Prepare for 4.23.0 (#8663)

This commit is contained in:
Luke Heath 2022-11-14 16:42:21 -06:00 committed by GitHub
parent f9d544be9a
commit af0c75e08b
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
47 changed files with 92 additions and 54 deletions

View file

@ -1,3 +1,90 @@
## Fleet 4.23.0 (Nov 14, 2022)
* Added preview screenshots for Jira and Zendesk vulnerability tickets for Premium users.
* Improve host detail query to populate primary ip and mac address on host.
* Add option to show public IP address in Hosts table.
* Improve ingress resource by replacing the template with a most recent version, that enables:
- Not having any annotation hardcoded, all annotations are optional.
- Custom path, as of now it was hardcoded to `/*`, but depending on the ingress controller, it can require an extra annotation to work with regular expressions.
- Specify ingressClassName, as it was hardcoded to `gce`, and this is a setting that might be different on each cluster.
* Added ingestion of host orbit version from `orbit_info` osquery extension table.
* Added number of hosts enrolled by orbit version to usage statistics payload.
* Added number of hosts enrolled by osquery version to usage statistics payload.
* Added arch and linuxmint to list of linux distros so that their data is displayed and host count includes them.
* When submitting invalid agent options, inform user how to override agent options using fleetctl force flag.
* Exclude Windows Servers from mdm lists and aggregated data.
* Activity feed includes editing team config file using fleetctl.
* Update Go to 1.19.3.
* Host details page includes information about the host's disk encryption.
* Information surfaced to device user includes all summary/about information surfaced in host details page.
* Support low_disk_space filter for endpoint /labels/{id}/hosts.
* Select targets pages implements cleaner icons.
* Added validation of unknown keys for the Apply Teams Spec request payload (`POST /spec/teams` endpoint).
* Orbit MSI installer now includes the necessary manifest file to use windows_event_log as a logger_plugin.
* UI allows for filtering low disk space hosts by platform.
* Add passed policies column on the inherited policies table for teams.
* Use the MSRC security bulletins to scan for Windows vulnerabilities. Detected vulnerabilities are inserted in a new table, 'operating_system_vulnerabilities'.
* Added vulnerability scores to Jira and Zendesk integrations for Fleet Premium users.
* Improve database usage to prevent some deadlocks.
* Added ingestion of disk encryption status for hosts, and added that flag in the response of the `GET /hosts/{id}` API endpoint.
* Trying to add a host with 0 enroll secrets directs user to manage enroll secrets.
* Detect Windows MDM solutions and add mdm endpoints.
* Styling updates on login and forgot password pages.
* Add UI polish and style fixes for query pages.
* Update styling of tooltips and modals.
* Update colors, issues icon.
* Cleanup dashboard styling.
* Add tooling for writing integration tests on the frontend.
* Fixed host details page so munki card only shows for mac hosts.
* Fixed a bug where duplicate vulnerability webhook requests, jira, and zendesk tickets were being
made when scanning for vulnerabilities. This affected ubuntu and redhat hosts that support OVAL
vulnerability detection.
* Fixed bug where password reset token expiration was not enforced.
* Fixed a bug in `fleetctl apply` for teams, where a missing `agent_options` key in the YAML spec
file would clear the existing agent options for the team (now it leaves it unchanged). If the key
is present but empty, then it clears the agent options.
* Fixed bug with our CPE matching process. UTM.app was matching to the wrong CPE.
* Fixed an issue where fleet would send invalid usage stats if no hosts were enrolled.
* Fixed an Orbit MSI installer bug that caused Orbit files not to be removed during uninstallation.
## Fleet 4.22.1 (Oct 27, 2022)
* Fixed the error response of the `/device/:token/desktop` endpoint causing problems on free Fleet Desktop instances on versions `1.3.x`.

View file

@ -1 +0,0 @@
* Detect Windows MDM solutions and add mdm endpoints.

View file

@ -1 +0,0 @@
* Support low_disk_space filter for endpoint /labels/{id}/hosts.

View file

@ -1 +0,0 @@
* Fixed an Orbit MSI installer bug that caused Orbit files not to be removed during uninstallation.

View file

@ -1 +0,0 @@
* Exclude Windows Servers from mdm lists and aggregated data.

View file

@ -1,2 +0,0 @@
* Fixed a bug where duplicate vulnerability webhook requests, jira, and zendesk tickets were being made when scanning for vulnerabilities.
This affected ubuntu and redhat hosts that support OVAL vulnerability detection.

View file

@ -1 +0,0 @@
* Orbit MSI installer now includes the necessary manifest file to use windows_event_log as a logger_plugin.

View file

@ -1 +0,0 @@
* Fixed bug with our CPE matching process. UTM.app was matching to the wrong CPE.

View file

@ -1 +0,0 @@
# Fixed an issue where fleet would send invalid usage stats if no hosts were enrolled

View file

@ -1 +0,0 @@
* UI allows for filtering low disk space hosts by platform!

View file

@ -1 +0,0 @@
- Fix software filter when software does not have a version number

View file

@ -1,2 +0,0 @@
* Use the MSRC security bulletins to scan for Windows vulnerabilities. Detected vulnerabilities are
inserted in a new table, 'operating_system_vulnerabilities'.

View file

@ -1 +0,0 @@
* Improve database usage to prevent some deadlocks

View file

@ -1,5 +0,0 @@
Improve ingress resource by replacing the template with a most recent version, that enables:
- Not having any annotation hardcoded, all annotations are optional.
- Custom path, as of now it was hardcoded to `/*`, but depending on the ingress controller, it can require an extra annotation to work with regular expressions.
- Specify ingressClassName, as it was hardcoded to `gce`, and this is a setting that might be different on each cluster.

View file

@ -1 +0,0 @@
- add UI polish and style fixes for query pages

View file

@ -1 +0,0 @@
* Added ingestion of disk encryption status for hosts, and added that flag in the response of the `GET /hosts/{id}` API endpoint.

View file

@ -1 +0,0 @@
* Improve host detail query to populate primary ip and mac address on host.

View file

@ -1,2 +0,0 @@
- Host details page includes information about the host's disk encryption
- Information surfaced to device user includes all summary/about information surfaced in host details page

View file

@ -1 +0,0 @@
- add passed policies column on the inherited policies table for teams

View file

@ -1 +0,0 @@
* Added preview screenshots for Jira and Zendesk vulnerability tickets for Premium users.

View file

@ -1 +0,0 @@
* Added vulnerability scores to Jira and Zendesk integrations for Fleet Premium users.

View file

@ -1 +0,0 @@
* Activity feed includes editing team config file using fleetctl

View file

@ -1 +0,0 @@
* Added validation of unknown keys for the Apply Teams Spec request payload (`POST /spec/teams` endpoint).

View file

@ -1,3 +0,0 @@
- Added ingestion of host orbit version from `orbit_info` osquery extension table.
- Added number of hosts enrolled by orbit version to usage statistics payload.
- Added number of hosts enrolled by osquery version to usage statistics payload.

View file

@ -1 +0,0 @@
- Add option to show public IP address in Hosts table

View file

@ -1 +0,0 @@
- add tooling for writing integration tests on the frontend

View file

@ -1 +0,0 @@
- When submitting invalid agent options, inform user how to override agent options using fleetctl force flag

View file

@ -1 +0,0 @@
- Fixed bug where password reset token expiration was not enforced

View file

@ -1 +0,0 @@
* Trying to add a host with 0 enroll secrets directs user to manage enroll secrets

View file

@ -1 +0,0 @@
* Fixed a bug in `fleetctl apply` for teams, where a missing `agent_options` key in the YAML spec file would clear the existing agent options for the team (now it leaves it unchanged). If the key is present but empty, then it clears the agent options.

View file

@ -1 +0,0 @@
* Added arch and linuxmint to list of linux distros so that their data is displayed and host count includes them

View file

@ -1 +0,0 @@
- styling updates on login and forgot password pages

View file

@ -1 +0,0 @@
* Cleanup dashboard styling

View file

@ -1 +0,0 @@
* Update colors, issues icon

View file

@ -1 +0,0 @@
* Styling improvements to App Settings page

View file

@ -1 +0,0 @@
* Update styling of tooltips and modals

View file

@ -1 +0,0 @@
* Select targets pages implements cleaner icons

View file

@ -1 +0,0 @@
- fix host details page so munki card only shows for mac hosts

View file

@ -1 +0,0 @@
* Fixed validation of agent options where valid options were being rejected (such as `exclude_paths`).

View file

@ -1 +0,0 @@
- change/fix styles for code editor gutter and query side panel table dropdown

View file

@ -1 +0,0 @@
* Update Go to 1.19.3

View file

@ -2,7 +2,7 @@
# All settings related to how Fleet is deployed in Kubernetes
hostName: fleet.localhost
replicas: 3 # The number of Fleet instances to deploy
imageTag: v4.22.1 # Version of Fleet to deploy
imageTag: v4.23.0 # Version of Fleet to deploy
podAnnotations: {} # Additional annotations to add to the Fleet pod
serviceAccountAnnotations: {} # Additional annotations to add to the Fleet service account
resources:

View file

@ -264,7 +264,7 @@ spec:
spec:
containers:
- name: fleet
image: fleetdm/fleet:4.22.1
image: fleetdm/fleet:4.23.0
env:
# if running Fleet behind external ingress controller that terminates TLS
- name: FLEET_SERVER_TLS

View file

@ -56,7 +56,7 @@ variable "database_name" {
variable "fleet_image" {
description = "the name of the container image to run"
default = "fleetdm/fleet:v4.22.1"
default = "fleetdm/fleet:v4.23.0"
}
variable "software_inventory" {

View file

@ -68,5 +68,5 @@ variable "redis_mem" {
}
variable "image" {
default = "fleet:v4.22.1"
default = "fleet:v4.23.0"
}

View file

@ -1,6 +1,6 @@
{
"name": "fleetctl",
"version": "v4.22.1",
"version": "v4.23.0",
"description": "Installer for the fleetctl CLI tool",
"bin": {
"fleetctl": "./run.js"