Discharge7443/fleet
1
0
Fork 0
Code Issues Pull Requests Actions 27 Packages Projects Releases Wiki Activity
Files
ca1acc2467b120dc39addec2b2db77dae3760637
fleet/server/service
T
History
Konstantin Sykulev 3b329e49e7 Android certificates resent_certificate (#49171) 
**Related issue:** Resolves #49007

# Checklist for submitter

- [x] Added/updated automated tests
- [x] QA'd all new/changed functionality manually

For unreleased bug fixes in a release candidate, one of:

- [x] Confirmed that the fix is not expected to adversely impact load
test results


<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **New Features**
* SCIM user create/reactivation, replace, patch, and delete flows now
automatically record certificate resend activities when applicable.
* Certificate resend activities are generated alongside SCIM
persistence, tied to the resulting “resent certificates”.
* **Bug Fixes**
* Improved reliability and synchronization of certificate resend
activity recording during SCIM and Google Workspace reconciliation.
* Failures to record individual resend activities no longer block the
underlying SCIM operation.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2026-07-13 13:22:50 -05:00
..
async
Cleanup policy_membership stale entries in distributed/write (#48674)
2026-07-03 14:12:08 -03:00
calendar
Policy status page: automation activity history, reset endpoint, and details UI
2026-06-19 12:13:36 -04:00
conditional_access_microsoft_proxy
Policy status page: automation activity history, reset endpoint, and details UI
2026-06-19 12:13:36 -04:00
contract
Move loginRequest and logoutRequest to server/fleet/ (#45908)
2026-05-21 09:57:07 -03:00
embedded_scripts
Auto-clean duplicate Okta CA SCEP cert after profile install (#46172)
2026-06-05 16:20:32 -04:00
externalsvc
Add private network IP blocking for outbound HTTP requests (#46463)
2026-06-29 10:41:16 -04:00
integrationtest
Clear idp cookie after succesful SSO (#47569)
2026-06-17 11:09:21 -05:00
middleware
…
mock
…
osquery_utils
Fix macOS software titles mis-named from embedded helper bundles (#44199) (#47831)
2026-07-09 10:01:27 -06:00
redis_key_value
…
redis_lock
…
redis_policy_set
…
schedule
Fix cron jobs stuck in "expired" when a run is interrupted mid-flight
2026-07-02 07:38:11 -04:00
svctest
macos password sync feature branch (#47422)
2026-07-09 14:57:48 -04:00
testdata
…
activities_test.go
Emit failed VPP/in-house install activity, release reserved license (#46332)
2026-05-28 14:43:25 -04:00
activities.go
Emit failed VPP/in-house install activity, release reserved license (#46332)
2026-05-28 14:43:25 -04:00
api_endpoints.go
…
appconfig_test.go
macos password sync feature branch (#47422)
2026-07-09 14:57:48 -04:00
appconfig.go
macos password sync feature branch (#47422)
2026-07-09 14:57:48 -04:00
apple_mdm_batched.go
Optimize Apple profile reconciler approach by moving logic to code (#45573)
2026-05-29 09:46:17 +02:00
apple_mdm_cmd_results_test.go
…
apple_mdm_cmd_results.go
…
apple_mdm_ddm_test.go
SAAD: GitOps for DDM assets (#49046)
2026-07-10 12:56:26 -04:00
apple_mdm_declarations_batched_test.go
Add user-scoped declaration support (#48796)
2026-07-07 13:15:14 -04:00
apple_mdm_declarations_batched.go
Add user-scoped declaration support (#48796)
2026-07-07 13:15:14 -04:00
apple_mdm_test.go
SAAD: GitOps for DDM assets (#49046)
2026-07-10 12:56:26 -04:00
apple_mdm.go
SAAD: GitOps for DDM assets (#49046)
2026-07-10 12:56:26 -04:00
apple_psso_test.go
macos password sync feature branch (#47422)
2026-07-09 14:57:48 -04:00
apple_psso.go
macos password sync feature branch (#47422)
2026-07-09 14:57:48 -04:00
build_tags_test.go
…
calendar.go
…
campaigns_test.go
…
campaigns.go
…
carves_test.go
Move carve requests to server/fleet/ (#45785)
2026-05-20 09:12:38 -03:00
carves.go
Move carve requests to server/fleet/ (#45785)
2026-05-20 09:12:38 -03:00
categories.go
List categories device endpoint (#46938)
2026-06-08 09:15:17 -05:00
certificate_authorities_test.go
…
certificate_authorities.go
…
certificate_templates_test.go
On var change resend Android certificate templates and managed app configs (#48278)
2026-06-25 16:27:30 -05:00
certificate_templates.go
On var change resend Android certificate templates and managed app configs (#48278)
2026-06-25 16:27:30 -05:00
certificates.go
On var change resend Android certificate templates and managed app configs (#48278)
2026-06-25 16:27:30 -05:00
client_android_certificates.go
…
client_appconfig_test.go
Custom org logo fixes: delete for external URLs + gitops switch from path to URL (#45236)
2026-05-13 14:47:01 +02:00
client_appconfig.go
Custom org logo fixes: delete for external URLs + gitops switch from path to URL (#45236)
2026-05-13 14:47:01 +02:00
client_carves.go
Move carve requests to server/fleet/ (#45785)
2026-05-20 09:12:38 -03:00
client_certificate_authorities.go
…
client_compat.go
…
client_debug.go
…
client_hosts.go
Move HostDetailResponse type to server/fleet/ (#45718)
2026-05-18 14:06:38 -03:00
client_labels.go
…
client_live_query_test.go
…
client_live_query.go
…
client_mdm_test.go
…
client_mdm.go
42508 Rename abm to ab in API (#46657)
2026-06-03 14:58:17 -04:00
client_packs.go
…
client_policies.go
…
client_profiles.go
SAAD: GitOps for DDM assets (#49046)
2026-07-10 12:56:26 -04:00
client_queries.go
…
client_scripts.go
…
client_secret_variables.go
Move targets and secret variables to server/fleet/ (#46196)
2026-06-03 15:07:54 -03:00
client_sessions.go
Display instructions needed for SSO-enabled accounts with fleetctl (#46768)
2026-06-17 18:19:00 -04:00
client_setup.go
…
client_software.go
Change self-service categories GitOps to not require dedicated key (#47439)
2026-06-11 16:19:11 -04:00
client_targets.go
Move targets and secret variables to server/fleet/ (#46196)
2026-06-03 15:07:54 -03:00
client_teams.go
SAAD: GitOps for DDM assets (#49046)
2026-07-10 12:56:26 -04:00
client_test.go
…
client_trigger.go
…
client_users.go
…
client.go
Add GitOps support for macOS script-only packages in setup experience (#49089)
2026-07-10 13:52:48 -04:00
conditional_access_cleanup_test.go
Auto-clean duplicate Okta CA SCEP cert after profile install (#46172)
2026-06-05 16:20:32 -04:00
conditional_access_cleanup.go
Auto-clean duplicate Okta CA SCEP cert after profile install (#46172)
2026-06-05 16:20:32 -04:00
conditional_access_failure_activity_test.go
Policy status page: automation activity history, reset endpoint, and details UI
2026-06-19 12:13:36 -04:00
conditional_access_idp_test.go
Restrict conditional access Okta IdP asset endpoints to privileged roles (#48294)
2026-06-25 15:57:25 -03:00
conditional_access_idp.go
Auto-clean duplicate Okta CA SCEP cert after profile install (#46172)
2026-06-05 16:20:32 -04:00
conditional_access_microsoft.go
…
cron_schedules_test.go
Rename and move testing_utils.go from schedule and orbit tests (#45609)
2026-05-15 13:23:58 -03:00
cron_schedules.go
…
debug_handler_test.go
…
debug_handler.go
Added trace sampler to use OTEL in prod. (#46595)
2026-06-02 18:53:00 -05:00
debug_trace_sampler_test.go
Added trace sampler to use OTEL in prod. (#46595)
2026-06-02 18:53:00 -05:00
debug_trace_sampler.go
Added trace sampler to use OTEL in prod. (#46595)
2026-06-02 18:53:00 -05:00
devices_endpoint_test.go
…
devices_test.go
…
devices_url_auth_test.go
Narrow host lookup for iDevice URL auth (#47141)
2026-06-09 13:13:37 -04:00
devices.go
Narrow host lookup for iDevice URL auth (#47141)
2026-06-09 13:13:37 -04:00
email_links_subpath_test.go
Fix duplicated URL prefix in transactional email links for subpath deployments
2026-06-26 10:40:26 -04:00
endpoint_campaigns.go
…
endpoint_middleware_test.go
…
endpoint_middleware.go
Move carve requests to server/fleet/ (#45785)
2026-05-20 09:12:38 -03:00
endpoint_setup.go
…
endpoint_utils_test.go
…
endpoint_utils.go
…
frontend_test.go
Persist byod=true enroll param through IdP redirects (#48808)
2026-07-06 16:19:42 -05:00
frontend.go
Persist byod=true enroll param through IdP redirects (#48808)
2026-07-06 16:19:42 -05:00
full_test.go
…
global_policies_test.go
Add Targeted platforms column and platform filter to Policies page (#44125)
2026-07-10 13:32:16 -05:00
global_policies.go
Add Targeted platforms column and platform filter to Policies page (#44125)
2026-07-10 13:32:16 -05:00
global_schedule_test.go
…
global_schedule.go
…
handler_deprecated_paths.go
42508 Rename abm to ab in API (#46657)
2026-06-03 14:58:17 -04:00
handler_test.go
…
handler.go
SAAD: GitOps for DDM assets (#49046)
2026-07-10 12:56:26 -04:00
hosts_reports_test.go
…
hosts_test.go
Adding BYOD backend changes (#47716)
2026-06-25 18:21:26 -05:00
hosts.go
Adding BYOD backend changes (#47716)
2026-06-25 18:21:26 -05:00
http_auth_test.go
Move loginRequest and logoutRequest to server/fleet/ (#45908)
2026-05-21 09:57:07 -03:00
integration_android_certificate_templates_test.go
Clean up Apple reconciler queries, no longer used (#46712)
2026-06-05 11:43:16 +02:00
integration_android_software_test.go
Added FLEET_VAR_HOST to android configs (#47642)
2026-06-17 11:10:03 -05:00
integration_apple_vpp_config_test.go
Emit failed VPP/in-house install activity, release reserved license (#46332)
2026-05-28 14:43:25 -04:00
integration_certificate_authorities_test.go
Fix NDES not using the same retry clearing method as SmallStep for macos (#48105)
2026-06-25 09:32:22 -04:00
integration_core_test.go
SAAD: GitOps for DDM assets (#49046)
2026-07-10 12:56:26 -04:00
integration_desktop_test.go
Filter vulnerable software by cvss on my device page (#47372)
2026-06-16 11:28:06 -04:00
integration_ds_only_test.go
…
integration_enterprise_test.go
Android certificates resent_certificate (#49171)
2026-07-13 13:22:50 -05:00
integration_enterprise_vulns_test.go
Move mysql/testing_utils.go to a separate mysql/mysqltest package (#45406)
2026-05-14 11:18:20 -03:00
integration_install_test.go
Auth in-house iOS app downloads with install tokens (#46819)
2026-06-05 16:34:20 -04:00
integration_live_queries_test.go
Move mysql/testing_utils.go to a separate mysql/mysqltest package (#45406)
2026-05-14 11:18:20 -03:00
integration_logger_test.go
Move loginRequest and logoutRequest to server/fleet/ (#45908)
2026-05-21 09:57:07 -03:00
integration_mdm_apple_psso_test.go
Add PSSO end to end integration tests (#48589)
2026-07-10 18:51:33 -04:00
integration_mdm_commands_test.go
Do not block further wipe commands on inactive existing entry (#48358)
2026-06-26 15:58:42 -04:00
integration_mdm_ddm_test.go
SAAD: GitOps for DDM assets (#49046)
2026-07-10 12:56:26 -04:00
integration_mdm_dep_test.go
Fix re-enrollment with pending SCEP(and ACME) renewals (#48661)
2026-07-07 09:26:14 -04:00
integration_mdm_lifecycle_test.go
Fix re-enrollment with pending SCEP(and ACME) renewals (#48661)
2026-07-07 09:26:14 -04:00
integration_mdm_profiles_test.go
Android certificates resent_certificate (#49171)
2026-07-13 13:22:50 -05:00
integration_mdm_release_worker_test.go
Move mysql/testing_utils.go to a separate mysql/mysqltest package (#45406)
2026-05-14 11:18:20 -03:00
integration_mdm_setup_experience_test.go
Adding BYOD backend changes (#47716)
2026-06-25 18:21:26 -05:00
integration_mdm_test.go
Use generated UUID for mdm_idp_account table on Linux and Windows (#49215)
2026-07-13 14:43:39 -03:00
integration_osquery_headerauth_test.go
…
integration_smtp_test.go
…
integration_software_titles_test.go
Add pinned_version to edited_software activity (#48098)
2026-06-23 16:15:54 -04:00
integration_sso_test.go
Move mysql/testing_utils.go to a separate mysql/mysqltest package (#45406)
2026-05-14 11:18:20 -03:00
integration_vpp_install_test.go
Add pinned_version to edited_software activity (#48098)
2026-06-23 16:15:54 -04:00
invites_test.go
…
invites.go
Fix duplicated URL prefix in transactional email links for subpath deployments
2026-06-26 10:40:26 -04:00
jitter_test.go
…
jitter.go
…
labels_test.go
Made team label membership checks more robust
2026-06-23 10:01:23 -04:00
labels_util.go
…
labels.go
Made team label membership checks more robust
2026-06-23 10:01:23 -04:00
linux_mdm_test.go
…
linux_mdm.go
…
live_queries.go
…
mail_test.go
…
maintained_apps_test.go
…
maintained_apps.go
Paginate Fleet-maintained apps and filters (#47615)
2026-06-16 15:58:24 -05:00
mdm_profiles_test.go
Cert renewal for non-proxied SCEP and ACME (Phase 1 + Phase 2) (#45696)
2026-05-18 11:41:02 -06:00
mdm_profiles.go
Cert renewal for non-proxied SCEP and ACME (Phase 1 + Phase 2) (#45696)
2026-05-18 11:41:02 -06:00
mdm_scep.go
improve apple mdm ber parsing (#47498)
2026-06-12 16:07:59 +02:00
mdm_test.go
SAAD: GitOps for DDM assets (#49046)
2026-07-10 12:56:26 -04:00
mdm.go
SAAD: GitOps for DDM assets (#49046)
2026-07-10 12:56:26 -04:00
mem_failing_policies_set_test.go
…
metrics_appconfig.go
…
metrics_change_email.go
…
metrics_invites.go
…
metrics_labels.go
…
metrics_sessions.go
…
metrics_users.go
…
metrics.go
…
microsoft_mdm_integration_test.go
Windows MDM reconciler cleanup and remaining fixes (#47493)
2026-06-12 22:30:58 +01:00
microsoft_mdm_property_test.go
Always display Windows ESP error when software install fails (#47522)
2026-06-18 06:35:57 +01:00
microsoft_mdm_test.go
Fix Windows CSP bypass issue (#48843)
2026-07-08 14:38:10 +01:00
microsoft_mdm.go
Fix Windows CSP bypass issue (#48843)
2026-07-08 14:38:10 +01:00
orbit_eua_test.go
Fix to populate host_emails during Linux/Windows SSO enrollment (#45951)
2026-05-21 16:38:44 -03:00
orbit_test.go
escrow snapd TPM-backed FDE recovery keys from orbit (#48452)
2026-07-07 16:25:20 -04:00
orbit.go
escrow snapd TPM-backed FDE recovery keys from orbit (#48452)
2026-07-07 16:25:20 -04:00
org_logo_test.go
Custom org logo fixes: delete for external URLs + gitops switch from path to URL (#45236)
2026-05-13 14:47:01 +02:00
org_logo.go
Custom org logo fixes: delete for external URLs + gitops switch from path to URL (#45236)
2026-05-13 14:47:01 +02:00
osquery_header_auth_test.go
…
osquery_header_auth.go
…
osquery_test.go
Show certificates on host details page for Windows (#31294) (#48469)
2026-07-06 20:28:21 +01:00
osquery.go
Cache pack config JSON per team to reduce redundant marshaling (#48702)
2026-07-13 13:51:02 -04:00
pack_config_cache_test.go
Cache pack config JSON per team to reduce redundant marshaling (#48702)
2026-07-13 13:51:02 -04:00
packs_test.go
Move mysql/testing_utils.go to a separate mysql/mysqltest package (#45406)
2026-05-14 11:18:20 -03:00
packs.go
Fix typo: explicty -> explicitly in server/service/packs.go (#45874)
2026-05-25 15:12:52 +02:00
policies_test.go
Policy status page: automation activity history, reset endpoint, and details UI
2026-06-19 12:13:36 -04:00
policies.go
Policy status page: automation activity history, reset endpoint, and details UI
2026-06-19 12:13:36 -04:00
queries_test.go
Move mysql/testing_utils.go to a separate mysql/mysqltest package (#45406)
2026-05-14 11:18:20 -03:00
queries.go
Fix POST /queries returning 500 on JSON null name/query (#43031)
2026-05-13 07:25:02 -04:00
reconcile_windows_profiles_property_test.go
Improved Windows MDM reconciler (#47071)
2026-06-11 07:03:28 +01:00
scheduled_queries_test.go
…
scheduled_queries.go
…
scim.go
…
scripts_encoding_test.go
…
scripts_encoding.go
…
scripts_test.go
Fix batch script execution validations (#48243)
2026-06-25 07:25:33 -04:00
scripts.go
Fix batch script execution validations (#48243)
2026-06-25 07:25:33 -04:00
secret_variables_test.go
…
secret_variables.go
Move targets and secret variables to server/fleet/ (#46196)
2026-06-03 15:07:54 -03:00
service_appconfig_test.go
Add optional SES sender domain configuration (#43811)
2026-05-19 11:21:46 -05:00
service_appconfig.go
Add native Splunk HEC log destination (#48455)
2026-07-03 12:14:24 -04:00
service_campaign_test.go
Move mysql/testing_utils.go to a separate mysql/mysqltest package (#45406)
2026-05-14 11:18:20 -03:00
service_campaigns.go
…
service_errors.go
…
service_users.go
…
service.go
Cache pack config JSON per team to reduce redundant marshaling (#48702)
2026-07-13 13:51:02 -04:00
sessions_test.go
Fix SSO callback URLs doubling the subpath under a URL prefix
2026-06-26 10:40:55 -04:00
sessions.go
Fix SSO callback URLs doubling the subpath under a URL prefix
2026-06-26 10:40:55 -04:00
setup_experience_test.go
fleetd Windows MDM wake (push vs poll) (#46594)
2026-06-03 17:38:14 -05:00
setup_experience.go
fleetd Windows MDM wake (push vs poll) (#46594)
2026-06-03 17:38:14 -05:00
software_installers_test.go
Change self-service categories GitOps to not require dedicated key (#47439)
2026-06-11 16:19:11 -04:00
software_installers.go
Extend update software installer API to support FMA version pinning (#47808)
2026-06-23 12:09:23 -04:00
software_test.go
…
software_title_icons_test.go
Move s3/testing_utils.go (#45362)
2026-05-13 14:14:27 -03:00
software_title_icons.go
…
software_titles_test.go
Improve fleet scope validation for software title lookups (#48034)
2026-06-23 14:28:15 -04:00
software_titles.go
merge main
2026-06-25 13:57:22 -04:00
software.go
…
status.go
…
targets_test.go
POST /api/latest/fleet/targets returns more info than needed (#46082)
2026-05-27 11:33:05 -04:00
targets.go
Move targets and secret variables to server/fleet/ (#46196)
2026-06-03 15:07:54 -03:00
team_policies_test.go
Add Targeted platforms column and platform filter to Policies page (#44125)
2026-07-10 13:32:16 -05:00
team_policies.go
Add Targeted platforms column and platform filter to Policies page (#44125)
2026-07-10 13:32:16 -05:00
team_schedule_test.go
…
team_schedule.go
…
teams_test.go
Restrict authorization for team membership operations (#48201)
2026-06-25 10:01:15 -03:00
teams.go
…
test_types.go
…
testing_client_test.go
Use generated UUID for mdm_idp_account table on Linux and Windows (#49215)
2026-07-13 14:43:39 -03:00
testing_utils_test.go
Add PSSO end to end integration tests (#48589)
2026-07-10 18:51:33 -04:00
tracing_tiers.go
Added trace sampler to use OTEL in prod. (#46595)
2026-06-02 18:53:00 -05:00
translator.go
…
transport_error.go
…
transport_setup.go
…
transport_test.go
Mark ptr methods as deprecated (#46626)
2026-06-02 10:43:18 -03:00
transport.go
…
trigger.go
…
user_roles.go
…
users_test.go
Filter cross-team memberships from user list responses (#48890)
2026-07-08 13:43:14 -03:00
users.go
Filter cross-team memberships from user list responses (#48890)
2026-07-08 13:43:14 -03:00
validation_setup.go
…
vpp_test.go
Fix App Store picker 403 for non-admin roles (#48856)
2026-07-07 16:15:58 -04:00
vpp.go
…
vulnerabilities_test.go
…
vulnerabilities.go
…
windows_mdm_profiles_test.go
validate label scoping on fleet free unassigned (#47265)
2026-06-10 17:22:52 +02:00
windows_mdm_profiles.go
Fix Windows CSP bypass issue (#48843)
2026-07-08 14:38:10 +01:00