Commit graph

15305 commits

Author SHA1 Message Date
Victor Lyuboslavsky
5c0dfbf6d9
Fleetd can now download software installers from signed CDN URLs. (#25276)
For #24870 subtask

API changes doc: #25293

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [x] Added/updated automated tests
- [x] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [x] Orbit runs on macOS, Linux and Windows. Check if the orbit
feature/bugfix should only apply to one platform (`runtime.GOOS`).
- [x] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [x] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2025-01-29 10:24:44 -06:00
Mike McNeil
84d26e92ab
Update transparency.ejs (#25857)
There are so many
2025-01-29 09:58:08 -06:00
George Karr
9e5ecfb1bc
Adding changes for Fleet v4.62.3 (#25768)
Co-authored-by: Robert Fairburn <8029478+rfairburn@users.noreply.github.com>
2025-01-29 07:49:45 -06:00
Gabriel Hernandez
1c5f13589f
fix 500 page when filtering by vulnerabilities on host software (#25816)
For #25735

This is a fix for the 500 page appearing when filtering for vulnerable
software on the host details page.

Also adds some missing docs for vulnerable query param filter on `GET
hosts/:id/software` endpoint

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
2025-01-29 12:09:28 +00:00
github-actions[bot]
356da61e4b
Update versions of fleetd components in Fleet's TUF [automated] (#25848)
Automated change from [GitHub
action](https://github.com/fleetdm/fleet/actions/workflows/fleetd-tuf.yml).

Co-authored-by: lucasmrod <lucasmrod@users.noreply.github.com>
2025-01-29 08:16:16 -03:00
Allen Houchins
52d5632e37
Updates for webhooks (#25806)
To support these dogfooding changes: fleetdm/confidential#9198
2025-01-28 20:58:12 -06:00
Eric
2d5784e49d
Website: Follow up changes from website code review. (#25844)
Changes:
- Updated the website's sitemap to include pages for app-library pages,
the correct URL for the software management page, and the meetups page.
- Updated save-questionnaire-progress to not log warnings related to
duplicate CRM records if the user submitted one of the first three steps
of the get started questionnaire.
- Cleaned up comments in build-static-content.
2025-01-28 18:47:32 -06:00
Mike Thomas
fd04c56806
Update "IT engineering" CTA (#25846)
Updated the "IT engineering" CTA. Idea being that it may resonate better
with IT engineers if we link them straight into the "Why Fleet" section
of the docs.
2025-01-29 08:49:12 +09:00
jacobshandling
1d582260ca
UI - Maintain user's updates to the team agent options form when they navigate away and back again (#25803)
## For #24035 

- disable associated `useQuery`'s `refetchOnWindowFocus`


![ezgif-7c05abdfe4c30](https://github.com/user-attachments/assets/434e8b9e-a795-4173-8875-794736620753)

- [x] Changes file added for user-visible changes in `changes/`
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2025-01-28 15:20:46 -08:00
Lucas Manuel Rodriguez
af837906e1
Revert temporary settings (#25840) 2025-01-28 17:02:50 -06:00
Lucas Manuel Rodriguez
a4db139e82
Remove fleetctl binary from fleetdm/fleet image and remove unused Dockerfile (#25749)
For #25748.

Manually tested by:
1. Building a `fleet` executable for Linux on a Ubuntu VM (with
`-extldflags "-static"`) for Alpine.
2. Placing the executable in `tools/fleet-docker`.
3. Building a local docker image using `docker build -t
fleetdm/fleet:v42.42.42 --platform=linux/amd64 .`.
4. Running the docker image (using `docker run`) and use Fleet on the
browser.
```
docker run -v $(pwd)/../osquery:/run -p 8412:8412 -e FLEET_MYSQL_ADDRESS=host.docker.internal:3306 -e FLEET_MYSQL_DATABASE=fleet -e FLEET_MYSQL_USERNAME=fleet -e FLEET_MYSQL_PASSWORD=insecure -e FLEET_REDIS_ADDRESS=host.docker.internal:6379 -e FLEET_SERVER_ADDRESS=0.0.0.0:8412 -e FLEET_SERVER_CERT=/run/fleet.crt -e FLEET_SERVER_KEY=/run/fleet.key -e FLEET_LOGGING_JSON='true' -e FLEET_VULNERABILITIES_CURRENT_INSTANCE_CHECKS="yes" -e FLEET_VULNERABILITIES_DATABASES_PATH=/vulndb -e FLEET_LOGGING_DEBUG='true' -it fleetdm/fleet:v42.42.42
```

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
2025-01-28 19:58:20 -03:00
Lucas Manuel Rodriguez
b0b1dd5445
Release fleetd 1.38.1 (#25786) 2025-01-28 19:38:24 -03:00
Harrison Ravazzolo
5fee0c2d41
Article: Managed Login Items (#25830)
Add article and assets

---------

Co-authored-by: Drew Baker <89049099+Drew-P-drawers@users.noreply.github.com>
2025-01-28 13:01:48 -08:00
dependabot[bot]
7e4a0df718
Bump github.com/golang/glog from 1.2.2 to 1.2.4 (#25818) 2025-01-28 14:58:42 -06:00
Lucas Manuel Rodriguez
3eb0663a73
Temporary change of ADE/Autopilot URL for edge testing (#25823) 2025-01-28 16:14:51 -03:00
Lucas Manuel Rodriguez
fca0ea5bc1
Manual workflow to test fleetd-base.msi (#25808)
Manual workflow to test `fleetd-base.msi` using e.g. `edge` channels.

Similar to the existing:
https://github.com/fleetdm/fleet/blob/main/.github/workflows/build-fleetd-base-pkg.yml
2025-01-28 15:55:32 -03:00
jacobshandling
a5eceb8605
UI - Improve handling of long team names by teams dropdown (#25802)
## For #23924 

- Disallow text wrapping on the "manage hosts" button
- Allow dynamic width of teams dropdown values
- Hide and ellipsize team name overflow from dropdown container



![ezgif-748697f5cc45e](https://github.com/user-attachments/assets/751c0032-b8d5-4402-94dd-aae804e0e9ba)


![ezgif-7d1797450417e](https://github.com/user-attachments/assets/c40ce7a5-3c9a-485b-95e3-c9af20c79a23)

- [x] Changes file added for user-visible changes in `changes/`
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2025-01-28 10:27:02 -08:00
Eric
6dfd114cce
Docs: Update heading links on "Hosting Fleet" page. (#25820)
Closes: #25797

Changes:
- Updated the HTML links on the "Hosting Fleet" documentation page so
they will be linkable by the "On this page" sidebar on the Fleet
website.
2025-01-28 11:59:38 -06:00
Allen Houchins
740331f04a
Update latest-macos.yml (#25814) 2025-01-28 08:24:02 -08:00
Dante Catalfamo
05fe5b78ea
Utilize custom SMTP domain if set (#25669)
#25241

---------

Co-authored-by: Tommy McCormick <mccormickt9@gmail.com>
2025-01-28 11:10:52 -05:00
github-actions[bot]
e786307b3c
Update versions of fleetd components in Fleet's TUF [automated] (#25805)
Automated change from [GitHub
action](https://github.com/fleetdm/fleet/actions/workflows/fleetd-tuf.yml).

Co-authored-by: lucasmrod <lucasmrod@users.noreply.github.com>
2025-01-28 09:18:12 -03:00
Eric
97655d7e71
Website: Fix unmatched ejs tag on homepage (#25800)
Changes:
- Fixed an unmatched ejs tag on the homepage.
2025-01-27 18:18:32 -06:00
Mike McNeil
f58d425a1e
Homepage (#25799) 2025-01-27 18:11:30 -06:00
Noah Talerman
4a617230e4
Handbook: design review (#25793) 2025-01-27 17:21:52 -06:00
Noah Talerman
b7e8af2dd9
Handhook: How to get feature requests, that already have issues, into the prioritization flow (#25780) 2025-01-27 17:17:24 -06:00
RachelElysia
9b70a2c819
Fleet UI: Surface download URL for Fleet-maintained app when adding (#25762) 2025-01-27 16:23:08 -05:00
Ian Littman
fcf4f971c9
Renumber migrations to ensure 4.63.0 migrations come after 4.62.3 migrations (#25788) 2025-01-27 15:03:02 -06:00
RachelElysia
98f0728cee
Fleet UI: Update FMA API errors in UI (#25646) 2025-01-27 15:32:12 -05:00
Noah Talerman
57b6ab1b4f
Host vitals page: clarify that Fleet checks the default disk on Linux (#25778)
Update the description on this page:
https://fleetdm.com/vitals/disk-encryption-linux#linux

More context in Slack here.
2025-01-27 14:21:43 -06:00
Victor Lyuboslavsky
89e314e86e
Illegal argument errors will no longer be logged at the ERROR level (#25761)
For #25759 

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] A detailed QA plan exists on the associated ticket (if it isn't
there, work with the product group's QA engineer to add it)
- [x] Manual QA for all new/changed functionality
2025-01-27 14:03:38 -06:00
Katheryn Satterlee
49231f19be
Update agent-configuration.md (#25740)
- Updated the query suggested to view all osquery flags
- Added a note that running this query through osqueryi will not reflect
the settings in use by osqueryd.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

Documentation only change

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
2025-01-27 13:35:46 -06:00
Lucas Manuel Rodriguez
734b4bd23b
Release fleetd 1.38.0 (#25763) 2025-01-27 16:34:59 -03:00
Robert Fairburn
de46eb31d8
Terraform why this way (#25746)
For #18191

Why add another repo? 

Terraform clones the entire repo for every submodule used when running
`terraform init`. For our monorepo, that is 11GB, which significantly
slows down deployment speed using Terraform. By moving our Terraform
modules to a dedicated repo, we reduce this to <1MB, which will shave
minutes off of `terraform init` for anyone who uses it. Because our CI
deployment runs `terraform init` on every environment, this will result
in savings of several hours of CI runners per month.

---------

Co-authored-by: Luke Heath <luke@fleetdm.com>
2025-01-27 12:09:17 -06:00
Ian Littman
8ee29dc895
Include current host status and pending action in lock, unlock, and wipe API calls (#25754)
For #23241.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added/updated automated tests
- [x] A detailed QA plan exists on the associated ticket (if it isn't
there, work with the product group's QA engineer to add it)
- [x] Manual QA for all new/changed functionality
- [x] Docs re-PR'd
2025-01-27 12:06:09 -06:00
Gabriel Hernandez
2a643c9d87
add telemetry for fleet desktop failing to launch because of missing domain (#25752)
For #25689, #19499

We wanted to add some additional telemetry for fleet desktop to know
when it was failing to launch based on the error message from a [recent
bug] https://github.com/fleetdm/fleet/issues/25689. This bug and some
related ones seemed intermittent and we were unable to reproduced so we
are hoping adding this telemetry to give some more analytics on this
issue.
2025-01-27 17:39:41 +00:00
Rebecca Cowart
49ff507568
Update enroll-hosts.md to include Fleet Desktop logs (#25218) 2025-01-27 11:42:30 -05:00
RachelElysia
42d7227611
Fleet UI: Fix Manage automation dropdown styling (#25753) 2025-01-27 09:14:16 -05:00
Rachael Shaw
ac03358703
Small copy fix in Settings > Organization settings (#25772)
All the other page descriptions end with a period.
2025-01-24 18:52:58 -06:00
Eric
3089c96049
Website: add hover link to article headings. (#25760)
Closes: #24863

Changes:
- Added hover links to headings in articles that copies a link to the
heading to the user's clipboard when clicked.
2025-01-24 18:14:15 -06:00
Jordan Wright
d074ba2b48
Fix incorrect source in device mapping REST API docs (#25641)
### Summary

This PR closes #25640 by fixing the incorrect `source` value in the
device mapping REST API docs.

The real value is `mdm_idp_accounts` which can be found
[here](15ac793238/server/fleet/hosts.go (L894)).

### Test Plan

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.

I couldn't find any other references to `identity_provider`, so I think
these two were all of them.
2025-01-24 16:32:03 -06:00
Eric
2589092849
Website: Update schema documentation sidebar behavior (#25758)
Closes: https://github.com/fleetdm/confidential/issues/9412

Changes:
- Updated the table of contents sidebar on osquery schema table pages to
scroll the table of contents to the currently viewed table when the page
loads.
2025-01-24 16:28:43 -06:00
Sam Pfluger
c21ad84345
Handbook/digital-experience#confirm-ceo-shadow-dates (#25766) 2025-01-24 15:04:56 -06:00
jacobshandling
55fd95d760
UI – Updates to confirm invite flow (#25583)
## For #24486 

- Check invite validity before rendering form, error if invalid
- Use data returned from validity check to pre-populate form
- Remove dependence of flow on URL params other than token
- Remove other URL params from link generated in invite confirmation
email
- Refactor form from JS to TS
- Refactor form from class to functional components
- Cleanup unused logic
- Improve error handling

**Invalid invite**

![invalid](https://github.com/user-attachments/assets/c42c47ca-6a0d-4112-89ea-68b77e748d12)


**Valid invite**

![valid-login-flow](https://github.com/user-attachments/assets/f2b97306-a1bd-47be-9725-968a3c4ad8a8)



- [x] Changes file added for user-visible changes in `changes/`
- [x] Updated tests
- [ ] A detailed QA plan exists on the associated ticket (if it isn't
there, work with the product group's QA engineer to add it)
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2025-01-24 10:55:39 -08:00
Eric
11319fdea7
Website: add iso 27001 coming soon badge to footer (#25756)
Closes: https://github.com/fleetdm/confidential/issues/8914

Changes:
- Added an ISO 27001 coming soon badge to the website's footer.
2025-01-24 12:54:45 -06:00
Sam Pfluger
62170514f9
Add range to CSE position (#25757) 2025-01-24 12:42:15 -06:00
Scott Gress
382a2f132e
Hide manage automations from maintainers (#25727)
for #25346

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.

This PR removes the "manage automations" link in the activity feed for
anyone who isn't an admin. Previously this link appeared for maintainers
as well, but they [don't have
permission](https://github.com/fleetdm/fleet/blob/sgress454/23312-update-all-teams-policies-empty-state/articles/role-based-access.md#user-permissions)
to manage automations.
2025-01-24 11:17:14 -06:00
Eric
9bac36c1d8
Website: enable search on policy and vital pages. (#25728)
Related to: #25718


Changes:
- Added search to vitals and policy pages.
2025-01-24 09:45:14 -06:00
RachelElysia
3060f452c2
Fleet UI: Fix user management page overflow (#25733) 2025-01-24 10:06:49 -05:00
Eric
46dc7e6dee
Website: Update text in "Managed cloud for growing deployments" step of start flow (#25743)
Changes:
- Updated the text in the "Managed cloud for growing deployments" step
of the start flow.
2025-01-24 08:19:39 -06:00
Harrison Ravazzolo
81b959a390
update logging dest (#25473)
Co-authored-by: Harrison John <harrisonjohn@Harrisons-MacBook-Pro.local>
2025-01-24 02:51:17 -06:00