Commit graph

1843 commits

Author SHA1 Message Date
Noah Talerman
6aef9520e9
MDM setup docs: APNs and ABM in the UI (#19463) 2024-06-07 14:33:00 -07:00
Rachael Shaw
97cc5d17ea
Remove "available in Fleet Premium" note from scripts permissions docs (#19492)
Scripts are available to free users.
2024-06-06 11:15:56 -05:00
Marko Lisica
5ff86f0b8e
Software permissions changes (#19405)
Adding new rows to manage access table to reflect new permissions added
with #14921
2024-06-06 10:12:12 -05:00
Roberto Dip
8bc79f8478
add documentation for edge case scenario (#19496)
for #16857
2024-06-05 13:55:53 -03:00
Marko Lisica
83edd57eca
Update scripts docs (#19419)
With #17321 we added support for `zsh` interpreter and we want to
document this.

@spokanemac had a hard time understanding that we don't support `.zsh`
extension while dogfooding the feature. I added note to explain that
user must create `.sh` file with `/bin/zsh` interpreter specified.
2024-06-04 08:17:00 +02:00
Noah Talerman
23ae7c763c
Server configuration docs: APNs and ABM in the UI (#19461)
- Add redirect for error message on Fleet server startup if private key
is missing: #19455
- Move the APNs and ABM environment variables to contributor docs. They
will no longer be used
2024-06-03 15:45:41 -04:00
Dave Herder
2db2b4ede1
policies doc glue-up (#19389)
Feedback from prospect-redwine was that this page required more depth on
policies. We have documentation around policies, this PR is to add
linking and to glue the topics together.

---------

Co-authored-by: Noah Talerman <noahtal@umich.edu>
Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
Co-authored-by: JD <spokanemac@users.noreply.github.com>
2024-06-03 10:55:10 -07:00
gillespi314
949acfb2bd Merge branch 'main' into feat-software-self-service 2024-05-31 16:35:56 -05:00
Gabriel Hernandez
af88da49bc Merge branch 'main' into feat-software-self-service 2024-05-31 18:15:19 +01:00
Roberto Dip
1c2ee0c949 Merge remote-tracking branch 'origin/main' into feat-save-certs 2024-05-31 09:34:48 -03:00
Eric
7b1a56f752
Docs: fix broken link (#19345)
Changes:
- Fixed a broken link on the "macOS setup experience" docs page.
2024-05-30 17:12:40 -05:00
Noah Talerman
e26f1af309
Fix MDM setup docs (#19343)
- You only need the APNs cert for renewing APNs
2024-05-30 18:04:57 -04:00
Roberto Dip
178c0d565f Merge remote-tracking branch 'origin/main' into feat-save-certs 2024-05-30 18:34:40 -03:00
Rachael Shaw
77228ff433
Fleet configuration API docs: Document server_settings.enable_analytics (#19384)
`server_settings.enable_analytics` was only documented in the "Get
configuration" endpoint and nowhere else. Added to "Modify
configuration" params and example response.
2024-05-30 14:24:19 -05:00
Rachael Shaw
61f366fe3a
#18187 API docs: AI-generated calendar description for policy remediation (#19383)
Documents the new Fleet configuration setting:
`server_settings.ai_features_disabled`

For #18187
2024-05-30 14:09:25 -05:00
Rachael Shaw
8daa61d963
#15605 API docs: Merge inherited & team queries/policies (#19375)
New PR to avoid affecting PR open time KPI. See previous PR discussion
here: https://github.com/fleetdm/fleet/pull/17227
2024-05-30 12:16:08 -05:00
Rachael Shaw
9afe9f3e0c
#16989 API design: Settings to automatically delete activity (#19374)
New PR to avoid affecting PR open time KPI. See draft PR for previous
discussion: https://github.com/fleetdm/fleet/pull/17809
2024-05-30 12:07:38 -05:00
Martin Angers
3e2f5e97e5 Regenerate docs 2024-05-29 16:15:51 -04:00
Martin Angers
6b9fecf172 Fix conflicts 2024-05-29 16:08:51 -04:00
Andrwe Lord Weber
a8a1054b36
add linux platform tuxedo (#19011)
# Changes

I'm running orbit based osqueryd on a laptop with [Tuxedo
OS](https://www.tuxedocomputers.com/en/TUXEDO-OS_1.tuxedo#).
This OS identifies its platform via osquery as `tuxedo` and is therefore
not recognized by the Fleet server:

```json
{
    "err": "unrecognized platform",
    "hostID": 76,
    "level": "error",
    "platform": "tuxedo",
    "ts": "2024-05-15T13:17:34.513509387Z"
}
```

This causes policy and scheduled queries to not being run on my system.
With this PR Im adding `tuxedo` to all occurrences found when searching
for `kali`.

Additionally pre-commit checks were failing for me locally as it could
not find the hook-id `RuboCop`. This could be solved by using `rubocop`
instead.
Afterwards all pre-commit checks succeeded locally.

# Checklist for submitter

- [x] Added/updated tests

Signed-off-by: Andreas Ulm <andreas.ulm@prisma-capacity.eu>
2024-05-29 13:54:07 -03:00
Jahziel Villasana-Espinoza
5d40c4c352 feat: add note about updating 2024-05-29 10:53:39 -04:00
Jahziel Villasana-Espinoza
52a1d3f480 fix: truncate key, docs 2024-05-29 10:36:38 -04:00
Noah Talerman
84a1c84244
Update docs: Best practice infra for deploy security agents (#19251)
- Add S3 to AWS reference architecture docs
- Add note that GCP support for add/install software (deploy security
agents) and file carves is coming soon
- Add note that Render support for add/install software (deploy security
agents) is coming soon
- Update links to best practice Terraform example
2024-05-28 14:41:54 -04:00
Martin Angers
1b9f5a79a5
Software SS: activities (#19292) 2024-05-28 10:44:06 -04:00
Eric
7bd7c023e2
Docs: Fix broken relative link on SSO docs page (#19216)
Changes:
- Fixed a broken relative link
2024-05-24 16:57:29 -05:00
Noah Talerman
95910d3e43
Update docs: Maintenance windows (Fleet in your calendar) (#19232)
Doc updates for the "Maintenance windows (Fleet in your calendar)" story
(#17230)
2024-05-23 17:07:53 -04:00
Noah Talerman
27cc943a4b
Sever config docs: Deploy security agents (#19236)
Server configuration doc changes for "Deploy security agents" story
(#14921)
2024-05-23 17:07:28 -04:00
Noah Talerman
23e80f2ce4
API design: Deploy security agents to macOS, Windows, and Linux hosts (#19245)
API changes for:
- #14921
2024-05-23 17:07:07 -04:00
Mike Thomas
1dc53cfa93
Update Fleet-UI.md (#19135)
Added a note to warn UI users against using dot notation for column
names in their queries.

Closes https://github.com/fleetdm/confidential/issues/6506

(@dherder, please check my interpretation of the issue.)

---------

Co-authored-by: Dave Herder <27025660+dherder@users.noreply.github.com>
Co-authored-by: Rachael Shaw <r@rachael.wtf>
2024-05-23 15:45:27 -05:00
Noah Talerman
7bb215a0b1
Cleanup docs: Pre-fill and lock local account creation screen during out-of-the-box macOS setup (#19225)
Docs changes for "Pre-fill and lock local account creation screen during
out-of-the-box macOS setup" story (#9147)

See comment here for more context:
https://github.com/fleetdm/fleet/issues/9147#issuecomment-2127391460

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
2024-05-23 10:33:09 -05:00
Noah Talerman
2406ab28cf
Update Supported host operating systems (#19217)
- At least 2 of Fleet's largest customers use Windows Server 2012
2024-05-22 17:56:28 -04:00
Luke Heath
cb419de31d
Update releasing Fleet contributor docs (#19188) 2024-05-21 16:50:13 -05:00
Benjamin Edwards
677835e2c3
support external id in STS Assume Role calls (#18901) 2024-05-21 13:19:35 -04:00
Noah Talerman
54cca7b28a
Docs: Fix broken links & add redirects (#19066) 2024-05-17 11:24:33 -05:00
Mike Thomas
665b5d0929
Text improvements and added "Deploy to Render" button (#19101)
- Text and style updates
- Added a Render's "Deploy to Render" button for clarity
2024-05-17 11:17:01 -05:00
Jahziel Villasana-Espinoza
c4923ffecd
Feature: software installers (#19050)
for https://github.com/fleetdm/fleet/issues/14921

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] Added/updated tests
- [x] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [x] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [x] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [x] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
- [x] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [x] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [x] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-05-17 10:37:45 -04:00
Mike Thomas
21b1aac24f
Update why-fleet.md (#19064)
Removed the following sections to make way for the [new docs
CTA](https://github.com/fleetdm/fleet/pull/19062):

- What's next
- Try it out
2024-05-17 08:07:17 +09:00
Roberto Dip
8d9dcafbbc Merge remote-tracking branch 'origin/main' into feat-software-installers 2024-05-16 17:23:39 -03:00
Noah Talerman
1077255791
Vulnerability processing docs: Add VS Code extensions (#19070)
- Document that Fleet now detects vulns on VS Code extensions
2024-05-16 15:41:17 -04:00
Lucas Manuel Rodriguez
bb310e685d
Support Ubuntu 24.04 with Xorg (by detecting user's DISPLAY environment variable) (#18996)
#18925 (Should also fix #17660.)

Tests:
- Ubuntu 22.04.2
	- Wayland
		- Works with chrome  
		- Doesn't work with Firefox. 
	- Xorg
		- Works with Chrome.  
		- Works with Firefox. 
- Ubuntu 24.04
	- Wayland
		- Doesn't work with Chrome. 
		- Doesn't work with Firefox. 
- Xorg (when using Xorg it defaults to `DISPLAY=:1`, and with the
changes in this PR it works):
		- Works with Chrome.  
		- Works with Firefox.  
---

How to change between Wayland and Xorg:

- Set `WaylandEnable=false` in `/etc/gdm3/custom.conf` and reboot.

---

How to determine what's running:
```sh
$ loginctl
SESSION  UID USER SEAT  TTY 
      2 1000 luk  seat0 tty2
     c2 1000 luk        

$ loginctl show-session 2 -p Type
# will output
Type=wayland
or
Type=x11
```
---

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [X] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [x] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-05-16 08:39:30 -03:00
Roberto Dip
1ef19e4ff2 Merge remote-tracking branch 'origin/main' into feat-software-installers 2024-05-15 19:55:02 -03:00
Mike Thomas
f506e85fbc
Style and typo fixes (#19008)
I fixed a couple of typos, corrected a couple of header tags, and
tightened up a couple of margins.

# Checklist for submitter

- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-05-16 07:49:39 +09:00
Mike Thomas
9802ccc37a
Migrate deployment guides to articles (#19007)
This PR is a follow-up to https://github.com/fleetdm/fleet/issues/16660
to:

- Move all (non-recommended) deployment guides from the docs into
`/articles` under the `guides` category
    - AWS ECS
    - CentOS
    - Cloud.gov
    - AWS with Terraform
    - Hetzner Cloud
    - Render
    - Kubernetes
- Set up redirects for migrated articles
- Add article thumbnail and cover images

# Checklist for submitter

- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
Co-authored-by: Eric <eashaw@sailsjs.com>
2024-05-16 07:29:51 +09:00
Noah Talerman
bddfb2271b
SSO docs: Fix typo (#19042)
- Fix numbered steps
2024-05-15 17:55:04 -04:00
Noah Talerman
af6129cc16
Update Windows MDM setup article and MDM setup docs (#18981)
- Update docs to reflect that, in order to use Autopilot, you must have
one Intune license per host (from #fleetdm/confidential#6283)
- Make "MDM setup" doc page cross platform
- Cut content
2024-05-15 15:34:58 -04:00
Eric
2dd7b6e564
Website: add "Deploy Fleet" docs page. (#18992)
https://github.com/fleetdm/fleet/issues/16660

Changes:
- Added a new page (deploy-fleet.md) to the deploying docs
- Moved the content from the following pages to the
deploy/reference-architectures page:
  - Systemd
  - Proxies
  - Public IPs
  - Monitoring Fleet
  - Introduction
- Reordered the pages in the Deploy docs folder
- Added a redirect: `/docs/deploy/introduction »
/docs/deploy/deploy-fleet`

---------

Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
2024-05-15 13:56:36 +09:00
Sam Pfluger
1b44927968
Fix broken markdown formatting (#18999)
Closes #18985 
...
2024-05-14 17:40:05 -05:00
Luke Heath
9cdd9be308
Update deploy on Render documentation (#18964) 2024-05-14 12:54:37 -05:00
Luke Heath
15ba5f3a20
Update supported browsers (#18960) 2024-05-13 17:10:21 -05:00
Rachael Shaw
7ca3bda4a4
Recategorize & reorganize /mdm/ REST API endpoints (#18886)
Original PR for API design: https://github.com/fleetdm/fleet/pull/16728

---------

Co-authored-by: George Karr <georgekarrv@users.noreply.github.com>
2024-05-10 16:57:06 -05:00