Commit graph

224 commits

Author SHA1 Message Date
George Karr
ea4ca5b948
Adding changes for Fleet v4.83.2 (#43495)
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **Chores**
* Released patch version v4.83.2 with updated Helm chart and application
metadata.
* Updated deployment configurations to use the latest container image
version across cloud providers.
  * Updated published package version to v4.83.2.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->

---------

Co-authored-by: Luke Heath <luke@fleetdm.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
2026-04-17 12:26:30 -05:00
George Karr
b4a3e975f5
Adding changes for Fleet v4.83.1 (#43357)
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **Chores**
* Released patch v4.83.1: updated chart and app metadata, container
image tags, Terraform deployment defaults, and npm package version to
v4.83.1.
* **Documentation**
  * Updated CLI help/example to reference the v4.83.1 milestone.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-04-13 12:17:18 -05:00
Luke Heath
57ea93859d
Adding changes for Fleet v4.83.0 (#41764) (#42819) 2026-04-01 12:00:18 -05:00
George Karr
d39578eb16
Adding changes for Fleet v4.82.2 (#42417) 2026-03-30 12:09:58 -05:00
George Karr
a4b5e56591
Adding changes for Fleet v4.82.1 (#41842) 2026-03-25 13:50:24 -05:00
Luke Heath
be1df61ffb
Adding changes for Fleet v4.82.0 (#40233) (#41637) 2026-03-13 09:42:29 -05:00
George Karr
37c4497f61
Adding changes for Fleet v4.81.2 (#41127) 2026-03-10 10:31:48 -05:00
George Karr
4241585c31
Adding changes for Fleet v4.81.1 (#40705)
Co-authored-by: Ian Littman <iansltx@gmail.com>
2026-03-03 10:01:15 -06:00
Luke Heath
aba5efbec1
update changelog prepare 4.81.0 (#40225) (#40227) 2026-02-20 16:39:34 -06:00
Jorge Falcon
19cdbf940d
Fleet Helm Chart - Additional CA support (#39651)
- Increments Helm chart to `6.8.0`
- Adds Fleet Helm chart support for adding additional CA certificates to
the Fleet container's trust store
- Allows adding additional CA certificates stored in kubernetes secrets
and kubernetes config maps to
    - Fleet pods
    - Fleet vulnerability processing pods
2026-02-11 15:59:19 -05:00
George Karr
d105fc5929
Adding changes for Fleet v4.80.1 (#39486) 2026-02-10 09:32:21 -06:00
Luke Heath
6e9d46202e
Adding changes for Fleet v4.80.0 (#38255) (#39217) 2026-02-03 08:38:20 -06:00
George Karr
68452b8a1d
Adding changes for Fleet v4.79.1 (#38487) 2026-01-21 12:18:49 -06:00
Luke Heath
d0fd8e06e9
update main 4.79.0 changes (#38253) 2026-01-13 14:12:17 -06:00
George Karr
c2a913a4c7
Adding changes for Fleet v4.78.3 (#38201) 2026-01-13 14:01:48 -06:00
George Karr
d820f800c6
Adding changes for Fleet v4.78.2 (#38150) 2026-01-10 21:24:15 -06:00
George Karr
dc5f1cb753
Adding changes for Fleet v4.78.1 (#37874)
Co-authored-by: Luke Heath <luke@fleetdm.com>
2026-01-06 16:54:45 -06:00
Luke Heath
8648105fe3
Adding changes for Fleet v4.78.0 (#36813) (#37584) 2025-12-19 17:25:22 -06:00
t0x01
02fcaf46bc
helm: Add namespace for ingress and revisionHistoryLimit for deployment (#37392)
- Bump helm chart version to v6.7.4
- Add `metadata.namespace` to the ingress template to ensure that
ingress is deployed in the same namespace as all other resources
- Add `spec.revisionHistoryLimit` to the deployment template
(`.Values.revisionHistoryLimit`)

Signed-off-by: t0x01 <T0x01@protonmail.ch>
2025-12-17 16:29:42 -05:00
Luke Heath
70ab8c2925
Adding changes for Fleet v4.77.0 (#35382) (#36614) 2025-12-08 16:32:47 -06:00
George Karr
ca5d02d471
Adding changes for Fleet v4.76.1 (#35760) 2025-11-18 14:35:31 -06:00
Jorge Falcon
8145323e80
Incrementing Fleet helm chart release version from 6.7.0 to 6.7.1 (#35520)
- Increments Fleet helm chart version from `6.7.0` to `6.7.1`
2025-11-11 11:46:15 -05:00
Luke Heath
0056d36d81
Adding changes for Fleet v4.76.0 (#34486) (#35380) 2025-11-07 19:19:12 -06:00
Jorge Falcon
045d79ea67
Helm chart updates - carving and softwareinstallers region support (#34563)
- Bumps helm chart version to v6.7.0
- Adds s3 softwareinstallers region
(`.Values.fleet.softwareinstallers.s3.region`)
- Adds s3 carving region (`.Values.fleet.carving.s3.region`)
2025-10-22 16:34:17 -04:00
George Karr
304d581d87
Adding changes for Fleet v4.75.1 (#34571) 2025-10-22 10:11:58 -05:00
Luke Heath
2c8ae8cc78
Adding changes for Fleet v4.75.0 (#33583) (#34483) 2025-10-17 21:51:17 -05:00
George Karr
dcefbc4efa
Adding changes for Fleet v4.74.1 (#34227) 2025-10-15 10:00:27 -05:00
George Karr
651fdfb7e9
Adding changes for Fleet v4.73.4 (#33673) 2025-10-02 16:12:24 -05:00
Luke Heath
53b3479d94
Prepare Fleet v4.74.0 (#33579) 2025-09-29 13:27:42 -05:00
Luke Heath
437a1f563c
Prepare Fleet v4.73.3 (#33527) (#33575) 2025-09-29 12:23:36 -05:00
George Karr
611cf8cc2b
Adding changes for Fleet v4.73.2 (#33118)
Co-authored-by: Luke Heath <luke@fleetdm.com>
2025-09-24 08:02:17 -05:00
George Karr
a81b0b868e
Adding changes for Fleet v4.73.1 (#32889) (#33116) 2025-09-17 10:38:19 -05:00
Luke Heath
7a6f57bc36
update main 4.72.1 4.73.0 (#32755) 2025-09-11 22:00:41 -05:00
George Karr
ecc173deeb
Adding changes for Fleet v4.72.0 (#31273) (#31975) 2025-08-15 12:31:18 -05:00
Daniel Seifert
2e47a03128
Fix Comment in Helm Charts values.yaml (#31854) 2025-08-13 07:52:15 -05:00
George Karr
7d8f17f53a
gkarr update changelog (#31585)
- **Adding changes for Fleet v4.71.1 (#31531)**
- **updating changelog**
2025-08-04 15:41:10 -05:00
Luke Heath
99a0217db6
Adding changes for Fleet v4.71.0 (#30599) (#31198) 2025-07-23 16:04:33 -06:00
George Karr
39e381be96
Adding changes for Fleet v4.70.1 (#30606) (#30733)
Co-authored-by: Dante Catalfamo
<43040593+dantecatalfamo@users.noreply.github.com>

Co-authored-by: Dante Catalfamo <43040593+dantecatalfamo@users.noreply.github.com>
2025-07-10 10:57:37 -05:00
Jorge Falcon
93279befef
Incrementing Helm chart (6.6.8) and Fleet version in Helm chart (4.70.0) (#30454)
- Incrementing Helm chart to 6.6.8
- Incrementing Fleet version to 4.70.0 in Helm chart
2025-07-01 11:20:52 -04:00
Mohamed Aziz Khayati
324a40d28c
Support more helm environment variables (#30451)
## Summary
This PR adds support for Windows MDM WSTEP (Simple Certificate
Enrollment Protocol) identity certificates and fixes S3 configuration
for carving and software installers in the Fleet Helm chart.

## Changes

### Windows MDM WSTEP Support
- **Deployment Template (`charts/fleet/templates/deployment.yaml`)**:
- Added `FLEET_MDM_WINDOWS_WSTEP_IDENTITY_CERT_BYTES` environment
variable
- Added `FLEET_MDM_WINDOWS_WSTEP_IDENTITY_KEY_BYTES` environment
variable
- Both variables load certificate data from Kubernetes secrets using
`valueFrom.secretKeyRef`
- Added conditional logic to only set variables when
`fleet.mdm.windows.wstepIdentityCertKey` is non-empty

- **Values Configuration (`charts/fleet/values.yaml`)**:
  - Added `fleet.mdm.windows.wstepIdentityCertKey: ""` configuration key
  - Added `fleet.mdm.windows.wstepIdentityKeyKey: ""` configuration key
  - Both default to empty strings for backward compatibility

### S3 Configuration Fixes
- **Fixed S3 support for custom buckets**: Added support for S3 Endpoint
URL & Force S3 Path style environemtal variables.
- **Added S3 support for software installers**: Added complete S3
configuration structure under `fleet.softwareInstallers.s3`

## Configuration

### Windows MDM WSTEP
```yaml
fleet:  # New
  mdm:
    windows:
      wstepIdentityCertKey: "wstep-identity-cert"  # Secret key containing the certificate
      wstepIdentityKeyKey: "wstep-identity-key"    # Secret key containing the private key
  
fleet:
  carving:
    s3:
      ...
      endpointURL: ""  # New
      forceS3PathStyle: false  # New

  softwareInstallers: # New
    s3:
      bucketName: "fleet-installers-bucket"
      prefix: "installers/"
      accessKeyID: "your-access-key"
      secretKey: "software-installers"
      endpointURL: ""
      forceS3PathStyle: false
      stsAssumeRoleARN: ""
```
2025-07-01 10:19:37 -04:00
Jorge Falcon
bc08109ff1
Helm Chart - MySQL Read Replica environment variable support (#30099)
- Added support for configuring read only replicas via values.yaml
- Added support for read only replica environment variables in
deployment.yaml and cron-vulnprocessing.yaml
2025-06-18 15:45:54 -04:00
Luke Heath
653291c6b4
Prepare Fleet v4.69.0 (#30024) 2025-06-16 10:43:20 -05:00
Jorge Falcon
5ae5897e51
Adding/Modifying Fleet helm chart to include additional labels for deployment and selector labels for service (#29828)
Closes #29710 

- Added label `component: fleet-server` to deployment.yaml under labels
and matchLabels
- Added label `component: fleet-server` to service.yaml under selector
2025-06-09 10:53:44 -04:00
George Karr
dd78f230b8
Adding changes for Fleet v4.68.1 (#29705)
Co-authored-by: Jorge Falcon <22119513+BCTBB@users.noreply.github.com>
2025-06-06 09:06:33 -05:00
Jorge Falcon
88296aee24
Incrementing Helm Chart versions (#29713)
- Incrementing fleet/Chart.yaml version 6.6.3 -> 6.6.4
- Incrementing tuf/Chart.yaml version 0.1.0 -> 0.1.1
2025-06-03 11:00:52 -04:00
Oleksandr Palamarchuk
4a411c3703
Set empty TLS secrets by default instead of referencing non-existent ones from the config (#29688)
This change fixes nginx errors regarding non-existent config:

e.g.:
```
W0602 09:49:37.725821       7 controller.go:1720] Error getting SSL certificate "fleetdm/chart-example-tls": local SSL certificate fleetdm/chart-example-tls was not found
```

```
➜  ~ k describe ingress fleetdm -n fleetdm
Name:             fleetdm
....
Ingress Class:    nginx
Default backend:  <default>
TLS:
  chart-example-tls terminates chart-example.local
Rules:
```

This approach is simpler than requiring everyone to set tls: [] in their
values file.
2025-06-03 10:22:57 -04:00
Jorge Falcon
96cb81666a
Check if runAsUser and/or runAsGroup are not supplied in In Fleet Helm Chart Values (#29588)
Add logic around runAsUser and runAsGroup to Fleet Helm Chart
- Resolves #29460 
- Added to deployment, migration, and cronjob for vulnprocessing.
2025-05-29 14:32:30 -04:00
Luke Heath
45742e946f
Adding changes for Fleet v4.68.0 (#28800) 2025-05-22 11:47:40 -05:00
Luke Heath
c247a2b784
Prepare Fleet v4.67.3 (#28883) 2025-05-06 15:29:34 -05:00
Phillip Boushy
157c9a8405
Add imagePullSecrets option to Helm Chart (#28783)
- Resolves #28776
- Includes example in values.yaml
- Added to deployment, migration, and cronjob for vulnprocessing

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [ ] Manual QA for all new/changed functionality

---------

Co-authored-by: Robert Fairburn <8029478+rfairburn@users.noreply.github.com>
2025-05-02 17:56:42 -05:00