Commit graph

2630 commits

Author SHA1 Message Date
Jonathan Katz
b8d2ba371e
Update replica db setup and guide (#36918)
**Related issue:** Resolves #35937
Changes:
- Fix `make db-replica-setup`
- mention the tool in
`docs/contributing/getting-started/testing-and-local-development.md`.
2025-12-08 17:07:04 -05:00
Steven Palmesano
7fb0ab105a
Windows MDM migration notification (#36525)
Related to https://github.com/fleetdm/confidential/issues/12925

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2025-12-08 14:10:46 -06:00
Josh Roskos
ed17e84d05
Update SSO configuration paths in documentation (#36894)
Updates from customer call today: 
  - Updated image to reference `Fleet users` callback URL
  - Updated *Fleet configuration* instructions for UI changes
2025-12-08 14:04:49 -06:00
Victor Lyuboslavsky
103d537dc5
Change status to delivered in flowchart. (#36800)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #36795
2025-12-08 10:07:32 -06:00
Victor Lyuboslavsky
321ed1dc12
Update MySQL versions we test with to 8.4.7 and 9.5.0 (#36803)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #36801

Test and docs changes only.

Passing 8.4.7 tests in this workflow run:
https://github.com/fleetdm/fleet/actions/runs/19978256106/job/57299389148
2025-12-08 09:12:05 -06:00
Steven Palmesano
6defeec1b9
Fix broken scep_proxy references (#36777) 2025-12-05 17:32:55 -06:00
Allen Houchins
78b4655555
Typo fix (#36730)
`self-service` is not a valid key. This should be `self_service`.
2025-12-05 17:31:30 -06:00
Victor Lyuboslavsky
b1062296c5
ADR-0007: Pilot activity bounded context (#35402) 2025-12-05 17:19:33 -06:00
Steven Palmesano
d70d8f0731
Add various restrictions profiles for Android (#36607)
Related to #34732
2025-12-05 15:32:37 -06:00
Victor Lyuboslavsky
372c29b07c
Updated Android certificates flowchart (#36538)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #34856
2025-12-05 08:12:02 -06:00
Josh Roskos
7117e6dede
Updated okta-idp-setup.png to reference correct URL (#36647)
Came up during customer interaction, updated screenshot to show what we
also include in the comment box below.
2025-12-04 16:38:27 -06:00
Noah Talerman
13fab1b5f6
MDM_ENABLE_CUSTOM_OS_UPDATES_AND_FILEVAULT is not production ready (#36674) 2025-12-04 16:37:46 -06:00
Marko Lisica
5137f6b6cd
Remove params from activities API (#36687)
This is pushed to 4.78
2025-12-04 16:02:10 -06:00
kitzy
58e254f1e4
Add Docker Compose deployment guide and configuration files (#36507)
- Add comprehensive Docker Compose deployment guide article
- Add docker-compose.yml with Fleet, MySQL, and Redis services
- Add env.example template with configuration options
- Include TLS setup options for both reverse proxy and direct TLS
- Add troubleshooting and production considerations

Resolves #33774
2025-12-04 12:11:59 -05:00
Victor Lyuboslavsky
ccd66921e7
Updating golangci-lint to 2.7.1 (#36678)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #32999

And fixing newly flagged lint issues.
2025-12-04 10:45:50 -06:00
Rachael Shaw
25191f3054
Preview of v4.77.0 doc changes (#35924)
This PR will remain in draft as a preview of upcoming documentation
changes for 4.77.0

---------

Co-authored-by: Marko Lisica <83164494+marko-lisica@users.noreply.github.com>
Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
Co-authored-by: Victor Lyuboslavsky <2685025+getvictor@users.noreply.github.com>
Co-authored-by: Ian Littman <iansltx@gmail.com>
Co-authored-by: Noah Talerman <noahtal@umich.edu>
Co-authored-by: Lucas Manuel Rodriguez <lucas@fleetdm.com>
Co-authored-by: Magnus Jensen <magnus@fleetdm.com>
Co-authored-by: Jordan Montgomery <elijah.jordan.montgomery@gmail.com>
Co-authored-by: Janis Watts <184028114+jmwatts@users.noreply.github.com>
Co-authored-by: Allen Houchins <32207388+allenhouchins@users.noreply.github.com>
Co-authored-by: Gabriel Hernandez <ghernandez345@gmail.com>
Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
Co-authored-by: Scott Gress <scottmgress@gmail.com>
Co-authored-by: Carlo <1778532+cdcme@users.noreply.github.com>
2025-12-02 17:24:15 -06:00
Steven Palmesano
e6a5aafd1f
Change "ad-hoc" to "ad hoc" (#36549)
These are two (Latin) words, they should not be hyphenated. Found
because I was trying to use command + f to search for "ad hoc," since
that's the proper spelling.
2025-12-02 15:55:43 -06:00
Martin Angers
5a8e2774bf
Feature branch: Android Setup Experience support (#35951)
Feature branch for
https://github.com/fleetdm/fleet/issues/33761#issuecomment-3548996114


---------

Co-authored-by: RachelElysia <71795832+RachelElysia@users.noreply.github.com>
2025-12-02 12:27:20 -05:00
Rachael Shaw
cb621bdfef
[UPDATED] #31719 API/YAML design (Add custom package that only contains a script) (#33648) 2025-11-26 16:43:31 -06:00
Steven Palmesano
41a933ff52
Add Linux desktop environment support to docs (#35770)
I'm not 100% sure if these are the supported desktop environments, but I
figured this PR would kick off the discussion.

Brought up during a call with `customer-cisneros`: [Gong
snippet](https://us-65885.app.gong.io/call?id=6065255196915724079&highlights=%5B%7B%22type%22%3A%22SHARE%22%2C%22from%22%3A654%2C%22to%22%3A1079%7D%5D)

[Here's](https://wiki.archlinux.org/title/Desktop_environment) the list
of desktop environments that the customer mentioned on the call to
highlight the fragmentation of the Linux world. 😆

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
2025-11-26 12:38:28 -06:00
Marko Lisica
23b60d79d5
[Docs bug] team_id is not required (#36269)
Clarified the description of the 'team_id' parameter in the API
documentation. If not set default is no team
2025-11-26 12:23:52 -06:00
Harrison Ravazzolo
22034d7983
remove duplicate smallstep section from yaml reference (#36339)
Dupe blocks of code
2025-11-26 12:23:24 -06:00
Steven Palmesano
a2327f84af
Add initial Android configuration profiles (#36227) 2025-11-25 15:32:43 -06:00
Jahziel Villasana-Espinoza
8aeb5e3dac
add display name to missing spots (#36219)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #35654 Resolves #36194

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

## Testing

- [x] Added/updated automated tests
- [x] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)

- [x] QA'd all new/changed functionality manually

For unreleased bug fixes in a release candidate, one of:

- [x] Confirmed that the fix is not expected to adversely impact load
test results
2025-11-24 18:20:39 -05:00
George Karr
8ab356a666
Fix links in Configuration README (#35538) 2025-11-24 17:11:16 -06:00
Marko Lisica
598d4babf8
Document research for Android agent app (#35094)
Related to:
- #34856
2025-11-24 12:10:40 +01:00
Scott Gress
c40f189321
Update instructions for installing golangci-lint in dev environments (#36125)
Updates the testing-and-local-development to reference the
`golangci-lint` version as of
https://github.com/fleetdm/fleet/issues/33251.
2025-11-21 10:14:15 -06:00
Steven Palmesano
03e8a35854
Fix link to Download bootstrap package (#35300) 2025-11-20 11:16:44 -06:00
Magnus Jensen
e4fbc4fb6e
Fix table of content links on Rest API page (#35348)
Fixes the outdated MDM link, and adds the missing top-level links.

_The notation for integrations `#integrations-1`, is to take the second
occurence of integrations, as we have another integrations title in the
update webhook configuration._

I can see this doesn't affect the website (or shouldn't) since it uses
it's own way to generate the TOC, but will help for manually browsing
the markdown.
2025-11-20 11:16:20 -06:00
Rachael Shaw
65fdb6ae40
API Docs: Add missing parameter in "Update configuration" (#36025)
`integrations` section was there but not linked in the main parameters
table.
2025-11-19 16:32:10 -06:00
Noah Talerman
521e8be95e
[API reference] Fix broken link (#35953) 2025-11-18 16:24:17 -06:00
Jordan Montgomery
64adfc1116
Remove new PUT endpoint, update docs for POST (#35820)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #35309 docs changes

For more context see
https://fleetdm.slack.com/archives/C019WG4GH0A/p1763137466439419

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2025-11-18 12:03:49 -06:00
Noah Talerman
6e635e7888
Delete Entra modal: Update instructions (#35874)
Deleting Microsoft Entra ID doesn't unblock end users. Instead, to
unblock, the IT admin has to disable the "Conditional Access" policy in
Entra.

Context: https://github.com/fleetdm/fleet/pull/35632/files#r2524534037
2025-11-18 06:45:24 -08:00
Victor Lyuboslavsky
a87a460de3
API changes for Okta conditional access (#35632) 2025-11-17 19:25:34 -06:00
Graham Williams
33510dc40c
Add Ubuntu Advantage Query to Library (#35680)
Adds the Ubuntu Advantage policy to the policy library that checks to see
if the file exists, and that it is attached, and expiry date has not
passed.

This can be used in combination with a script automation running `pro
attach <tokenID>`, with a tokenID configured in Fleet Variables. E.g:
`pro attach $FLEET_SECRET_UBUNTUPRO` for remediation.

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2025-11-17 10:04:16 +00:00
Noah Talerman
85cca255bf
Add setup_experience to example YAML (#35780)
- Clarify that `setup_experience` can be used for `app_store_apps` and
`fleet_maintained_apps`
2025-11-15 13:01:51 -05:00
Jordan Montgomery
98452d4827
[API/YAML] Docs for new setup experience script PUT endpoint (#35736)
API changes for #35309 

Also updates bug notes to call out fixed version.

Related PR #35651

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2025-11-14 17:47:34 -05:00
Rachael Shaw
a074498668
API design: #33758 (OS vulnerabilities bug) (#33533)
> This PR to be left in draft until bug is brought into a sprint, at
which point we'll close and re-open to the correct release branch.

Changes for the following bug:
+ https://github.com/fleetdm/fleet/issues/33758

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2025-11-14 16:58:00 -05:00
Janis Watts
ecf5c789aa
Update yaml-files.md (#35765)
Proposing that we update this language to match what actually happens if
you add a VPP app using an adamID (all platforms with that adamID are
added, along with any settings like self service categories, setup
experience, labels, etc.)
2025-11-14 13:11:11 -05:00
Marko Lisica
daae2c1c06
Update MySQL support details in Reference Architectures (#35706)
Added information about supported database setups and resource
provisioning for multiple Fleet instances.

Related to:

- #35400

We got a community member trying to install Fleet in a way we don't
test, but it's not explicitly documented that we don't support that way.
2025-11-14 11:28:44 -05:00
Jordan Moore
01298afe9c
REST API Human-device mapping table of contents correction (#35718)
Corrected REST API Documentation table of contents so that the `Update
human-device mapping` heading linked to the right location in the
document and the heading in the table of contents matches the actual
heading.
2025-11-13 17:58:36 -05:00
jacobshandling
926cdc6da0
Manually update & delete host IdP mappings (#35325)
**Related issue:** Resolves #34222 


[Demo](https://drive.google.com/file/d/1MyLlyUW8Qoad_3_FLwiMhMBbb8wJNwGk/view?usp=drive_link)

<img width="1504" height="986" alt="Screenshot 2025-11-10 at 4 45 48 PM"
src="https://github.com/user-attachments/assets/9ee80fd3-c9e7-4712-b150-11ac08c70db6"
/>

# Checklist for submitter
If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`, 
## Testing
- [x] Added/updated automated tests
- [x] QA'd all new/changed functionality manually
2025-11-13 09:05:40 -08:00
Mitch Francese
542e8ff259
Update links to example configuration profiles (#35420)
Fixing broken links in the article to point to absolute paths.

---------

Co-authored-by: Brock Walters <153771548+nonpunctual@users.noreply.github.com>
2025-11-12 15:08:18 -05:00
Noah Talerman
15f5880638
[YAML reference] Clarify variable (#34956)
IdP username is an email
2025-11-11 18:01:11 -05:00
Noah Talerman
f684118edd
YAML reference (#35546)
- Fleet supports payload-free packages for Linux (`.sh`) and Windows
(`.ps1`)
- `.ipa` coming in 4.77
2025-11-11 14:15:11 -05:00
Rachael Shaw
3135e9a0a7
#30117 API/YAML design: Require all software installs during macOS setup experience (#33016)
User story:

+ #30117
2025-11-11 10:04:05 -05:00
Rachael Shaw
86b80e28ed
Documentation v4.76.0 (#34943)
Documentation changes for the 4.76 release
2025-11-11 09:30:14 -05:00
Ian Littman
f91aa591b0
Target Redis 6 everywhere rather than a mix of 5 and 6 (#35373)
Redis 5 has been EOL for a few years, and didn't get updates for the
latest high-severity CVEs. We're already using 6 in most places
(fleetctl preview, recommended reference architectures, managed cloud
environments) so it's safe to set 6 as the new minimum.

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2025-11-10 17:05:44 -06:00
Luke Heath
56c997983a
Update release workflow documentation with tag examples (#35290) 2025-11-10 13:14:56 -06:00
Rachael Shaw
480a73c669
Move setup experience bug message (#35393) 2025-11-08 13:19:18 -06:00