fleet

Files

T

Victor Lyuboslavsky 131a52695b Custom SCEP integration (#27121 )

For #26623 

This PR enables deploying an Apple configuration profile with Fleet
proxying a custom SCEP server.

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
- [x] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [x] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [x] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [x] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
- [x] Added/updated automated tests
- [x] A detailed QA plan exists on the associated ticket (if it isn't
there, work with the product group's QA engineer to add it)
- [x] Manual QA for all new/changed functionality

2025-03-17 10:59:07 -05:00

.keep

…

9778-saml-validation-workflow

Merge commit from fork

2025-03-05 07:31:17 -06:00

16413-query-by-labels-backend

Add LabelsIncludeAny to queries endpoint (#26823 )

2025-03-11 09:45:01 -04:00

16865-increase-statistics-frequency

increase stats freq to 1H (#16865 )

2025-01-29 15:08:44 -05:00

22353-abm-hosts-upcoming-activities

Fix upcoming activities for ABM-deleted hosts (#25530 )

2025-01-21 15:26:00 -05:00

22445-add-vuln-filters-to-host-software

Host Software Table: Add vulnerability filters to API and UI (#26995 )

2025-03-12 11:26:12 -04:00

22464-list-hosts-populate-users-labels

Add options to populate users and labels on list hosts endpoint (#25621 )

2025-01-22 11:17:26 -05:00

22544-move-linux-lock-wipe

Delete duplicate linux lock/wipe scripts (#25611 )

2025-01-22 10:46:59 -05:00

22791-redis-default-follow-redirect

Follow redis redirects by default (#26043 )

2025-02-06 13:32:31 -05:00

22919-semver-util

Added util func around semver to allow for custom preprocessing. Upgraded semver lib (#25437 )

2025-01-23 10:21:15 -06:00

23096-fma-errors

Fleet UI: Update FMA API errors in UI (#25646 )

2025-01-27 15:32:12 -05:00

23116-fma-dl-url

Fleet UI: Surface download URL for Fleet-maintained app when adding (#25762 )

2025-01-27 16:23:08 -05:00

23235-host-certificates

Cleanup host_certificates table on host deletion (#26524 )

2025-02-21 15:57:09 -06:00

23241-lock-api-response

Include current host status and pending action in lock, unlock, and wipe API calls (#25754 )

2025-01-27 12:06:09 -06:00

23243-add-pagination-to-policy-modals

Add pagination to manage automations (#26414 )

2025-02-27 12:43:38 -06:00

23243-manage-automations-updates

Show "Manage Automations" dropdown when no policies are present (#26298 )

2025-02-25 11:10:33 -06:00

23312-update-policies-empty-state

Update policies and queries empty states (#26124 )

2025-02-06 11:25:43 -08:00

23465-query-reports-support-event-format

Added support for event format on query reports (#25876 )

2025-01-31 16:26:24 -03:00

23744-automatic-install-vpp

Fleet UI: Auto-install VPP apps (#26455 )

2025-02-24 16:01:55 -05:00

23744-vpp-automatic-install

Allow automatic creation of software install policy for VPP and FMA apps in API (#26440 )

2025-02-21 18:08:48 -06:00

23744-vpp-timestamps

Add created_at/updated_at timestamps to VPP apps teams table, return as added_at (#26442 )

2025-02-21 15:07:52 -06:00

23770-fleetctl-linux-arm

Build fleetctl linux arm64 binary (#25905 )

2025-01-30 15:39:53 -06:00

23830-update-label-chooser-empty-state

UI - Update label chooser empty state (#27019 )

2025-03-11 09:37:23 -07:00

23851-ui-turn-on-mdm-modal

Update device user UI with improved instructions to turn on MDM (#26193 )

2025-02-11 12:22:18 -06:00

23913-upcoming-activities-handle-scripts

Upcoming Activities feature branch (#25450 )

2025-02-11 14:53:11 -05:00

23924-handle-long-team-names

UI - Improve handling of long team names by teams dropdown (#25802 )

2025-01-28 10:27:02 -08:00

24035-team-agent-options-ui-resets

UI - Maintain user's updates to the team agent options form when they navigate away and back again (#25803 )

2025-01-28 15:20:46 -08:00

24222-update-versions

fix: update App Store app versions on an hourly basis (#26326 )

2025-02-17 14:56:24 -05:00

24265-ignore-non-fleet-mdm-windows-in-disk-encryption-stats

Bugfix: Ignore non-Fleet-MDM-enrolled Windows hosts in disk encryption stats and filters (#27066 )

2025-03-12 15:31:23 -04:00

24341-improve-ux-of-script-list-items

UI – Add on-hover shadow and on row click functionality to script list items (#25995 )

2025-02-04 09:27:52 -08:00

24390-parse-array-on-request

Parse top-level json array when request arrives, before service func (#26665 )

2025-03-10 13:27:17 -04:00

24470-bash

Allow use of bash as a script interpreter (#25449 )

2025-02-04 12:42:40 -05:00

24486-error-for-invalid-invites

UI – Updates to confirm invite flow (#25583 )

2025-01-24 10:55:39 -08:00

24544-target-labels-vpp

Fleet UI: Add target labels for VPP apps (#25815 )

2025-02-03 17:10:22 -05:00

24601-editable-scripts-frontend

Edit script modal (#25926 )

2025-02-03 14:27:44 -08:00

24602-editable-scripts

Edible Scripts Backend (#25739 )

2025-01-30 13:01:51 -05:00

24732-gzip

Compress CSS and JS with gzip before serving to reduce load time/page weight (#25658 )

2025-01-21 20:15:08 -06:00

24754-require-pw-for-pw-auth

Require a password when changing a user from SSO to password-based authentication (#25843 )

2025-01-30 09:32:11 -08:00

24766-clickable-row-behavior

Fleet UI: Consistent table row clickability (#26022 )

2025-02-04 14:05:22 -05:00

24784-versions

fix: move logic for mutating software versions so that Fleet shows the expected versions (#26789 )

2025-03-04 16:22:03 -05:00

24790-admx-policies

…

24810-cve-no-semver

Removing usage of semver in resolved in version resolution (#26062 )

2025-02-11 12:21:42 -06:00

24876-dashboard-cards

Fleet UI: New Dashboard host count cards (+ their responsiveness to 320px) (#25694 )

2025-01-29 15:15:49 -05:00

24886-fix-pagination-on-policies-page

UI - Fix policies team pagination (#25744 )

2025-02-03 13:02:28 -08:00

24948-display-api-errors-in-user-form

…

24958-gitops-webhooks-disable

…

25015-user-page-responsive

Fleet UI: Fix user management page overflow (#25733 )

2025-01-24 10:06:49 -05:00

25090-msrc-dedupe

Dedupe MSRC downloads/deletes when enrolled hosts include multiple builds of the same version of Windows (#27060 )

2025-03-12 13:22:56 -05:00

25130-iterm-false-neg

…

25160-optimize-software-during-enrollment

Optimize software_titles query to use indexes (#25722 )

2025-01-23 15:48:21 -03:00

25191-disk-encryption-sentence-case

Switch "Disk encryption" casing for Windows/Linux profiles (#25801 )

2025-02-01 20:14:03 -06:00

25201-unknown-installer-version

…

25235-software-titles-uniqueness

Added software_titles unique index idx_unique_sw_titles (#25794 )

2025-02-03 13:23:21 -06:00

25241-smtp-helo-domain

Utilize custom SMTP domain if set (#25669 )

2025-01-28 11:10:52 -05:00

25251-url-fleet-app-response

Added url property on get fleet maintained app endpoint (#25660 )

2025-01-23 10:23:05 -06:00

25257-dropdown-improvements

Fleet UI: Updates to dropdown selected states (#25635 )

2025-01-22 10:22:59 -05:00

25261-identical-hostnames-label-membership

Update label membership by host IDs directly (#25687 )

2025-01-23 12:38:57 -08:00

25273-hde-windows-verifying

2025-02-03 09:31:00 -06:00

25283-update-device-users-tooltip

Update "used by" display and tooltip styling (#26262 )

2025-02-20 12:08:25 -06:00

25305-update-add-hosts-help-text

change file (#25962 )

2025-02-03 11:25:10 -08:00

25306-add-windows-linux-hosts-radios

UI - Replace "Include Fleet desktop" with host type radio selection buttons when adding Windows or Linux hosts. (#25914 )

2025-01-31 10:37:15 -08:00

25307-fleetctl-package-link

Add link to learn more about installing fleetd (#25610 )

2025-01-22 09:19:10 -05:00

25318-update-sso-settings-error-states

UI - Update metadata error states on Sso settings form (#25614 )

2025-01-22 15:01:52 -08:00

25346-fix-manage-automations-link-on-dash

Hide manage automations from maintainers (#25727 )

2025-01-24 11:17:14 -06:00

25353-collation

Add table default encodings/charsets to all migrations missing them, retrofit existing DB schema (#26670 )

2025-02-27 17:25:20 -06:00

25366-manage-automation-dropdown-styling

Fleet UI: Fix Manage automation dropdown styling (#25753 )

2025-01-27 09:14:16 -05:00

25378-installer-platform-key

Rest API: Add platform to endpoints with software packages and vpp apps (#27124 )

2025-03-17 09:59:03 -04:00

25460-add-list-host-certificates-endpoint

CHV: implement paginated list certificates endpoints (#26554 )

2025-02-24 12:52:39 -05:00

25478-GitOps-Mode

UI - GitOps Mode, 3/3 (#26537 )

2025-02-21 16:56:20 -08:00

25553-update-compatibility-tooltip

Update tooltip for query compatibility (#25892 )

2025-01-31 09:56:12 -06:00

25555-batch-hostnames-on-new-label

Update NewLabel method to use more efficient update mechanism (#25777 )

2025-01-31 09:19:36 -06:00

25567-renew-vpp

fix: correctly get VPP token ID when doing a renewal (#25657 )

2025-01-22 09:55:49 -05:00

25581-session-id

…

25590-node

…

25597-false-positives

Map product/vendor for homebrew "pass" package, skip "jira" python package as it has no CVEs (#25626 )

2025-01-21 15:34:44 -06:00

25609-archive-encryption-keys

Disk encryption keys are now archived when created/updated (#25638 )

2025-01-22 14:54:40 -06:00

25615-windows-mdm-profiles

…

25637-error-policy-software-automation

Fleet UI: Fix policy software automation fail to report as failing (#26044 )

2025-02-28 08:45:33 -05:00

25640-fix-idp-source

Fix incorrect source in device mapping REST API docs (#25641 )

2025-01-24 16:32:03 -06:00

25648-gitops-bootstrap-profile

Clear bootstrap package and enrollment profile with GitOps (#26095 )

2025-02-07 14:35:51 -06:00

25651-vpp-title

fix: don't re-use title ID from a windows app for a vpp app (#26546 )

2025-02-24 17:51:12 -05:00

25662-ij-windows

Add CPE translation mapping for IntelliJ CE for Windows (#25971 )

2025-02-05 17:07:34 -06:00

25682-migrate-pending-existing-activities

Unified Queue: add DB migration for existing pending activities (#26413 )

2025-02-19 08:29:14 -05:00

25748-remove-fleetctl-from-fleetdm-fleet-docker-image

Remove fleetctl binary from fleetdm/fleet image and remove unused Dockerfile (#25749 )

2025-01-28 19:58:20 -03:00

25759-illegal-argument-errors

Illegal argument errors will no longer be logged at the ERROR level (#25761 )

2025-01-27 14:03:38 -06:00

25770-relative-profile-path-in-no-team

Fixed parsing of relative paths for MDM profiles in gitops no-team.yml (#26046 )

2025-02-06 16:39:15 -06:00

25812-ddm-profiles-stuck

Added debug logging to declaration configurations status. (#26020 )

2025-02-04 11:15:29 -06:00

25822-custom-scep-integration

Custom SCEP integration (#27121 )

2025-03-17 10:59:07 -05:00

25822-digicert-integration

DigiCert backend (#26914 )

2025-03-10 13:02:49 -05:00

25834-always-allow-passwords

Always allow passwords for users (#26334 )

2025-02-25 16:27:58 -05:00

25872-fleetctl-update-wine-10

Update wine to version 10, replace wine64 with wine (#25997 )

2025-02-07 11:05:07 -05:00

25882-update

fix: parse out update section of CPE, fix CVE-2024-12254 Windows false positive (#26634 )

2025-02-28 08:12:19 -05:00

25921-fix-show-query-truncation

Don't truncate text in SQL editor (#26292 )

2025-02-18 11:10:16 -06:00

25956-fix-buggy-efa-editing

UI - Fix team admin ability to edit MFA (#26002 )

2025-02-03 17:03:22 -08:00

25991-pre-python

fix: improve sanitation of python version strings to match CPEs (#26538 )

2025-02-25 13:59:35 -05:00

26011-setup-select

Switch to a simpler, more reliable query for checking if the initial admin user has been added (#26012 )

2025-02-12 07:52:31 -06:00

26040-delete-app-reroute-bug

Fleet UI: Fix small teamId routing bug (#26105 )

2025-02-06 09:37:05 -05:00

26049-only-show-policy-targets-in-modal

UI -Only show new policy target checkboxes in modal (#26059 )

2025-02-05 09:56:08 -08:00

26073-powershell-cve

Add missing changes file for PowerShell CVE fix (#26666 )

2025-02-28 09:33:02 -06:00

26075-set-metadata_url-and-metadata

Remove restriction on setting both metadata and metadata_url (#26279 )

2025-02-19 10:11:52 -05:00

26136-user-table-cleanup

Fleet UI: Component fixes (styling bugs and code cleanup) (#26149 )

2025-02-26 13:47:28 -05:00

26177-max-conc

fix: add check to max concurrency value (#26240 )

2025-02-12 12:24:35 -05:00

26178-fix-2

fix: add index to os cve column (#26576 )

2025-02-24 21:59:56 -05:00

26283-software-stuck-pending

Add fix for software installers breaking with old fleet version (#26297 )

2025-02-12 12:49:17 -05:00

26345-license-fail

fix: report a failure in setup experience if a VPP app installation fails due to lack of licenses (#27163 )

2025-03-17 09:43:51 -04:00

26373-uploaded-pkg-source

Always record uploaded pkg files as "apps" source if they have a bundle ID to avoid conflicts with the same package appearing in inventory later (#26374 )

2025-02-24 16:38:57 -06:00

26443-xml-comments

Ignore comments at the top of XML files (#27176 )

2025-03-15 10:40:50 -05:00

26489-fleetctl-output-copy-updates

fleetctl: update package command output (#26500 )

2025-03-04 13:21:07 -05:00

26520-npm-publish-tagged

Identify if the release is older than npm, publish with tag (#26787 )

2025-03-11 09:46:01 -04:00

26525-drop-macos-thirteen

Drop support for macOS 13 (#26525 )

2025-02-27 13:34:59 -06:00

26561-macos-false-positive

pad macOS versions with an extra 0 during CPE generations so that we can match vulncheck versions (#27069 )

2025-03-12 13:01:37 -04:00

26569-team-id-dropping-bug

Fleet UI: Fix several team ids that were dropping in certain flows (#26590 )

2025-02-27 10:53:34 -05:00

26617-show-device-software-details

My device page: Fix 'show details' to open software details modal (#26771 )

2025-03-03 16:21:51 -05:00

26639-activities-no-min-height

Remove min-height from Upcoming/PastActivityFeed (#26783 )

2025-03-06 13:31:55 -05:00

26649-ability-to-add-labels-to-queries

Ability to add labels to queries (front end) (#26867 )

2025-03-12 11:54:29 -07:00

26689-calendar-preview-preserve-whitespace

Respect user input whitespace when previewing calendar event (#26920 )

2025-03-11 09:44:02 -04:00

26710-scripts-error

Fleet UI: Surface policy automation scripts error messages (#26764 )

2025-03-05 16:11:04 -05:00

26753-batch-software-titles

Batched getPoliciesBySoftwareTitleIDs (#27062 )

2025-03-12 14:48:52 -05:00

26776-never-truncate-host-count

Fleet UI: Never truncate host count on Dashboard > Software table (#26777 )

2025-03-10 14:02:13 -04:00

26918-placeholders-windows

add batching logic when we pull windows profiles to install or remove (#26964 )

2025-03-10 09:12:24 -05:00

26933-software-name-edit

Add experimental software title name update endpoint for titles with a bundle ID (#26938 )

2025-03-07 11:36:17 -06:00

26976-mfa-fe-tweaks

Force a user to click through to redeem MFA if they aren't on a browser that started the MFA process (#26980 )

2025-03-10 13:56:25 -05:00

26977-macoffice-archives

Add new archive URL as data source for Mac Office release notes (#26978 )

2025-03-10 08:46:18 -05:00

issue-21691-windows-disk-encryption-dont-resend

update message for failed windows disk encryption and dont show resend button (#25630 )

2025-01-21 17:07:44 +00:00

issue-23912-ui-for-activities

…

issue-24040-fix-abm-token-team-resetting

fix issue with resetting abm token teams (#26259 )

2025-02-18 20:08:06 +00:00

issue-24824-tooltip-verified-verifying

improve verified and verifying tooltips in profile status UI (#25886 )

2025-01-31 12:24:31 +00:00

issue-24901-fixes-error-cutoff

fix for window profiles error message being cut off on OS settings modal (#25922 )

2025-01-31 14:40:24 +00:00

issue-24992-padding-fixes-around-lists

normalise spacing for lists and help text across various modals (#25663 )

2025-01-23 15:47:38 +00:00

issue-25159-update-deadline-tooltip

update UI tooltip for deadline input on the os settings target form (#25980 )

2025-02-04 15:14:41 +00:00

issue-25464-ui-host-certs

UI for certificate details on host details and my device pages (#26380 )

2025-02-21 11:52:41 +00:00

issue-25507-upgrade-github-cache-action

…

issue-25656-change-host-modal-copy

Feat UI host transfer delete warnings (#26287 )

2025-02-17 13:25:22 +00:00

issue-25735-fix-500-vulnerable-host-software

fix 500 page when filtering by vulnerabilities on host software (#25816 )

2025-01-29 12:09:28 +00:00

issue-26207-ui-for-turn-on-off-android-mdm

add UI for turning android mdm on/off (#26517 )

2025-02-21 17:23:38 +00:00

issue-26209-android-mdm-acitivites

UI activites for android mdm (#26647 )

2025-02-27 14:07:34 +00:00

issue-26211-byod-android-ui

Feat UI byod landing page (#26592 )

2025-02-27 19:35:42 +00:00

vulns-max-concurrency

Change default vuln feed concurrency from 5 to 1 (#26565 )

2025-02-24 15:15:04 -06:00