Commit graph

2411 commits

Author SHA1 Message Date
Tomas Touceda
11dff7ca92
Issue 1588 allow disabling host users (#1611)
* Allow users to disable host_users

* Add missing files

* Address review comments

* Fix tests

* Check additional queries for nil, not the whole hostsettings

* Finally fix tests
2021-08-11 14:56:11 -03:00
Tomas Touceda
c781058617
Fix build, add missing tests for cpe translations (#1631)
* Fix build, add missing tests for cpe translations

Also dont fail alltogether if there's one issue translating CPEs, log it and continue

* Make it once every hour again

* Use MATCH but escape strings
2021-08-11 14:52:09 -03:00
Tomas Touceda
cf6f2152b6
Document vulnerability processing configuration (#1616)
* Document vulnerability processing configuration

* Fix review comments
2021-08-11 13:42:16 -03:00
Zach Wasserman
740ba7bc25
Remove duplicate registration of results handler (#1605) 2021-08-11 09:39:47 -07:00
RachelElysia
9ac3dcd1e7
Fix transfer sort issue by passing sortBy to loadAll (#1630) 2021-08-11 12:18:31 -04:00
noahtalerman
63e598e595
API documentation for "filter hosts by team" (#1510) 2021-08-11 11:14:59 -04:00
Benjamin Edwards
8bdad712d8
add team_id filter to fleetctl & api (#1596)
* add team_id filter to fleetctl via get hosts --team flag & api via api/v1/fleet/hosts and api/v1/fleet/labels/id/hosts

* update tests & add changes file
2021-08-11 10:40:56 -04:00
RachelElysia
3b4bbf8f8e
Frontend Spiffier: Capitalize MIA (#1623) 2021-08-11 10:08:32 -04:00
Tomas Touceda
989e638cc0
Make creating dirs and files more secure by checking permissions (#1566)
* Add safe mkdirall and open

* Use secure as much as possible and merge gomodules for orbit to fleet

* Improve openfile and mkdirall to check for permissiveness instead of equality

* Don't shift

* Fix links

* Address review comments
2021-08-11 11:02:22 -03:00
Mike Thomas
41e8ab271c
Update Ask-questions-about-your-devices.md (#1575)
Checked and fixed a couple of typos here and there, and made some edits to some of the sentence structure to improve the flow, and to soften the tone a bit.
2021-08-11 12:15:49 +09:00
RachelElysia
7425aa93c9
Create/Edit Scheduled Query Modal: Config destination help bubble (#1587)
* Render logging information in UI
2021-08-10 18:53:47 -04:00
gillespi314
fce0f16c25
ManageQueriesPage: Table loading state
Improve UI handling of queries loading state in ManageQueriesPage
2021-08-10 16:54:21 -05:00
Tomas Touceda
d51493274d
Issue 1570 stats perf (#1598)
* Dont delete pack stats before inserting new ones to prevent deadlocks

* Remove fk for scheduled_query_stats

* Remove fk removal

* Fix tests

* Remove unneeded comment
2021-08-10 18:17:06 -03:00
gillespi314
0dccfad032
Add new feature: filter hosts by team (#1592)
Add new dropdown on ManageHostsPage to filter hosts by team
2021-08-10 14:24:13 -05:00
RachelElysia
267b7343e1
Manage Packs Page: Refactor to typescript, functional components, new UI (#1567)
* Refactor ManagePacksPage as functional component in TypeScript
* Refactor old table using TableContainer component
* Add Enable, Disable buttons to DataTable component
* Update Packs interface with additional properties
* Update Cypress e2e tests
2021-08-10 14:25:34 -04:00
Benjamin Edwards
29611d8377
modify packs api to filter non-empty pack_type from response (#1558)
* modify packs api to filter non-empty pack_type from response
* change list packs store method to allow filtering for "system-level" packs, by default the api filters these packs from being returned
* add changes file
* don't allow modifications to global or team packs via apply spec
* refactor to use PackListOptions
2021-08-10 09:43:27 -04:00
Zach Wasserman
a29844120b
Fix live query for observers (#1603)
Set observer can run when performing authz check for live query results.

Final backend fix for #1515
2021-08-09 19:30:17 -07:00
Zach Wasserman
6a1b82f52f
Add yarn install to Windows instructions (#1606) 2021-08-09 18:21:42 -07:00
Zach Wasserman
1b393a7cf1
Fix flaky E2E test (#1604)
Due to https://github.com/cypress-io/cypress/issues/7306, we need to use
`force: true` in many places to avoid flakiness in Cypress tests.
2021-08-09 18:18:04 -07:00
gillespi314
4eee9af856
Observers can run live query (#1590)
Add query_id to Fleet.entities.query
Add query_id to onRunQuery method for QueryPage
Reroute onRunQuery error
2021-08-09 19:53:56 -05:00
RachelElysia
7e74fed006
Cannot refetch or query MIA hosts (#1595) 2021-08-09 19:03:05 -04:00
RachelElysia
e99dee52ec
Spiffier activity feed with line (#1594) 2021-08-09 16:53:41 -04:00
Tomas Touceda
5b5dca32e9
Add more checks to observers running queries (#1589)
* Add more checks to observers running queries

* Fix test

* Use proper authorize policy instead of doing it by hand
2021-08-09 14:38:06 -03:00
Zach Wasserman
e8652dfc42
Improve handling of empty passphrase and initialized updates repo (#1538)
- Prevent usage of initialized keys.
- Reject empty passphrase.
- Add testing for updates commands.
2021-08-09 10:31:04 -07:00
Zach Wasserman
08c51af248
Improve usage analytics configuration UX (#1585)
- Add sidebar link to correct config section.
- Update example identifier to match actual generated identifiers
2021-08-09 09:51:09 -07:00
RachelElysia
8e6f04d7c5
Spiffier buttons in UI (#1583) 2021-08-09 12:38:13 -04:00
Zach Wasserman
d0bb320278
Cleanup unused FetchPEM function (#1586) 2021-08-09 09:32:32 -07:00
Martavis Parker
672db9e2a7
Host Status Dropdown (#1556)
* #1372 created dropdown for status

* #1372 fixed default state for dropdown

* #1372 added help text and styling

* clean up

* fixed linting

* created changes log

* fixed e2e test

* created new header

* clean up

* added logic to edit and delete label using icons

* reworked selectedFilter to support status & label

* fixed multiple params in url

* comment clean up

* fixed tests

* linting fixes

* fixed height of status dropdown

* bug fix for selecting status 1st, label 2nd

* fixed e2e test

* minor style fix for side panel label scroll

* fixed label e2e test

* removed SQL editor for label selection

* removed edit and delete for platform labels

* fixed bugs loading hosts for every label click

* fixed linting

* fixed basic e2e test

* fixed observer basic e2e test

* modified changes file

* fixed bug with label replacement logic for url
2021-08-06 15:09:49 -07:00
Tomas Touceda
93a10e6f94
Expose vulnerabilities data in host software data (#1555)
* Expose vulnerabilities data in host software data

* Gather cves and software in one query

* Expand the test to cover all cases

* Make test less flaky
2021-08-06 14:04:37 -03:00
Zach Wasserman
ce89d851af
Update semgrep configuration (#1581)
- Disable sarif generation (may have been causing bug in Semgrep).
- Enable manual workflow dispatch.
2021-08-06 10:02:45 -07:00
Tomas Touceda
e63e690fdb
Timeout after 30 seconds when posting usage analytics (#1577) 2021-08-06 13:20:59 -03:00
Tomas Touceda
084fcdfec4
Disallow target ids null altogether (#1578) 2021-08-06 13:20:45 -03:00
Lars Lehtonen
d53a43ad68
cmd/cpe: fix dropped error (#1563) 2021-08-06 12:51:30 -03:00
Zach Wasserman
9db49a1128
Update JWT library to github.com/golang-jwt/jwt (#1568)
- The former repo has been migrated (see
  https://github.com/dgrijalva/jwt-go/issues/462).

- Dependabot alerted on a security issue in the old
  version (https://github.com/advisories/GHSA-w73w-5m7g-f7qc). This issue
  should not effect Fleet due to no use of `aud` claims.
2021-08-06 08:49:38 -07:00
Tomas Touceda
ccd52985ac
Add Team Schedule documentation (#1576)
* Add Team Schedule documentation

* Update docs/1-Using-Fleet/3-REST-API.md

Co-authored-by: noahtalerman <47070608+noahtalerman@users.noreply.github.com>

Co-authored-by: noahtalerman <47070608+noahtalerman@users.noreply.github.com>
2021-08-06 11:19:20 -03:00
Mike McNeil
9eac51c766
Fix Fleetbot zombie comment notifications (#1573) 2021-08-06 03:12:36 -05:00
Mike McNeil
00f30c1e84
Fleetbot (#1572)
* Move usage analytics action for the sake of convention

* followup to ed4a500e15 to fix policy mapping

* Add stub of webhook handler for GitHub bot (at this point, a mostly-verbatim copy paste of sailsbot -- will work backwards from this to what we actually need in Fleet)

* Everyone can follow the same rules.  Except bots.  And Noah.

* same as 5c97f47eff

* replace a separate, explicit check for "sailsbot"

* Comment out stuff Fleet is not using for the foreseeable future

* use Fleet's green label color (could switch to "+" prefix as well, just would require tweaking)
2021-08-06 02:52:02 -05:00
Mike Thomas
1c94a5259c
Add social proof (#1537) 2021-08-06 14:43:16 +09:00
Zach Wasserman
b1fb520a1d
Add semgrep scanning configuration (#1571)
Runs a nightly semgrep scan.
2021-08-05 18:23:58 -07:00
Tomas Touceda
0d305537cf
Merge pull request #1554 from fleetdm/add-orbit-with-history
Add orbit with history
2021-08-05 16:54:10 -03:00
Tomas Touceda
3b67366bf4
Allow filtering by status as well as label and match query when listing hosts (#1562) 2021-08-05 14:56:29 -03:00
Tomas Touceda
b927f7064d Fix workflows 2021-08-05 13:16:49 -03:00
RachelElysia
bf57121c04
Team Schedules - New Feature! (#1550)
* Basic Tier users have access to Team Schedules in the UI
2021-08-05 10:48:00 -04:00
Mike Thomas
574046c3d9
Update README.md
Changed 50,000+ servers to 100,000+.
2021-08-05 18:16:51 +09:00
Tomas Touceda
f8b7a83cc6
Process stored CPEs and store found CVEs (#1533)
* WIP

* WIP

* Make path optional and fix tests

* Add first generate

* Move to nvd package

* remove replace

* Re-add replace

* It's path, not file name

* Change how db path is set and use etag

* Fix typos

* Make db generation faster

* Remove quotes

* Doesn't like comments

* Samitize etag and save to file

* Refactor some things and improve writing of etagenv

* Compress file and truncate amount of items for faster testing

* Remove quotes

* Try to improve performance

* Ignore truncate error if not exists

* Minor cleanup and make sqlite have cpe prefix

* Simplify code and test sync

* Add VCR for sync test

* Check for nvdRelease nil

* Add test for the actual translation

* Address review comments

* Rename generate command because we'll have a cve one too

* Move to its own dir

* Add first cve db generation

* WIP but with final strategy, preparring to merge main

* Fix merge conflicts

* WIP

* wip

* Insert CVEs to the db

* Remove unused code

* Use wg instead of counting

* Call cancelFunc to avoid ctx leak

* Fix logs for better readability

* Point code to fleetdm instead of my repo
2021-08-04 18:01:39 -03:00
Tomas Touceda
659066819a Fix dead link 2021-08-04 17:03:36 -03:00
Tomas Touceda
4fe6b2c67d No need to login to docker hub for orbit 2021-08-04 17:00:19 -03:00
Tomas Touceda
9b9407a16d Update workflows 2021-08-04 17:00:19 -03:00
Tomas Touceda
08d9670683 Update .goreleaser.yml 2021-08-04 17:00:13 -03:00
Tomas Touceda
3ac8494d23 Add 'orbit/' from commit 'ab3047bb39f1e2be331d1ff18b4eb768619033c4'
git-subtree-dir: orbit
git-subtree-mainline: d5974aad97
git-subtree-split: ab3047bb39
2021-08-04 16:58:25 -03:00