitter

Closes #32027

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2025-08-19 16:49:26 -04:00
Victor LyuboslavskyandEric a07f8f5344 Track SDLC metrics. (#31409)
Fixes #30483 

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **New Features**
* Added a new webhook endpoint to track GitHub Projects v2 item status
changes and record engineering metrics.
* Integrated with Google BigQuery for storing and analyzing issue status
transition data.

* **Chores**
* Introduced a new POST API route for receiving GitHub Projects v2 item
events.
* Added configuration options for GitHub webhook secrets and Google
Cloud service account keys (commented out for future use).
  * Added a new dependency for Google BigQuery integration.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2025-08-19 13:24:54 -05:00
Juan Fernandez 19a5298f5b Added missing permissions (#32021)
For #32007. Added missing permissions for attestation.
2025-08-19 14:04:17 -04:00
Juan Fernandez 51a5b6166a Refactor failing policies total on Host endpoint (#31906)
For #29795

Refactored the way we compute the number of failing policies to avoid
discrepancies due to either read replica delays or due to async nature
of the failing policy computation stored in host issues.
2025-08-19 13:39:32 -04:00
github-actions[bot]andlucasmrod febf18241e Update versions of fleetd components in Fleet's TUF [automated] (#32080)
Automated change from [GitHub
action](https://github.com/fleetdm/fleet/actions/workflows/fleetd-tuf.yml).

Co-authored-by: lucasmrod <lucasmrod@users.noreply.github.com>
2025-08-19 12:35:27 -03:00
Allen Houchins a0c17709f8 Update 1Password macOS version number to 8.11.6 (#32079) 2025-08-19 10:27:30 -05:00
Allen Houchins ff3d14c816 Updating Nudge configuration and policy logic (#32074)
- Updated configuration profile to support macOS26 More info link
- Updated policy logic to account for old versions of Nudge being
installed
2025-08-19 10:07:02 -05:00
Jonathan KatzandAnthony Maxwell 3388740f0e 4498 empty software (#31940)
Fixes: #4498 

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

## Testing

- [x] Added/updated automated tests
- Added unit test 
- Changed existing unit tests to accept empty array instead of null

- [x] QA'd all new/changed functionality manually
- Tested that Fleet UI > host details, returns `software: []` instead of
nothing.
- Tested that with exclude_software=false, software returns the full
array for host.

---------

Co-authored-by: Anthony Maxwell <133805840+Illbjorn@users.noreply.github.com>
2025-08-19 10:38:53 -04:00
RachelElysia dae35c887b FE: Add tests to install/uninstall modals (#31992) 2025-08-19 09:04:07 -04:00
Brock WaltersandMike Thomas 977768d642 Update deploying-crowdstrike-with-fleet.md (#31990)
I am sorry.

---------

Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
2025-08-19 12:52:42 +09:00
Jahziel Villasana-Espinoza 3c49123205 update article with linux kernel vulns info (#32022)
> Closes #31215
2025-08-19 09:28:20 +09:00
Victor Lyuboslavsky 8246fa4fe2 Added doc note regarding HTTP message signature performance. (#31905) 2025-08-19 09:26:39 +09:00
Noah Talerman 2164828981 Update roadmap preview article (#32049)
- @noahtalerman: Remove recurring scripts
2025-08-18 20:17:05 -04:00
Victor Lyuboslavsky ef77194900 ADR-0005: Standardize on OpenTelemetry for observability (#31864) 2025-08-18 18:31:24 -05:00
Marko Lisica 7315be281a Guide: Missing / (#32008)
Command to unsign profiles is missing `/`
2025-08-18 18:53:42 -04:00
Ian Littman c461e097a8 Don't pass the default deb auto-install policy if install status is e.g. uninstalled (#32005)
Fixes #29894 and probably #31980.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)

## Testing

- [x] Added/updated automated tests

- [x] QA'd all new/changed functionality manually
2025-08-18 17:37:06 -05:00
Victor Lyuboslavsky 4e50de7193 For Go tests, always upload a success/fail status indicator so that aggregate-result works correctly. (#32065)
Fixes #31994
2025-08-18 17:23:45 -05:00
RachelElysia ec12482d2f Fleet UI: Re-add missing tarballs summary card (#32056) 2025-08-18 17:14:20 -04:00
RachelElysia a1d6bc39d7 Fleet UI: Fix vulns from being counted multiple times in vuln count (#32044) 2025-08-18 17:09:44 -04:00
RachelElysia b7286d0163 Fleet UI: Fix missing space/bullet in copy (#32062) 2025-08-18 17:06:45 -04:00
Isabell Reedy 9745d50b26 Update coworking approval instructions (#32015) 2025-08-18 12:51:29 -05:00
9a859736c2 IdP Authentication before BYOD (#32017)
fixes: #29222 

This is a feature branch that was completed last week, but did not get
merged in time.

All pr's going in was approved, and reviewed.

I will after this is merged, do a cherry pick onto the RC 4.73 branch,
and initiate the FR merge process.

---------

Co-authored-by: Martin Angers <martin.n.angers@gmail.com>
Co-authored-by: Sarah Gillespie <73313222+gillespi314@users.noreply.github.com>
Co-authored-by: Gabriel Hernandez <ghernandez345@gmail.com>
2025-08-18 18:31:53 +02:00
Marko Lisica 286ab3294b Fixing broken link (#32023)
Fixing broken link
2025-08-18 10:21:09 -04:00
Noah Talerman 2acecf3ab7 Dogfood: Update "Conditional access test group" label (#32013)
- @noahtalerman: I set my hostname to "Noah Talerman's MacBook Pro"
2025-08-18 08:27:58 -05:00
Allen Houchins 46e6e4c13f Adding EULA via GitOps (#32004)
- Adjusting path to troubleshoot adding the EULA via GitOps
2025-08-16 21:26:11 -05:00
Allen Houchins 99d73fbe0b Update nudge-configuration.mobileconfig (#32003)
- Updated text in the UI to be more accurate and friendly
2025-08-16 21:14:10 -05:00
Eric 61261bb8a4 Website: Microsoft proxy: Add debugging logs for Fleet's integration (#32001)
Related to: https://github.com/fleetdm/fleet/issues/31986

Changes:
- Updated Microsoft proxy endpoints to log API responses from Microsoft
when it runs for Fleet's dogfood integration.
2025-08-15 19:35:46 -05:00
Noah TalermanandAllen Houchins 18e70e4ec4 Dogfood: Add EULA (#31991)
Dogfood this improvement: https://github.com/fleetdm/fleet/issues/28143

EULA is from Google Drive:
https://drive.google.com/file/d/172KjvaQehjxx6F9KFIk-IVkDyYTCSWm8/view?usp=sharing

---------

Co-authored-by: Allen Houchins <allenhouchins@mac.com>
2025-08-15 18:16:03 -05:00
Eric Comeau a2b51f1537 Update go-to-market-groups updated “how to” quotes (#31279) 2025-08-15 16:39:43 -05:00
Luke Heath 69388c69a7 Remove five character requirement for entity id in SSO and IdP settings (#30712) 2025-08-15 16:34:30 -05:00
Lucas Manuel Rodriguez 5f6a42f089 Remove orbit change from 4.72.0 changelog (#31982) 2025-08-15 15:38:00 -05:00
Gabriel Hernandez 5d8973d484 fix issue wih showing os updates page with user being admin on one team and maintainer on another (#31963) 2025-08-15 15:36:35 -05:00
Eric Swenson bbda08a915 Update go-to-market-groups.md (#31983)
changed "Demand" to "Marketing"

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] If paths of existing endpoints are modified without backwards
compatibility, checked the frontend/CLI for any necessary changes

## Testing

- [x] Added/updated automated tests
- [x] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)

- [x] QA'd all new/changed functionality manually

For unreleased bug fixes in a release candidate, one of:

- [x] Confirmed that the fix is not expected to adversely impact load
test results
- [x] Alerted the release DRI if additional load testing is needed

## Database migrations

- [x] Checked table schema to confirm autoupdate
- [x] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [x] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [x] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).

## New Fleet configuration settings

- [x] Setting(s) is/are explicitly excluded from GitOps

If you didn't check the box above, follow this checklist for
GitOps-enabled settings:

- [x] Verified that the setting is exported via `fleetctl
generate-gitops`
- [x] Verified the setting is documented in a separate PR to [the GitOps
documentation](https://github.com/fleetdm/fleet/blob/main/docs/Configuration/yaml-files.md#L485)
- [x] Verified that the setting is cleared on the server if it is not
supplied in a YAML file (or that it is documented as being optional)
- [x] Verified that any relevant UI is disabled when GitOps mode is
enabled

## fleetd/orbit/Fleet Desktop

- [x] Verified compatibility with the latest released version of Fleet
(see [Must
rule](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/workflows/fleetd-development-and-release-strategy.md))
- [x] If the change applies to only one platform, confirmed that
`runtime.GOOS` is used as needed to isolate changes
- [x] Verified that fleetd runs on macOS, Linux and Windows
- [x] Verified auto-update works from the released version of component
to the new version (see [tools/tuf/test](../tools/tuf/test/README.md))
2025-08-15 14:52:14 -05:00
Lucas Manuel RodriguezandJordan Montgomery 531a84d976 Update changelog for fleetd 1.46.0 release (#31978)
Co-authored-by: Jordan Montgomery <elijah.jordan.montgomery@gmail.com>
2025-08-15 16:26:07 -03:00
github-actions[bot]andlucasmrod 744564bd60 Update versions of fleetd components in Fleet's TUF [automated] (#31981)
Automated change from [GitHub
action](https://github.com/fleetdm/fleet/actions/workflows/fleetd-tuf.yml).

Co-authored-by: lucasmrod <lucasmrod@users.noreply.github.com>
2025-08-15 16:16:10 -03:00
Benjamin Edwards fa1c14dd3d update fleetd-chrome to set expected HTTP headers (#31768)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.


## Testing

- [ ] Added/updated automated tests
- [ ] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)

- [X] QA'd all new/changed functionality manually

## fleetd/orbit/Fleet Desktop

- [X] Verified compatibility with the latest released version of Fleet
(see [Must
rule](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/workflows/fleetd-development-and-release-strategy.md))
2025-08-15 13:14:08 -05:00
Allen Houchins fc0b155bb4 Added postinstall script to nudget-assets (#31976)
- Added postinstall script to load the Nudge LaunchAgent automatically
2025-08-15 12:57:36 -05:00
George Karr ecc173deeb Adding changes for Fleet v4.72.0 (#31273) (#31975) 2025-08-15 12:31:18 -05:00
Marko Lisica 815e745917 [Docs] Document behavior of last_opened_at across different platforms (#31958)
Related to:

- #29061
2025-08-15 11:12:05 -05:00
Scott Gress 17d1904f67 Add missing batch script activities (#31941)
for #31532 

# Details

This PR adds templates for displaying the "Scheduled batch script" and
"Canceled batch script" global activity feed items. It also updates the
"Cancel batch script?" modal to show a spinner on the cancel button when
applicable.

# Checklist for submitter

## Testing

- [X] QA'd all new/changed functionality manually

<img width="820" height="210" alt="image"
src="https://github.com/user-attachments/assets/45c8b15c-b100-4356-aa65-24441ecc16a0"
/>
2025-08-15 10:14:39 -05:00
Konstantin Sykulev 9a821efe8d When iterating through softwares LastOpenedAt timestamp is copied as to not modify original records (#31946)
fixes #31932

The problem here was that `hostInstalledSoftware` returns a slice of
pointers (`[]*hostSoftware`), so when iterating through and assigning
`LastOpenedAt` the original records were getting modified. This code
duplicates the records being put into `bySoftwareTitleID` so that the
records being stored in `bySoftwareID` are the original records.

As a side benefit to this I modified the logic to store the most recent
`LastOpenedAt` for the software title. I think we may be doing something
similar to this on the front end to show the "last used" column when we
have multiple version of a software installed. But this can potentially
be fetched from the API now.

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

## Testing

- [X] Added/updated automated tests
- [X] QA'd all new/changed functionality manually
2025-08-15 09:44:01 -05:00
Noah Talerman c7e4ae8fdc Update product-design.rituals.yml: fix typo (#31967) 2025-08-15 10:34:11 -04:00
Scott Gress 2e1ce02796 UI for managing custom variables (#31875)
for #31054

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

## Testing

- [ ] Added/updated automated tests
- [ ] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)

- [X] QA'd all new/changed functionality manually
2025-08-15 08:24:55 -05:00
github-actions[bot]andlucasmrod c0b8a047d1 Update versions of fleetd components in Fleet's TUF [automated] (#31954)
Automated change from [GitHub
action](https://github.com/fleetdm/fleet/actions/workflows/fleetd-tuf.yml).

Co-authored-by: lucasmrod <lucasmrod@users.noreply.github.com>
2025-08-15 08:17:15 -03:00
Zay HanlonandSam Pfluger 9276324904 CSE function belongs to Zay but is not in GTM group (#31712)
Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2025-08-15 01:12:05 -05:00
Allen Houchins 250d26f53a Update santa-configuration.mobileconfig (#31956)
- Updated `PayloadOrganization` value
2025-08-14 22:52:22 -05:00
Allen Houchins 33ad6304ad Update install-nudge.yml (#31955)
- Updated policy logic
2025-08-14 22:35:15 -05:00
Allen Houchins 323d11143b Nudge configuration updates (#31953)
- Updated messaging in the UI
- Combined the assets and LaunchAgent packages
- Updated configuration profile with `systemmanager` payload
2025-08-14 22:09:59 -05:00
Dante Catalfamo ede1546108 Add activity for cancel batch script (#31937)
#31532 

- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)

## Testing

- [x] Added/updated automated tests
2025-08-14 21:35:19 -05:00