From 2df7c71749690a98652eaed34a733cff2fa062cd Mon Sep 17 00:00:00 2001 From: noahtalerman <47070608+noahtalerman@users.noreply.github.com> Date: Wed, 11 Aug 2021 20:14:32 -0400 Subject: [PATCH] Prepare for Fleet 4.2.0 (#1645) --- CHANGELOG.md | 32 +++++++++++++++++++ changes/1269-refresh-matching-hosts | 1 - changes/1372-hosts-status-dropdown | 5 --- changes/1490-host-count-bug | 1 - changes/1496-sort-multiple-pages | 2 -- changes/1526-refactor-manage-queries-page | 7 ---- changes/1550-team-schedules-ui | 1 - changes/1567-refactor-manage-packs-page | 1 - changes/1587-surface-logging-destination | 1 - changes/1590-observers-can-run-query | 1 - changes/1627-fix-edit-label-platform | 1 - changes/dont-fail-if-duplicate-host-software | 1 - changes/improve-fleet-serve-logging | 1 - ...eview-command-loads-standard-query-library | 1 - changes/issue-1325-filter-by-team_id | 2 -- changes/issue-1436-convert-cpe-to-cve | 1 - ...issue-1437-expose-vulnerabilities-in-hosts | 1 - ...-config-api-responds-with-logging-settings | 1 - changes/issue-1475-flash-message-bug | 1 - ...5-prevent-changes-to-global-and-team-packs | 2 -- changes/issue-1498-team-schedules | 1 - changes/issue-1515-observer-query-issues | 1 - changes/issue-1525-schedule-action-dropdown | 1 - changes/issue-1559-transfer-filter-by-status | 1 - changes/issue-1569-disallow-target-id-null | 1 - changes/issue-1570-improve-performance | 1 - changes/issue-1588-allow-disabling-host-users | 1 - changes/issue-1632-software-inventory-config | 1 - ...s-when-injesting-distributed-query-results | 1 - changes/timeout-in-request-analytics | 1 - charts/fleet/Chart.yaml | 4 +-- charts/fleet/values.yaml | 2 +- .../organization-settings.yml | 8 +++-- tools/fleetctl-npm/package.json | 2 +- 34 files changed, 41 insertions(+), 49 deletions(-) delete mode 100644 changes/1269-refresh-matching-hosts delete mode 100644 changes/1372-hosts-status-dropdown delete mode 100644 changes/1490-host-count-bug delete mode 100644 changes/1496-sort-multiple-pages delete mode 100644 changes/1526-refactor-manage-queries-page delete mode 100644 changes/1550-team-schedules-ui delete mode 100644 changes/1567-refactor-manage-packs-page delete mode 100644 changes/1587-surface-logging-destination delete mode 100644 changes/1590-observers-can-run-query delete mode 100644 changes/1627-fix-edit-label-platform delete mode 100644 changes/dont-fail-if-duplicate-host-software delete mode 100644 changes/improve-fleet-serve-logging delete mode 100644 changes/issue-1159-preview-command-loads-standard-query-library delete mode 100644 changes/issue-1325-filter-by-team_id delete mode 100644 changes/issue-1436-convert-cpe-to-cve delete mode 100644 changes/issue-1437-expose-vulnerabilities-in-hosts delete mode 100644 changes/issue-1438-config-api-responds-with-logging-settings delete mode 100644 changes/issue-1475-flash-message-bug delete mode 100644 changes/issue-1485-prevent-changes-to-global-and-team-packs delete mode 100644 changes/issue-1498-team-schedules delete mode 100644 changes/issue-1515-observer-query-issues delete mode 100644 changes/issue-1525-schedule-action-dropdown delete mode 100644 changes/issue-1559-transfer-filter-by-status delete mode 100644 changes/issue-1569-disallow-target-id-null delete mode 100644 changes/issue-1570-improve-performance delete mode 100644 changes/issue-1588-allow-disabling-host-users delete mode 100644 changes/issue-1632-software-inventory-config delete mode 100644 changes/log-errors-when-injesting-distributed-query-results delete mode 100644 changes/timeout-in-request-analytics diff --git a/CHANGELOG.md b/CHANGELOG.md index ef948c66f6..f4f799dcbd 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,35 @@ +## Fleet 4.2.0 (Aug 11, 2021) + +* Add ability to simultaneously filter hosts by status (`online`, `offline`, `new`, `mia`) and by label on the **Hosts** page. + +* Add ability to filter hosts by team in the Fleet UI, fleetctl CLI tool, and Fleet API. *Available for Fleet Basic customers*. + +* Add ability to create a Team schedule in Fleet. The Schedule feature was released in Fleet 4.1.0. For more information on the new Schedule feature, check out the [Fleet 4.1.0 release blog post](https://blog.fleetdm.com/fleet-4-1-0-57dfa25e89c1). *Available for Fleet Basic customers*. + +* Add Beta Vulnerable software feature which surfaces vulnerable software on the **Host details** page and the `GET /api/v1/fleet/hosts/{id}` API route. For information on how to configure the Vulnerable software feature and how exactly Fleet processes vulnerabilities, check out the [Vulnerability processing documentation](https://github.com/fleetdm/fleet/blob/main/docs/1-Using-Fleet/13-Vulnerability-Processing.md#vulnerability-processing). + +* Add ability to see which logging destination is configured for Fleet in the Fleet UI. To see this information, head to the **Schedule** page and then select "Schedule a query." Configured logging destination information is also available in the `GET api/v1/fleet/config` API route. + +* Improve the `fleetctl preview` experience by downloading Fleet's standard query library and loading the queries into the Fleet UI. + +* Improve the user interface for the **Packs** page and **Queries** page in the Fleet UI. + +* Add ability to modify scheduled queries in your Schedule in Fleet. The Schedule feature was released in Fleet 4.1.0. For more information on the new Schedule feature, check out the [Fleet 4.1.0 release blog post](https://blog.fleetdm.com/fleet-4-1-0-57dfa25e89c1). + +* Add ability to disable the Users feature in Fleet by setting the new `enable_host_users` key to `true` in the `config` yaml, configuration file. For documentation on using configuration files in yaml syntax, check out the [Using yaml files in Fleet](https://github.com/fleetdm/fleet/tree/main/docs/1-Using-Fleet/configuration-files#using-yaml-files-in-fleet) documentation. + +* Improve performance of the Software inventory feature. Software inventory is currently under a feature flag. To enable this feature flag, check out the [feature flag documentation](https://github.com/fleetdm/fleet/blob/main/docs/2-Deploying/2-Configuration.md#feature-flags). + +* Improve performance of inserting `pack_stats` in the database. The `pack_stats` information is used to display "Frequency" and "Last run" information for a specific host's scheduled queries. You can find this information on the **Host details** page. + +* Improve Fleet server logging so that it is more uniform. + +* Fix a bug in which a user with the Observer role was unable to run a live query. + +* Fix a bug that prevented the new **Home** page from being displayed in some Fleet instances. + +* Fix a bug that prevented accurate sorting issues across multiple pages on the **Hosts** page. + ## Fleet 4.1.0 (Jul 26, 2021) The primary additions in Fleet 4.1.0 are the new Schedule and Activity feed features. diff --git a/changes/1269-refresh-matching-hosts b/changes/1269-refresh-matching-hosts deleted file mode 100644 index 14868a7af6..0000000000 --- a/changes/1269-refresh-matching-hosts +++ /dev/null @@ -1 +0,0 @@ -* Fixed refreshing manage hosts table to include current label and query after changing a host's team. \ No newline at end of file diff --git a/changes/1372-hosts-status-dropdown b/changes/1372-hosts-status-dropdown deleted file mode 100644 index 3afbd532a3..0000000000 --- a/changes/1372-hosts-status-dropdown +++ /dev/null @@ -1,5 +0,0 @@ -- Added support for getting hosts by label and by status -- Created new dropdown on manage hosts page for status -- Removed status from sidebar -- Modified url to contain status, label or both -- Modified edit and delete buttons for labels, now icons diff --git a/changes/1490-host-count-bug b/changes/1490-host-count-bug deleted file mode 100644 index 7e7547970f..0000000000 --- a/changes/1490-host-count-bug +++ /dev/null @@ -1 +0,0 @@ -- Fix host count bug by refactoring host counts to use built-in labels with exact label names \ No newline at end of file diff --git a/changes/1496-sort-multiple-pages b/changes/1496-sort-multiple-pages deleted file mode 100644 index 635c8715c7..0000000000 --- a/changes/1496-sort-multiple-pages +++ /dev/null @@ -1,2 +0,0 @@ -- Better detection between API sorting and front end sorting -- Fixed sorting issues across multiple pages \ No newline at end of file diff --git a/changes/1526-refactor-manage-queries-page b/changes/1526-refactor-manage-queries-page deleted file mode 100644 index 7a68e2409f..0000000000 --- a/changes/1526-refactor-manage-queries-page +++ /dev/null @@ -1,7 +0,0 @@ -Refactor ManageQueriesPage as functional component in TypeScript -Refactor old table using TableContainer component -Enhance ActionButton component with optional icons -Update DataTable component to render table header buttons per Figma -Update Query interface with additional properties -Update Cypress e2e tests -Remove unused files diff --git a/changes/1550-team-schedules-ui b/changes/1550-team-schedules-ui deleted file mode 100644 index 6753d0ff37..0000000000 --- a/changes/1550-team-schedules-ui +++ /dev/null @@ -1 +0,0 @@ -* Paid users can create, update, delete queries scheduled by team in the UI \ No newline at end of file diff --git a/changes/1567-refactor-manage-packs-page b/changes/1567-refactor-manage-packs-page deleted file mode 100644 index e70f0fa91a..0000000000 --- a/changes/1567-refactor-manage-packs-page +++ /dev/null @@ -1 +0,0 @@ -* Refactor ManagePacksPage to new UI and components diff --git a/changes/1587-surface-logging-destination b/changes/1587-surface-logging-destination deleted file mode 100644 index a09f352597..0000000000 --- a/changes/1587-surface-logging-destination +++ /dev/null @@ -1 +0,0 @@ -* Users reminded of their logging destination when adding or modifying their schedules. \ No newline at end of file diff --git a/changes/1590-observers-can-run-query b/changes/1590-observers-can-run-query deleted file mode 100644 index 8d6bb30d68..0000000000 --- a/changes/1590-observers-can-run-query +++ /dev/null @@ -1 +0,0 @@ -* Fix API call to add query_id so backend can validate observer_can_run when an observer attempts to run as a live query diff --git a/changes/1627-fix-edit-label-platform b/changes/1627-fix-edit-label-platform deleted file mode 100644 index 90f0bf6f65..0000000000 --- a/changes/1627-fix-edit-label-platform +++ /dev/null @@ -1 +0,0 @@ -Disable select platform dropdown for edit label page \ No newline at end of file diff --git a/changes/dont-fail-if-duplicate-host-software b/changes/dont-fail-if-duplicate-host-software deleted file mode 100644 index b93c1ef6a2..0000000000 --- a/changes/dont-fail-if-duplicate-host-software +++ /dev/null @@ -1 +0,0 @@ -* Prevent failing to store software in the case where the insert falls within a small window of time where duplicate host software rows might be inserted. diff --git a/changes/improve-fleet-serve-logging b/changes/improve-fleet-serve-logging deleted file mode 100644 index 371b93135e..0000000000 --- a/changes/improve-fleet-serve-logging +++ /dev/null @@ -1 +0,0 @@ -* Make logging for fleet serve more uniform. \ No newline at end of file diff --git a/changes/issue-1159-preview-command-loads-standard-query-library b/changes/issue-1159-preview-command-loads-standard-query-library deleted file mode 100644 index 882de11b5a..0000000000 --- a/changes/issue-1159-preview-command-loads-standard-query-library +++ /dev/null @@ -1 +0,0 @@ -* Preview command now downloads the standard query library from "https://raw.githubusercontent.com/fleetdm/fleet/main/docs/1-Using-Fleet/standard-query-library/standard-query-library.yml" and loads it into the console via fleet api \ No newline at end of file diff --git a/changes/issue-1325-filter-by-team_id b/changes/issue-1325-filter-by-team_id deleted file mode 100644 index e8269c92f3..0000000000 --- a/changes/issue-1325-filter-by-team_id +++ /dev/null @@ -1,2 +0,0 @@ -* add the `team_id` query parameter to `/api/v1/fleet/hosts` & `/api/v1/fleet/labels/{id}/hosts` which will filter the hosts by the specified team_id -* add a `--team` command line flag to fleetctl to allow filtering hosts by team i.e. `fleetctl get hosts --team=1` \ No newline at end of file diff --git a/changes/issue-1436-convert-cpe-to-cve b/changes/issue-1436-convert-cpe-to-cve deleted file mode 100644 index f9d8acfaad..0000000000 --- a/changes/issue-1436-convert-cpe-to-cve +++ /dev/null @@ -1 +0,0 @@ -* Converts all stored CPEs into their corresponding CVEs if any are present. Fixes issue 1436 diff --git a/changes/issue-1437-expose-vulnerabilities-in-hosts b/changes/issue-1437-expose-vulnerabilities-in-hosts deleted file mode 100644 index 5e51198083..0000000000 --- a/changes/issue-1437-expose-vulnerabilities-in-hosts +++ /dev/null @@ -1 +0,0 @@ -* Return CPEs and CVEs for host software if detected. Fixes issue 1437 diff --git a/changes/issue-1438-config-api-responds-with-logging-settings b/changes/issue-1438-config-api-responds-with-logging-settings deleted file mode 100644 index 3a4c198f10..0000000000 --- a/changes/issue-1438-config-api-responds-with-logging-settings +++ /dev/null @@ -1 +0,0 @@ -* Add logging settings to `/config` API response. This includes both the results & status logging plugins. Implements issue 1438. \ No newline at end of file diff --git a/changes/issue-1475-flash-message-bug b/changes/issue-1475-flash-message-bug deleted file mode 100644 index 5a19645ff2..0000000000 --- a/changes/issue-1475-flash-message-bug +++ /dev/null @@ -1 +0,0 @@ -* Does not re-render page to display flash message \ No newline at end of file diff --git a/changes/issue-1485-prevent-changes-to-global-and-team-packs b/changes/issue-1485-prevent-changes-to-global-and-team-packs deleted file mode 100644 index b7107d9b7b..0000000000 --- a/changes/issue-1485-prevent-changes-to-global-and-team-packs +++ /dev/null @@ -1,2 +0,0 @@ -* /api/v1/fleet/packs only returns packs that have nil or empty 'type' to prevent displaying global and team packs as modifiable packs -* /api/v1/fleet/packs now prevent edit/deletion of Global & Team packs diff --git a/changes/issue-1498-team-schedules b/changes/issue-1498-team-schedules deleted file mode 100644 index 5e28f3b8a1..0000000000 --- a/changes/issue-1498-team-schedules +++ /dev/null @@ -1 +0,0 @@ -* Add team level schedules diff --git a/changes/issue-1515-observer-query-issues b/changes/issue-1515-observer-query-issues deleted file mode 100644 index 0246e35e86..0000000000 --- a/changes/issue-1515-observer-query-issues +++ /dev/null @@ -1 +0,0 @@ -* Observers can run queries that admins create, but not create their own. Improves errors returned and checks. diff --git a/changes/issue-1525-schedule-action-dropdown b/changes/issue-1525-schedule-action-dropdown deleted file mode 100644 index 62f50771b7..0000000000 --- a/changes/issue-1525-schedule-action-dropdown +++ /dev/null @@ -1 +0,0 @@ -* Users can update and remove a global scheduled query with an Action dropdown \ No newline at end of file diff --git a/changes/issue-1559-transfer-filter-by-status b/changes/issue-1559-transfer-filter-by-status deleted file mode 100644 index fec83f38c0..0000000000 --- a/changes/issue-1559-transfer-filter-by-status +++ /dev/null @@ -1 +0,0 @@ -* When filtering hosts to transfer to a team, allow to filter by label, status, and query string diff --git a/changes/issue-1569-disallow-target-id-null b/changes/issue-1569-disallow-target-id-null deleted file mode 100644 index f46c12c6b3..0000000000 --- a/changes/issue-1569-disallow-target-id-null +++ /dev/null @@ -1 +0,0 @@ -* Disallow target_id NULL for pack_targets to prevent issues when listing packs. This could happen because of a pack spec applied with a label name that was not existent anymore. diff --git a/changes/issue-1570-improve-performance b/changes/issue-1570-improve-performance deleted file mode 100644 index fa5a97777c..0000000000 --- a/changes/issue-1570-improve-performance +++ /dev/null @@ -1 +0,0 @@ -* Improve performance of pack statistic insertions in the database. diff --git a/changes/issue-1588-allow-disabling-host-users b/changes/issue-1588-allow-disabling-host-users deleted file mode 100644 index dda1ff3b63..0000000000 --- a/changes/issue-1588-allow-disabling-host-users +++ /dev/null @@ -1 +0,0 @@ -* In some cases, host users are not useful. Users can disable this through the enable_host_users config. diff --git a/changes/issue-1632-software-inventory-config b/changes/issue-1632-software-inventory-config deleted file mode 100644 index 0346c7053e..0000000000 --- a/changes/issue-1632-software-inventory-config +++ /dev/null @@ -1 +0,0 @@ -* Allow users to enable software inventory through the app config. diff --git a/changes/log-errors-when-injesting-distributed-query-results b/changes/log-errors-when-injesting-distributed-query-results deleted file mode 100644 index 198bec0e31..0000000000 --- a/changes/log-errors-when-injesting-distributed-query-results +++ /dev/null @@ -1 +0,0 @@ -* Only log errors and try to process all distributed query results from hosts instead of erroring out. diff --git a/changes/timeout-in-request-analytics b/changes/timeout-in-request-analytics deleted file mode 100644 index 92999783fa..0000000000 --- a/changes/timeout-in-request-analytics +++ /dev/null @@ -1 +0,0 @@ -* When posting usage analytics, timeout after 30secs. diff --git a/charts/fleet/Chart.yaml b/charts/fleet/Chart.yaml index 4468db6cbc..808d930942 100644 --- a/charts/fleet/Chart.yaml +++ b/charts/fleet/Chart.yaml @@ -4,8 +4,8 @@ name: fleet keywords: - fleet - osquery -version: v4.1.0 +version: v4.2.0 home: https://github.com/fleetdm/fleet sources: - https://github.com/fleetdm/fleet.git -appVersion: v4.1.0 +appVersion: v4.2.0 diff --git a/charts/fleet/values.yaml b/charts/fleet/values.yaml index 74d7d05ace..a23dc2ae48 100644 --- a/charts/fleet/values.yaml +++ b/charts/fleet/values.yaml @@ -2,7 +2,7 @@ # All settings related to how Fleet is deployed in Kubernetes hostName: fleet.localhost replicas: 3 # The number of Fleet instances to deploy -imageTag: v4.1.0 # Version of Fleet to deploy +imageTag: v4.2.0 # Version of Fleet to deploy createIngress: true # Whether or not to automatically create an Ingress ingressAnnotations: {} # Additional annotation to add to the Ingress podAnnotations: {} # Additional annotations to add to the Fleet pod diff --git a/docs/1-Using-Fleet/configuration-files/multi-file-configuration/organization-settings.yml b/docs/1-Using-Fleet/configuration-files/multi-file-configuration/organization-settings.yml index c9fabf2787..4e3321ae06 100644 --- a/docs/1-Using-Fleet/configuration-files/multi-file-configuration/organization-settings.yml +++ b/docs/1-Using-Fleet/configuration-files/multi-file-configuration/organization-settings.yml @@ -6,8 +6,8 @@ spec: config: decorators: load: - - SELECT uuid AS host_uuid FROM system_info; - - SELECT hostname AS hostname FROM system_info; + - SELECT uuid AS host_uuid FROM system_info; + - SELECT hostname AS hostname FROM system_info; options: disable_distributed: false distributed_interval: 10 @@ -23,6 +23,8 @@ spec: host_expiry_window: 0 host_settings: additional_queries: null + enable_host_users: true + enable_software_inventory: true org_info: org_logo_url: "" org_name: org @@ -38,7 +40,7 @@ spec: enable_smtp: false enable_ssl_tls: true enable_start_tls: true - password: '********' + password: "********" port: 587 sender_address: "" server: "" diff --git a/tools/fleetctl-npm/package.json b/tools/fleetctl-npm/package.json index 24582983c2..9643621068 100644 --- a/tools/fleetctl-npm/package.json +++ b/tools/fleetctl-npm/package.json @@ -1,6 +1,6 @@ { "name": "fleetctl", - "version": "v4.1.0", + "version": "v4.2.0", "description": "Installer for the fleetctl CLI tool", "bin": { "fleetctl": "./run.js"