Commit graph

11537 commits

Author SHA1 Message Date
RachelElysia
1d34d027e3
[small unreleased bug] Fleet UI: Fix Show schema button location (#18284) 2024-04-17 13:48:48 -04:00
Lucas Manuel Rodriguez
d0b02fa985
Add sequence diagram for NVD vulnerability processing (#18216)
#17966

Better view here:
https://github.com/fleetdm/fleet/blob/17966-add-sequence-diagram-oncall/docs/Contributing/Vulnerability-processing.md#cpe-and-cve-data-generation-workflow

Added these docs during my oncall time (and also during the VulnCheck PR
review).

@mostlikelee Let me know if I got this right.
2024-04-17 13:28:39 -03:00
Martin Angers
d08d715e89
Fix the TestIntegrationsMDM/TestDEPProfileAssignment test. (#18367) 2024-04-17 11:06:13 -04:00
Joanne Stableford
a58d15f58a
Add link to process for ritual (#18353)
Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2024-04-17 02:40:01 -05:00
Sam Pfluger
408eb88bac
Update README.md (#18361) 2024-04-17 01:40:08 -05:00
Eric
c2f333aebb
Schema: Update schema overrides to only use one YAML block scalar (#18351)
Closes: #18240

Changes:
- Updated the schema override files to use only one YAML block scalar
(`>-`)
- Updated the template yaml included in the link to create a new
override file in get-extended-osquery-schema helper to use the `>-`
block scalar
- regenerated osquery_fleet_schema.json
2024-04-16 18:35:23 -05:00
Victor Lyuboslavsky
a5c107e082
For calendar integration, calendar event no longer created when policy has an invalid SQL query. (#18352)
For calendar integration, calendar event no longer created when policy
has an invalid SQL query.
#18350 

# Checklist for submitter
- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-04-16 16:50:22 -05:00
Eric
93a43696b4
Website: Update styles on /tables pages (#18358)
Closes: #18346

Changes:
- Updated the styles for the left sidebar on `/tables/*` pages
2024-04-16 16:46:36 -05:00
Lucas Manuel Rodriguez
4a38135ea5
Fix TestIntegrations/TestUsers flaky test (#18251)
```
--- FAIL: TestIntegrations (47.44s)
    --- FAIL: TestIntegrations/TestUsers (1.42s)
        integration_core_test.go:4198:
            	Error Trace:	/Users/tim/workspace/fleet/server/service/integration_core_test.go:4198
            	Error:      	Not equal:
            	            	expected: 0x2
            	            	actual  : 0x1
            	Test:       	TestIntegrations/TestUsers
```
2024-04-16 18:40:29 -03:00
Sam Pfluger
b747c08f35
Update receive-from-github.js (#18356)
...
2024-04-16 16:32:44 -05:00
Lucas Manuel Rodriguez
665ace580d
Add new query to workstations canary to help fleetd release verification (#18349)
To ease verification of fleetd releases #18312.
2024-04-16 18:22:28 -03:00
Luke Heath
3ef4358133
Update to Go convention and use same version defined in GitHub enviro… (#18348) 2024-04-16 16:05:37 -05:00
Jason Lewis
2518df22f0
Update open-positions.yml (#18264)
...
2024-04-16 16:00:48 -05:00
Eric
80d072f1cc
Website: remove client-side query string removal (#18336)
Changes:
- Removed the client-side browser history adjustment that was used to
clean up URLs with query strings on the /contact, /register, and
/fleetctl-preview pages.
2024-04-16 15:55:42 -05:00
George Karr
999e200992
Add feature to manage macOS software updates via DDM (#18281)
Feature branch for #17295
2024-04-16 15:18:40 -05:00
Victor Lyuboslavsky
6b2ab24aeb
Fixed fleetctl gitops dry-run validation issues when enabling calendar integration for the first time. (#18301)
#18299
Fixed fleetctl gitops dry-run validation issues when enabling calendar
integration for the first time.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-04-16 15:15:08 -05:00
Luke Heath
be455243df
Update go version to match GitHub environment variable (#18308) 2024-04-16 15:14:16 -05:00
Victor Lyuboslavsky
daba6237d2
Fixing broken "macOS - Check if latest version" policy. (#18304)
Fixing broken "macOS - Check if latest version" policy.

Co-authored-by: Luke Heath <luke@fleetdm.com>
2024-04-16 14:57:18 -05:00
Eric
2807bd6b3e
Website: update contact page personalization (#18332)
Related to: #18099
Changes:
- Updated the contact page to show a different message depending on
answers a user provided in the /start questionnaire.
- For users who have Fleet deployed already: "Schedule a personalized
demo for your team and get support or training."
- For users who have tried Fleet and are ready to deploy: "Let us help
you deploy and evaluate Fleet quickly for yourself. We’d love to save
you some time."
  -
2024-04-16 14:55:53 -05:00
Mike McNeil
b5c799b324
Update homepage.ejs (#18345) 2024-04-16 14:51:34 -05:00
Lucas Manuel Rodriguez
791ce63c73
Dogfood fleetd and osquery edge releases (#18341)
This is very handy for #18312
2024-04-16 16:01:06 -03:00
Sarah Gillespie
3ea7a4ba63
Merge branch 'main' into feat-macos-software-updates 2024-04-16 11:30:02 -05:00
Gabriel Hernandez
2fc4e520b8
add ability to create manual labels (#18303)
relates to #17031

Adds functionality to create manual labels in fleet.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Added/updated tests
- [x] M0anual QA for all new/changed functionality

---------

Co-authored-by: Martin Angers <martin.n.angers@gmail.com>
2024-04-16 17:22:08 +01:00
Jacob Shandling
de94299b65
UI – Show percentages of passing and failing hosts when a live policy run completes (#18257)
## Addresses #16500
![Screenshot 2024-04-12 at 4 11
22 PM](https://github.com/fleetdm/fleet/assets/61553566/8f1cf17c-7378-4246-8f17-6f8fe3321b54)


- [x] Changes file added for user-visible changes in `changes/`
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-04-16 09:00:23 -07:00
gillespi314
be415c1678 Merge branch 'main' into feat-macos-software-updates 2024-04-16 10:24:43 -05:00
gillespi314
754fb17064 Exclude removal operations from declarations subqueries 2024-04-16 10:21:25 -05:00
gillespi314
3b3f815a42 Merge conflicts 2024-04-16 10:20:59 -05:00
Victor Lyuboslavsky
ba6315f27a
Setting DOGFOOD_WORKSTATIONS_CANARY_CALENDAR_WEBHOOK_URL (#18298)
To fix failing gitops flow.

Related to https://github.com/fleetdm/confidential/issues/6015

Needs DOGFOOD_WORKSTATIONS_CANARY_CALENDAR_WEBHOOK_URL GitHub secret if
not set already.
2024-04-16 10:19:58 -05:00
Dante Catalfamo
48036577eb
Interpret windows exit codes as a signed integer (#18282)
#17695

The windows exit code is a 32-bit unsigned integer, but the command
interpreter treats it like a signed integer. When a process is killed,
it returns 0xFFFFFFFF (interpreted as -1). We convert the integer to an
signed 32-bit integer to flip it to a -1 to match our expectations, and
fit in our db column.

https://en.wikipedia.org/wiki/Exit_status#Windows

FIxed on both the client and server side.
2024-04-16 10:53:50 -04:00
RachelElysia
6b3b159827
[Unreleased bug and Unit tests] Test all disabled dropdown options on host actions dropdown (#18231) 2024-04-16 10:48:40 -04:00
RachelElysia
41ef4e3ac0
[Small released styling bugs] Fleet UI: Fix last activity's styling (#18279) 2024-04-16 10:43:06 -04:00
Victor Lyuboslavsky
f58947012b
In fleetctl debug db-locks and fleetctl debug db-innodb-status, fixed 500 errors (#18285) 2024-04-16 07:52:03 -05:00
Lucas Manuel Rodriguez
a86da9f74b
Fix enroll request retry in osquery-perf (#18227)
This was discovered by @xpkoala while performing a load test for the
calendar backoff feature.

Some enroll requests were failing due to enrolling hosts too fast (`-var
loadtest_containers` from `0` to `40` at once), and osquery-perf had a
bug in the enroll request where the `bytes.Buffer` was being incorrectly
reused thus sending an empty body on the enroll retries, getting 400s
from Fleet due to `Expected JSON Body`:
```
2024/04/11 18:57:49 request failed: 400
```
2024-04-16 08:39:34 -03:00
Lucas Manuel Rodriguez
e7f61305a9
New APIs to add/remove manual labels to/from a host (#18283)
#16767

To create a manual label:
```sh
cat labels.yml
---
apiVersion: v1
kind: label
spec:
  name: Manually Managed Example
  label_membership_type: manual
  hosts:
    - lucass-macbook-pro.local
```

To add/delete a manual label to/from a host:
```
curl -k -v -X POST -H "Authorization: Bearer $TEST_TOKEN" https://localhost:8080/api/latest/fleet/hosts/1/labels -d '{"labels": ["Manually Managed Example"]}'

curl -k -v -X DELETE -H "Authorization: Bearer $TEST_TOKEN" https://localhost:8080/api/latest/fleet/hosts/1/labels -d '{"labels": ["Manually Managed Example"]}'
```

API draft changes: https://github.com/fleetdm/fleet/pull/16979/files
Figma with error strings:
https://www.figma.com/file/JiWoAiuHlkt76s3o3Uyz6h/%2316767-API-endpoint-for-updating-a-host's-manual-labels?type=design&node-id=2-130&mode=design&t=pxRPhrn6E1bOCrEd-0

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [X] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
~- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.~
- [X] Added/updated tests
- ~[ ] If database migrations are included, checked table schema to
confirm autoupdate~
- ~For database migrations:~
- ~[ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.~
- ~[ ] Confirmed that updating the timestamps is acceptable, and will
not cause unwanted side effects.~
- ~[ ] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).~
- [x] Manual QA for all new/changed functionality
  - ~For Orbit and Fleet Desktop changes:~
- ~[ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.~
- ~[ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).~
2024-04-16 06:37:58 -03:00
Drew Baker
b45079e261
Add lead follow up to communications (#17237) 2024-04-15 20:11:30 -05:00
Eric
5692598143
Website: update guaranteed locals in custom hook (#18296)
Closes: #18295

Changes:
- Updated the custom hook to set `res.locals` for HEAD requests to
prevent 500 errors when a request is sent to a page that references
`res.locals.me`
2024-04-15 19:51:50 -05:00
Eric
5311aec0fe
Website: Add calendar section to homepage (#18209)
Closes: https://github.com/fleetdm/confidential/issues/6059

Changes:
- Updated the layout and styles of the homepage to match the latest
wireframes.


@mike-j-thomas I'm creating this as a draft PR so you can review the
changes while I set up the Salesforce integration.

---------

Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
2024-04-15 18:09:16 -05:00
Rachael Shaw
160448f7d3
Add spaces after emojis in team names (#18249)
Kind of a silly PR 😅 
The team names used to have spaces after the emojis and I thought it
looked a little more polished 💅
2024-04-15 17:52:15 -05:00
Luke Heath
04e88afba4
Add myself to codeowners for /it-and-security/ as a fallback approver (#18292) 2024-04-15 17:49:28 -05:00
Luke Heath
79fbc00647
As of Go 1.21, toolchain versions must use the 1.N.P syntax (#18288) 2024-04-15 17:29:03 -05:00
Tim Lee
46f7b6b043
Add Failing Policy Counts to Health API (#17758) 2024-04-15 16:14:21 -06:00
Martin Angers
775fa70c53
Fix Apple profile upload error message when identifier is a duplicate. (#18272)
#18081 

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] Manual QA for all new/changed functionality
2024-04-15 16:50:14 -05:00
George Karr
fa5e224a4a
Add feature to resend MDM configuration profiles (#18280)
Includes PRs #18111, #18212, and #18271
2024-04-15 16:48:42 -05:00
Sam Pfluger
1cc76c7cec
Fixed label (#18286)
cc @JoStableford
2024-04-15 16:10:11 -05:00
Sarah Gillespie
9897649696
Update osquery-perf with DDM functionality (#18273) 2024-04-15 15:56:25 -05:00
dependabot[bot]
8b9099717d
Bump tar from 6.1.11 to 6.2.1 in /tools/fleetctl-npm (#18179) 2024-04-15 15:44:54 -05:00
Martin Angers
47279ca2a9 Fix conflicts 2024-04-15 16:10:10 -04:00
Sarah Gillespie
ecdcb7c2fb
Add activity item for resend configuration profile (#18271) 2024-04-15 14:18:09 -05:00
Joanne Stableford
9703711c24
Update receive-from-github.js (#18261) 2024-04-15 14:18:04 -05:00
Tim Lee
8194b6e379
Optimize cve/generate to use last release (#18269) 2024-04-15 13:17:28 -06:00