Discharge7443/fleet
1
0
Fork 0
Code Issues Pull Requests Actions 8 Packages Projects Releases Wiki Activity
Files
99136d48ae92eb002ea48e8a9a6986fa65de57da
fleet/server/service
T
History
Victor Lyuboslavsky 251093f6b3 Setup experience software policy checks (#47075) 
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #45309 

If software is linked to policies, we run the policy during setup
experience to determine if software should be installed. We install on
failing policies.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

- [x] Timeouts are implemented and retries are limited to avoid infinite
loops

## Testing

- [x] Added/updated automated tests
- [x] QA'd all new/changed functionality manually


<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **New Features**
* Windows/Linux setup experience installers can be gated by team
policies: setup will run a policy check and skip installing if the
policy already passes; if the policy fails, the installer runs as part
of setup.
* After gated setup completes, the host’s policy set is re-evaluated
promptly so subsequent policy actions run immediately.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2026-06-10 21:16:37 +01:00
..
async
Move mysql/testing_utils.go to a separate mysql/mysqltest package (#45406)
2026-05-14 11:18:20 -03:00
calendar
…
conditional_access_microsoft_proxy
…
contract
Move loginRequest and logoutRequest to server/fleet/ (#45908)
2026-05-21 09:57:07 -03:00
embedded_scripts
Auto-clean duplicate Okta CA SCEP cert after profile install (#46172)
2026-06-05 16:20:32 -04:00
externalsvc
…
integrationtest
Fixing broken test(cert expired) (#46475)
2026-05-29 15:10:02 -04:00
middleware
Skip membership catalog test for API-only users if they have access to everything (#44473)
2026-04-30 11:24:31 -04:00
mock
…
osquery_utils
Add Python 3.13 & 3.14 as Windows FMAs and normalize versions (#46873)
2026-06-08 10:51:32 -05:00
redis_key_value
use redis to block double profile work for apple devices setting up (#42421)
2026-03-30 16:37:18 -05:00
redis_lock
…
redis_policy_set
…
schedule
Rename and move testing_utils.go from schedule and orbit tests (#45609)
2026-05-15 13:23:58 -03:00
svctest
Changed semantics around api_endpoints init.
2026-06-03 10:13:11 -04:00
testdata
Bugfix: properly enqueue compatible setup experience items for arch/omarchy linux (#41778)
2026-03-17 15:04:33 -04:00
activities_test.go
Emit failed VPP/in-house install activity, release reserved license (#46332)
2026-05-28 14:43:25 -04:00
activities.go
Emit failed VPP/in-house install activity, release reserved license (#46332)
2026-05-28 14:43:25 -04:00
api_endpoints.go
Implement GET /api/v1/fleet/rest_api (#42883)
2026-04-10 11:12:38 -04:00
appconfig_test.go
Validate SSO settings correctly for GitOps (#46487)
2026-06-09 11:38:48 -05:00
appconfig.go
Validate SSO settings correctly for GitOps (#46487)
2026-06-09 11:38:48 -05:00
apple_mdm_batched.go
Optimize Apple profile reconciler approach by moving logic to code (#45573)
2026-05-29 09:46:17 +02:00
apple_mdm_cmd_results_test.go
Backend: Auto rotate recovery lock passwords (#42084)
2026-03-26 12:12:41 -06:00
apple_mdm_cmd_results.go
produce failed enrollment renewal activity (#44511)
2026-05-01 11:38:08 -06:00
apple_mdm_ddm_test.go
Move mysql/testing_utils.go to a separate mysql/mysqltest package (#45406)
2026-05-14 11:18:20 -03:00
apple_mdm_declarations_batched.go
Optimize Apple profile reconciler approach by moving logic to code (#45573)
2026-05-29 09:46:17 +02:00
apple_mdm_test.go
validate label scoping on fleet free unassigned (#47265)
2026-06-10 17:22:52 +02:00
apple_mdm.go
Improve apple MDM parsing (#47344)
2026-06-10 15:35:04 -04:00
build_tags_test.go
…
calendar.go
…
campaigns_test.go
Follow-up changes to observer live query bypass (#41146)
2026-03-11 13:42:33 -03:00
campaigns.go
Follow-up changes to observer live query bypass (#41146)
2026-03-11 13:42:33 -03:00
carves_test.go
Move carve requests to server/fleet/ (#45785)
2026-05-20 09:12:38 -03:00
carves.go
Move carve requests to server/fleet/ (#45785)
2026-05-20 09:12:38 -03:00
categories.go
List categories device endpoint (#46938)
2026-06-08 09:15:17 -05:00
certificate_authorities_test.go
…
certificate_authorities.go
Fixed GitOps failing to delete a certificate authority (#41693)
2026-03-16 15:51:28 -05:00
certificate_templates_test.go
Add support for SAN in Android certificate templates. (#44690)
2026-05-06 14:43:09 -05:00
certificate_templates.go
Add support for SAN in Android certificate templates. (#44690)
2026-05-06 14:43:09 -05:00
certificates.go
Add support for SAN in Android certificate templates. (#44690)
2026-05-06 14:43:09 -05:00
client_android_certificates.go
Update fleetctl client urls and params (#41463)
2026-03-13 08:38:55 -05:00
client_appconfig_test.go
Custom org logo fixes: delete for external URLs + gitops switch from path to URL (#45236)
2026-05-13 14:47:01 +02:00
client_appconfig.go
Custom org logo fixes: delete for external URLs + gitops switch from path to URL (#45236)
2026-05-13 14:47:01 +02:00
client_carves.go
Move carve requests to server/fleet/ (#45785)
2026-05-20 09:12:38 -03:00
client_certificate_authorities.go
Fixed GitOps failing to delete a certificate authority (#41693)
2026-03-16 15:51:28 -05:00
client_compat.go
Make orbit and Fleet Desktop not depend on server/service/ packages (#42231)
2026-03-26 10:59:42 -03:00
client_debug.go
…
client_hosts.go
Move HostDetailResponse type to server/fleet/ (#45718)
2026-05-18 14:06:38 -03:00
client_labels.go
Move label request/response types to server/fleet package (#43140)
2026-04-08 11:07:06 -03:00
client_live_query_test.go
Make orbit and Fleet Desktop not depend on server/service/ packages (#42231)
2026-03-26 10:59:42 -03:00
client_live_query.go
Make orbit and Fleet Desktop not depend on server/service/ packages (#42231)
2026-03-26 10:59:42 -03:00
client_mdm_test.go
…
client_mdm.go
42508 Rename abm to ab in API (#46657)
2026-06-03 14:58:17 -04:00
client_packs.go
…
client_policies.go
Move policy request and response types to server/fleet/ package (#43068)
2026-04-07 11:04:08 -03:00
client_profiles.go
Make orbit and Fleet Desktop not depend on server/service/ packages (#42231)
2026-03-26 10:59:42 -03:00
client_queries.go
Move query and scheduled query request and response types to server/fleet/ (#43236)
2026-04-13 16:02:23 -03:00
client_scripts.go
Move script request and response types from server/service to server/fleet (#43868)
2026-04-28 09:12:43 -03:00
client_secret_variables.go
Move targets and secret variables to server/fleet/ (#46196)
2026-06-03 15:07:54 -03:00
client_sessions.go
Move loginRequest and logoutRequest to server/fleet/ (#45908)
2026-05-21 09:57:07 -03:00
client_setup.go
…
client_software.go
Merge branch 'main' of github.com:fleetdm/fleet into feat/39018-self-service-categories
2026-06-08 12:12:33 -04:00
client_targets.go
Move targets and secret variables to server/fleet/ (#46196)
2026-06-03 15:07:54 -03:00
client_teams.go
Track software deletions in GitOps (#46764)
2026-06-04 13:11:49 -05:00
client_test.go
Allow disabling historical data collection (GitOps / API) (#44488)
2026-05-05 11:12:23 -05:00
client_trigger.go
Make orbit and Fleet Desktop not depend on server/service/ packages (#42231)
2026-03-26 10:59:42 -03:00
client_users.go
Allow the creation of API-only users (#43440)
2026-04-16 11:11:39 -04:00
client.go
Merge branch 'main' of github.com:fleetdm/fleet into feat/39018-self-service-categories
2026-06-08 12:12:33 -04:00
conditional_access_cleanup_test.go
Auto-clean duplicate Okta CA SCEP cert after profile install (#46172)
2026-06-05 16:20:32 -04:00
conditional_access_cleanup.go
Auto-clean duplicate Okta CA SCEP cert after profile install (#46172)
2026-06-05 16:20:32 -04:00
conditional_access_idp_test.go
Auto-clean duplicate Okta CA SCEP cert after profile install (#46172)
2026-06-05 16:20:32 -04:00
conditional_access_idp.go
Auto-clean duplicate Okta CA SCEP cert after profile install (#46172)
2026-06-05 16:20:32 -04:00
conditional_access_microsoft.go
…
cron_schedules_test.go
Rename and move testing_utils.go from schedule and orbit tests (#45609)
2026-05-15 13:23:58 -03:00
cron_schedules.go
…
debug_handler_test.go
…
debug_handler.go
Added trace sampler to use OTEL in prod. (#46595)
2026-06-02 18:53:00 -05:00
debug_trace_sampler_test.go
Added trace sampler to use OTEL in prod. (#46595)
2026-06-02 18:53:00 -05:00
debug_trace_sampler.go
Added trace sampler to use OTEL in prod. (#46595)
2026-06-02 18:53:00 -05:00
devices_endpoint_test.go
…
devices_test.go
…
devices_url_auth_test.go
Narrow host lookup for iDevice URL auth (#47141)
2026-06-09 13:13:37 -04:00
devices.go
Narrow host lookup for iDevice URL auth (#47141)
2026-06-09 13:13:37 -04:00
endpoint_campaigns.go
…
endpoint_middleware_test.go
…
endpoint_middleware.go
Move carve requests to server/fleet/ (#45785)
2026-05-20 09:12:38 -03:00
endpoint_setup.go
Use fleetctl new templates for new instances (#42768)
2026-04-03 09:58:03 -05:00
endpoint_utils_test.go
Add CSP to fleet(currently disabled - needs frontend work) (#41395)
2026-03-12 18:06:54 -04:00
endpoint_utils.go
🤖 Chore: remove deprecated appendListOptionsWithCursorToSQL (#44385)
2026-05-05 10:26:47 -04:00
frontend_test.go
Add CSP to fleet(currently disabled - needs frontend work) (#41395)
2026-03-12 18:06:54 -04:00
frontend.go
Fix MDM SSO callback 'missing profile' error for Android enrollment (#45046)
2026-05-12 12:42:16 -04:00
full_test.go
…
global_policies_test.go
Fix get policy by id endpoint and unify access in UI (#45048)
2026-05-11 09:39:52 -03:00
global_policies.go
Add backend changes for continuous automations on policies (#45999)
2026-05-26 21:11:18 -03:00
global_schedule_test.go
…
global_schedule.go
…
handler_deprecated_paths.go
42508 Rename abm to ab in API (#46657)
2026-06-03 14:58:17 -04:00
handler_test.go
…
handler.go
Improve apple MDM parsing (#47344)
2026-06-10 15:35:04 -04:00
hosts_reports_test.go
Performance improvements for Host Reports (41540)
2026-03-26 07:04:18 -04:00
hosts_test.go
Speed up /vulnerabilities and filtered /software/versions queries (#45564)
2026-06-08 17:02:47 -04:00
hosts.go
Speed up /vulnerabilities and filtered /software/versions queries (#45564)
2026-06-08 17:02:47 -04:00
http_auth_test.go
Move loginRequest and logoutRequest to server/fleet/ (#45908)
2026-05-21 09:57:07 -03:00
integration_android_certificate_templates_test.go
Clean up Apple reconciler queries, no longer used (#46712)
2026-06-05 11:43:16 +02:00
integration_android_software_test.go
Fix nil-pointer panic in Android Enterprise Pub/Sub endpoint (#45520)
2026-05-18 13:29:45 -04:00
integration_apple_vpp_config_test.go
Emit failed VPP/in-house install activity, release reserved license (#46332)
2026-05-28 14:43:25 -04:00
integration_certificate_authorities_test.go
Move testing_utils.go to testing_utils_test.go for SCEP tests (#45619)
2026-05-18 11:04:00 -03:00
integration_core_test.go
Fix fleet-scoped host vitals labels (#46953)
2026-06-08 10:46:56 -03:00
integration_desktop_test.go
Move mysql/testing_utils.go to a separate mysql/mysqltest package (#45406)
2026-05-14 11:18:20 -03:00
integration_ds_only_test.go
…
integration_enterprise_test.go
Merge branch 'main' of github.com:fleetdm/fleet into feat/39018-self-service-categories
2026-06-08 12:12:33 -04:00
integration_enterprise_vulns_test.go
Move mysql/testing_utils.go to a separate mysql/mysqltest package (#45406)
2026-05-14 11:18:20 -03:00
integration_install_test.go
Auth in-house iOS app downloads with install tokens (#46819)
2026-06-05 16:34:20 -04:00
integration_live_queries_test.go
Move mysql/testing_utils.go to a separate mysql/mysqltest package (#45406)
2026-05-14 11:18:20 -03:00
integration_logger_test.go
Move loginRequest and logoutRequest to server/fleet/ (#45908)
2026-05-21 09:57:07 -03:00
integration_mdm_commands_test.go
43116 fix Fedora wipe btrfs snapshots (#45704)
2026-06-02 10:14:02 +01:00
integration_mdm_ddm_test.go
Clean up Apple reconciler queries, no longer used (#46712)
2026-06-05 11:43:16 +02:00
integration_mdm_dep_test.go
Move mysql/testing_utils.go to a separate mysql/mysqltest package (#45406)
2026-05-14 11:18:20 -03:00
integration_mdm_lifecycle_test.go
gkarr 44008 setup experience (#45202)
2026-05-15 12:35:26 -05:00
integration_mdm_profiles_test.go
update apple query for profile verification with include all/any + exclude (#47079)
2026-06-08 17:24:23 +02:00
integration_mdm_release_worker_test.go
Move mysql/testing_utils.go to a separate mysql/mysqltest package (#45406)
2026-05-14 11:18:20 -03:00
integration_mdm_setup_experience_test.go
Fixed the mdm_unenrolled activity not appearing in host details page (#46573)
2026-06-01 18:01:15 -05:00
integration_mdm_test.go
Merge branch 'main' of github.com:fleetdm/fleet into feat/39018-self-service-categories
2026-06-08 12:12:33 -04:00
integration_osquery_headerauth_test.go
Improve auth around osquery endpoints (#44209)
2026-05-08 12:08:10 -04:00
integration_smtp_test.go
…
integration_software_titles_test.go
Merge branch 'main' of github.com:fleetdm/fleet into feat/39018-self-service-categories
2026-06-08 12:12:33 -04:00
integration_sso_test.go
Move mysql/testing_utils.go to a separate mysql/mysqltest package (#45406)
2026-05-14 11:18:20 -03:00
integration_vpp_install_test.go
Auth in-house iOS app downloads with install tokens (#46819)
2026-06-05 16:34:20 -04:00
invites_test.go
…
invites.go
…
jitter_test.go
…
jitter.go
…
labels_test.go
Fix fleet-scoped host vitals labels (#46953)
2026-06-08 10:46:56 -03:00
labels_util.go
…
labels.go
Remove unenroll pending and add Android COBO wipe to Free (#46653)
2026-06-02 18:59:13 -05:00
linux_mdm_test.go
…
linux_mdm.go
…
live_queries.go
…
mail_test.go
Run multiple independent Fleet dev servers in parallel (#41865)
2026-03-18 13:58:58 -05:00
maintained_apps_test.go
Fix addFleetMaintainedAppEndpoint to accept fleet_id param (#41805)
2026-03-17 09:59:03 -05:00
maintained_apps.go
Add API param linter (#44045)
2026-05-11 08:46:02 -05:00
mdm_profiles_test.go
Cert renewal for non-proxied SCEP and ACME (Phase 1 + Phase 2) (#45696)
2026-05-18 11:41:02 -06:00
mdm_profiles.go
Cert renewal for non-proxied SCEP and ACME (Phase 1 + Phase 2) (#45696)
2026-05-18 11:41:02 -06:00
mdm_scep.go
…
mdm_test.go
validate label scoping on fleet free unassigned (#47265)
2026-06-10 17:22:52 +02:00
mdm.go
validate label scoping on fleet free unassigned (#47265)
2026-06-10 17:22:52 +02:00
mem_failing_policies_set_test.go
…
metrics_appconfig.go
…
metrics_change_email.go
…
metrics_invites.go
…
metrics_labels.go
…
metrics_sessions.go
extend the expiration date for the auth token cookie (#41261)
2026-03-10 17:15:09 +00:00
metrics_users.go
…
metrics.go
…
microsoft_mdm_integration_test.go
Fixed stale pending MDM profiles reappearing (#46111)
2026-05-26 19:34:44 -05:00
microsoft_mdm_property_test.go
Final Windows setup experience (ESP) fixes (#44740)
2026-05-12 12:28:57 -05:00
microsoft_mdm_test.go
MDM Windows push perf fixes (#46917)
2026-06-08 15:34:35 +01:00
microsoft_mdm.go
MDM Windows push perf fixes (#46917)
2026-06-08 15:34:35 +01:00
orbit_eua_test.go
Fix to populate host_emails during Linux/Windows SSO enrollment (#45951)
2026-05-21 16:38:44 -03:00
orbit_test.go
fleetd Windows MDM wake (push vs poll) (#46594)
2026-06-03 17:38:14 -05:00
orbit.go
fleetd Windows MDM wake (push vs poll) (#46594)
2026-06-03 17:38:14 -05:00
org_logo_test.go
Custom org logo fixes: delete for external URLs + gitops switch from path to URL (#45236)
2026-05-13 14:47:01 +02:00
org_logo.go
Custom org logo fixes: delete for external URLs + gitops switch from path to URL (#45236)
2026-05-13 14:47:01 +02:00
osquery_header_auth_test.go
Improve auth around osquery endpoints (#44209)
2026-05-08 12:08:10 -04:00
osquery_header_auth.go
Improve auth around osquery endpoints (#44209)
2026-05-08 12:08:10 -04:00
osquery_test.go
Setup experience software policy checks (#47075)
2026-06-10 21:16:37 +01:00
osquery.go
Setup experience software policy checks (#47075)
2026-06-10 21:16:37 +01:00
packs_test.go
Move mysql/testing_utils.go to a separate mysql/mysqltest package (#45406)
2026-05-14 11:18:20 -03:00
packs.go
Fix typo: explicty -> explicitly in server/service/packs.go (#45874)
2026-05-25 15:12:52 +02:00
policies.go
Add icon_url to policy software automations (#46645)
2026-06-03 14:48:28 -03:00
queries_test.go
Move mysql/testing_utils.go to a separate mysql/mysqltest package (#45406)
2026-05-14 11:18:20 -03:00
queries.go
Fix POST /queries returning 500 on JSON null name/query (#43031)
2026-05-13 07:25:02 -04:00
reconcile_windows_profiles_property_test.go
Improved the performance of Windows MDM profile reconciliation (#44075)
2026-04-28 15:37:43 -05:00
scheduled_queries_test.go
…
scheduled_queries.go
Move query and scheduled query request and response types to server/fleet/ (#43236)
2026-04-13 16:02:23 -03:00
scim.go
…
scripts_encoding_test.go
…
scripts_encoding.go
…
scripts_test.go
Return 404's for not found resources in some batch script endpoints (#45348)
2026-05-15 07:59:36 +02:00
scripts.go
Fixes from Konstantin's code review (#46701)
2026-06-05 01:13:27 -05:00
secret_variables_test.go
…
secret_variables.go
Move targets and secret variables to server/fleet/ (#46196)
2026-06-03 15:07:54 -03:00
service_appconfig_test.go
Add optional SES sender domain configuration (#43811)
2026-05-19 11:21:46 -05:00
service_appconfig.go
Add optional SES sender domain configuration (#43811)
2026-05-19 11:21:46 -05:00
service_campaign_test.go
Move mysql/testing_utils.go to a separate mysql/mysqltest package (#45406)
2026-05-14 11:18:20 -03:00
service_campaigns.go
…
service_errors.go
…
service_users.go
…
service.go
Add ability to upload custom org logos (#44390)
2026-05-05 14:42:52 +02:00
sessions_test.go
Move mysql/testing_utils.go to a separate mysql/mysqltest package (#45406)
2026-05-14 11:18:20 -03:00
sessions.go
Move loginRequest and logoutRequest to server/fleet/ (#45908)
2026-05-21 09:57:07 -03:00
setup_experience_test.go
fleetd Windows MDM wake (push vs poll) (#46594)
2026-06-03 17:38:14 -05:00
setup_experience.go
fleetd Windows MDM wake (push vs poll) (#46594)
2026-06-03 17:38:14 -05:00
software_installers_test.go
Merge branch 'main' of github.com:fleetdm/fleet into feat/39018-self-service-categories
2026-06-08 12:12:33 -04:00
software_installers.go
Merge branch 'main' of github.com:fleetdm/fleet into feat/39018-self-service-categories
2026-06-08 12:12:33 -04:00
software_test.go
Allow GitOps user to list software (#44721)
2026-05-05 13:27:57 -05:00
software_title_icons_test.go
Move s3/testing_utils.go (#45362)
2026-05-13 14:14:27 -03:00
software_title_icons.go
Update fleetctl client urls and params (#41463)
2026-03-13 08:38:55 -05:00
software_titles_test.go
Allow GitOps user to list software (#44721)
2026-05-05 13:27:57 -05:00
software_titles.go
iOS/iPadOS managed config: service wiring (#43965) (#44932)
2026-05-12 13:59:16 -04:00
software.go
Return light software metadata when listing hosts filtered by software present only on a different team (#42519)
2026-03-30 21:33:21 -07:00
status.go
…
targets_test.go
POST /api/latest/fleet/targets returns more info than needed (#46082)
2026-05-27 11:33:05 -04:00
targets.go
Move targets and secret variables to server/fleet/ (#46196)
2026-06-03 15:07:54 -03:00
team_policies_test.go
Add icon_url to policy software automations (#46645)
2026-06-03 14:48:28 -03:00
team_policies.go
Add icon_url to policy software automations (#46645)
2026-06-03 14:48:28 -03:00
team_schedule_test.go
…
team_schedule.go
Move query and scheduled query request and response types to server/fleet/ (#43236)
2026-04-13 16:02:23 -03:00
teams_test.go
Allow disabling historical data collection (GitOps / API) (#44488)
2026-05-05 11:12:23 -05:00
teams.go
…
test_types.go
First move of server/service to server/service/svctest to prevent testing code in Fleet's production binary (#45221)
2026-05-12 17:43:37 -03:00
testing_client_test.go
Add combined include/exclude label targeting for MDM profiles (API and GitOps) (#46437)
2026-06-03 15:24:33 +01:00
testing_utils_test.go
Changed semantics around api_endpoints init.
2026-06-03 10:13:11 -04:00
tracing_tiers.go
Added trace sampler to use OTEL in prod. (#46595)
2026-06-02 18:53:00 -05:00
translator.go
…
transport_error.go
…
transport_setup.go
…
transport_test.go
Mark ptr methods as deprecated (#46626)
2026-06-02 10:43:18 -03:00
transport.go
🤖 Chore: remove deprecated appendListOptionsWithCursorToSQL (#44385)
2026-05-05 10:26:47 -04:00
trigger.go
…
user_roles.go
…
users_test.go
Move mysql/testing_utils.go to a separate mysql/mysqltest package (#45406)
2026-05-14 11:18:20 -03:00
users.go
Allow the creation of API-only users (#43440)
2026-04-16 11:11:39 -04:00
validation_setup.go
…
vpp_test.go
First move of server/service to server/service/svctest to prevent testing code in Fleet's production binary (#45221)
2026-05-12 17:43:37 -03:00
vpp.go
Fleet UI: return app name on success of adding android app (#44068)
2026-05-12 13:51:12 -04:00
vulnerabilities_test.go
…
vulnerabilities.go
…
windows_mdm_profiles_test.go
validate label scoping on fleet free unassigned (#47265)
2026-06-10 17:22:52 +02:00
windows_mdm_profiles.go
validate label scoping on fleet free unassigned (#47265)
2026-06-10 17:22:52 +02:00