From 6001d02e3bba559ad6df4ad62e76b1c4e1feb4c6 Mon Sep 17 00:00:00 2001 From: Lucas Manuel Rodriguez Date: Wed, 10 Jan 2024 13:55:19 -0300 Subject: [PATCH] Update `fleetd` CHANGELOG for the 1.20.0 release (#16000) --- .github/workflows/build-orbit.yaml | 2 +- .../workflows/generate-desktop-targets.yml | 2 +- orbit/CHANGELOG.md | 45 +++++++++++++++++++ orbit/changes/11958-remove-glibc-requirements | 1 - .../changes/12842-orbit-bitlocker-management | 1 - ...-remotely-configure-fleetd-update-channels | 2 - orbit/changes/14176-orbit-retries | 1 - orbit/changes/14380-rpm-graceful-upgrade | 1 - ...14546-orbit-not-reporting-bitlocker-errors | 1 - orbit/changes/14633-bump-go | 1 - orbit/changes/14657-log-flag | 1 - orbit/changes/14879-fleetd-host-identifier | 1 - .../changes/15476-traffic-spike-when-updating | 1 - ...5539-removing-duplicate-device_token-calls | 1 - ...540-reduce-server-load-from-fleetd-upgrade | 4 -- ...educe-agent-calls-to-orbit-config-endpoint | 1 - ...moving-fleet-desktop-traffic-when-disabled | 1 - orbit/changes/feat-extend-script-timeout | 1 - orbit/changes/go-update | 1 - 19 files changed, 47 insertions(+), 22 deletions(-) delete mode 100644 orbit/changes/11958-remove-glibc-requirements delete mode 100644 orbit/changes/12842-orbit-bitlocker-management delete mode 100644 orbit/changes/13825-remotely-configure-fleetd-update-channels delete mode 100644 orbit/changes/14176-orbit-retries delete mode 100644 orbit/changes/14380-rpm-graceful-upgrade delete mode 100644 orbit/changes/14546-orbit-not-reporting-bitlocker-errors delete mode 100644 orbit/changes/14633-bump-go delete mode 100644 orbit/changes/14657-log-flag delete mode 100644 orbit/changes/14879-fleetd-host-identifier delete mode 100644 orbit/changes/15476-traffic-spike-when-updating delete mode 100644 orbit/changes/15539-removing-duplicate-device_token-calls delete mode 100644 orbit/changes/15540-reduce-server-load-from-fleetd-upgrade delete mode 100644 orbit/changes/15541-reduce-agent-calls-to-orbit-config-endpoint delete mode 100644 orbit/changes/15542-removing-fleet-desktop-traffic-when-disabled delete mode 100644 orbit/changes/feat-extend-script-timeout delete mode 100644 orbit/changes/go-update diff --git a/.github/workflows/build-orbit.yaml b/.github/workflows/build-orbit.yaml index 098ea0f9e1..40e3c84909 100644 --- a/.github/workflows/build-orbit.yaml +++ b/.github/workflows/build-orbit.yaml @@ -13,7 +13,7 @@ on: - '.github/workflows/build-orbit.yaml' env: - ORBIT_VERSION: 1.17.0 + ORBIT_VERSION: 1.20.0 CGO_ENABLED: 1 # This allows a subsequently queued workflow run to interrupt previous runs diff --git a/.github/workflows/generate-desktop-targets.yml b/.github/workflows/generate-desktop-targets.yml index 8bc4c50448..157250737f 100644 --- a/.github/workflows/generate-desktop-targets.yml +++ b/.github/workflows/generate-desktop-targets.yml @@ -24,7 +24,7 @@ defaults: shell: bash env: - FLEET_DESKTOP_VERSION: 1.19.0 + FLEET_DESKTOP_VERSION: 1.20.0 permissions: contents: read diff --git a/orbit/CHANGELOG.md b/orbit/CHANGELOG.md index c5880a6ecd..31a4070a8d 100644 --- a/orbit/CHANGELOG.md +++ b/orbit/CHANGELOG.md @@ -1,3 +1,48 @@ +## Orbit 1.20.0 (Jan 10, 2024) + +* Allow configuring TUF channels of `orbit`, `osqueryd` and `desktop` from Fleet agent settings. + +* Extended the script execution timeout to 5 minutes + +* Add `uptime` column to `orbit_info` table. + +* Added functionality to fleetd for macOS hosts to check for custom end user email field in Fleet MDM enrollment profile. + +## Orbit 1.19.0 (Dec 22, 2023) + +* Add `--host-identifier` option to fleetd to allow enrolling with a random identifier instead of the default behavior that uses the hardware UUID. This allows supporting running fleetd on VMs that have the same UUID and/or serial number. + +* At fleetd startup/upgrade, reduced the number of API calls to the server. + * Removed call to fleet/orbit/device_token unless token needs to be updated. + * Changed call to fleet/device/{token}/desktop with a less resource intensive call to fleet/device/{token}/ping + * Removed call to fleet/orbit/ping + +* Reducing the number of fleetd calls to fleet/orbit/config endpoint by caching the config for 3 seconds. + +* When fleet desktop is disabled, do not do API calls to desktop endpoints. + +* Fixing fleetd to NOT make unnecessary duplicate call to orbit/device_token endpoint. + +* Added initial randomization to update checker to prevent all agents updating at once. + +* Add backoff functionality to download `fleetd` updates. With this update, `fleetd` is going to retry 3 times and then wait 24 hours to try again. + +* Updated Go to v1.21.5 + +## Orbit 1.18.3 (Nov 16, 2023) + +* Removed glibc dependencies for Fleet Desktop on linux + +* Adding support to manage Bitlocker operations through Orbit notifications + +* Orbit is now properly reporting Bitlocker encryption errors to Fleet server + +* Add a conditional check in the %postun script to prevent file deletion during RPM upgrade. The check ensures that files and directories are only removed during a full uninstall ( equals 0), safeguarding necessary files from unintended deletion during an upgrade. + +* Allow to configure the orbit `--log-file` flag via an environment variable `ORBIT_LOG_FILE`. + +* Updated Go version to 1.21.3 + ## Orbit 1.17.0 (Sep 28, 2023) * Updated the image and the overall layout of the migration dialog diff --git a/orbit/changes/11958-remove-glibc-requirements b/orbit/changes/11958-remove-glibc-requirements deleted file mode 100644 index 869337a537..0000000000 --- a/orbit/changes/11958-remove-glibc-requirements +++ /dev/null @@ -1 +0,0 @@ -* Removed glibc dependencies for Fleet Desktop on linux diff --git a/orbit/changes/12842-orbit-bitlocker-management b/orbit/changes/12842-orbit-bitlocker-management deleted file mode 100644 index 97d7e6fe1e..0000000000 --- a/orbit/changes/12842-orbit-bitlocker-management +++ /dev/null @@ -1 +0,0 @@ -* Adding support to manage Bitlocker operations through Orbit notifications diff --git a/orbit/changes/13825-remotely-configure-fleetd-update-channels b/orbit/changes/13825-remotely-configure-fleetd-update-channels deleted file mode 100644 index d53aadb5e9..0000000000 --- a/orbit/changes/13825-remotely-configure-fleetd-update-channels +++ /dev/null @@ -1,2 +0,0 @@ -* Allow configuring TUF channels of `orbit`, `osqueryd` and `desktop` from Fleet agent settings. -* Add `uptime` column to `orbit_info` table. diff --git a/orbit/changes/14176-orbit-retries b/orbit/changes/14176-orbit-retries deleted file mode 100644 index 0c6e68e7a6..0000000000 --- a/orbit/changes/14176-orbit-retries +++ /dev/null @@ -1 +0,0 @@ -* Add backoff functionality to download `fleetd` updates. With this update, `fleetd` is going to retry 3 times and then wait 24 hours to try again. diff --git a/orbit/changes/14380-rpm-graceful-upgrade b/orbit/changes/14380-rpm-graceful-upgrade deleted file mode 100644 index 97e82c95eb..0000000000 --- a/orbit/changes/14380-rpm-graceful-upgrade +++ /dev/null @@ -1 +0,0 @@ -* Add a conditional check in the %postun script to prevent file deletion during RPM upgrade. The check ensures that files and directories are only removed during a full uninstall ( equals 0), safeguarding necessary files from unintended deletion during an upgrade. \ No newline at end of file diff --git a/orbit/changes/14546-orbit-not-reporting-bitlocker-errors b/orbit/changes/14546-orbit-not-reporting-bitlocker-errors deleted file mode 100644 index 9f045b3abb..0000000000 --- a/orbit/changes/14546-orbit-not-reporting-bitlocker-errors +++ /dev/null @@ -1 +0,0 @@ -* Orbit is now properly reporting Bitlocker encryption errors to Fleet server diff --git a/orbit/changes/14633-bump-go b/orbit/changes/14633-bump-go deleted file mode 100644 index 32708f2469..0000000000 --- a/orbit/changes/14633-bump-go +++ /dev/null @@ -1 +0,0 @@ -* Updated Go version to 1.21.3 diff --git a/orbit/changes/14657-log-flag b/orbit/changes/14657-log-flag deleted file mode 100644 index 497abca02f..0000000000 --- a/orbit/changes/14657-log-flag +++ /dev/null @@ -1 +0,0 @@ -* Allow to configure the orbit `--log-file` flag via an environment variable `ORBIT_LOG_FILE`. diff --git a/orbit/changes/14879-fleetd-host-identifier b/orbit/changes/14879-fleetd-host-identifier deleted file mode 100644 index ef80cd5ea0..0000000000 --- a/orbit/changes/14879-fleetd-host-identifier +++ /dev/null @@ -1 +0,0 @@ -* Add `--host-identifier` option to fleetd to allow enrolling with a random identifier instead of the default behavior that uses the hardware UUID. This allows supporting running fleetd on VMs that have the same UUID and/or serial number. diff --git a/orbit/changes/15476-traffic-spike-when-updating b/orbit/changes/15476-traffic-spike-when-updating deleted file mode 100644 index 651f6cd4ff..0000000000 --- a/orbit/changes/15476-traffic-spike-when-updating +++ /dev/null @@ -1 +0,0 @@ -Added initial randomization to update checker to prevent all agents updating at once. \ No newline at end of file diff --git a/orbit/changes/15539-removing-duplicate-device_token-calls b/orbit/changes/15539-removing-duplicate-device_token-calls deleted file mode 100644 index 4c77cdb602..0000000000 --- a/orbit/changes/15539-removing-duplicate-device_token-calls +++ /dev/null @@ -1 +0,0 @@ -Fixing fleetd to NOT make unnecessary duplicate call to orbit/device_token endpoint. \ No newline at end of file diff --git a/orbit/changes/15540-reduce-server-load-from-fleetd-upgrade b/orbit/changes/15540-reduce-server-load-from-fleetd-upgrade deleted file mode 100644 index 6378d9fb20..0000000000 --- a/orbit/changes/15540-reduce-server-load-from-fleetd-upgrade +++ /dev/null @@ -1,4 +0,0 @@ -At fleetd startup/upgrade, reduced the number of API calls to the server. -- Removed call to fleet/orbit/device_token unless token needs to be updated. -- Changed call to fleet/device/{token}/desktop with a less resource intensive call to fleet/device/{token}/ping -- Removed call to fleet/orbit/ping \ No newline at end of file diff --git a/orbit/changes/15541-reduce-agent-calls-to-orbit-config-endpoint b/orbit/changes/15541-reduce-agent-calls-to-orbit-config-endpoint deleted file mode 100644 index d0a3529add..0000000000 --- a/orbit/changes/15541-reduce-agent-calls-to-orbit-config-endpoint +++ /dev/null @@ -1 +0,0 @@ -Reducing the number of fleetd calls to fleet/orbit/config endpoint by caching the config for 3 seconds. \ No newline at end of file diff --git a/orbit/changes/15542-removing-fleet-desktop-traffic-when-disabled b/orbit/changes/15542-removing-fleet-desktop-traffic-when-disabled deleted file mode 100644 index 9e8b6af5dd..0000000000 --- a/orbit/changes/15542-removing-fleet-desktop-traffic-when-disabled +++ /dev/null @@ -1 +0,0 @@ -When fleet desktop is disabled, do not do API calls to desktop endpoints. \ No newline at end of file diff --git a/orbit/changes/feat-extend-script-timeout b/orbit/changes/feat-extend-script-timeout deleted file mode 100644 index 3288131681..0000000000 --- a/orbit/changes/feat-extend-script-timeout +++ /dev/null @@ -1 +0,0 @@ -* Extended the script execution timeout to 5 minutes diff --git a/orbit/changes/go-update b/orbit/changes/go-update deleted file mode 100644 index ad3412ceb3..0000000000 --- a/orbit/changes/go-update +++ /dev/null @@ -1 +0,0 @@ -* Updated Go to v1.21.5