Commit graph

10936 commits

Author SHA1 Message Date
RachelElysia
7e264b386f
[P1] Fleet UI: Hide bulk selection when unsupported filter (#17463) 2024-03-07 16:38:25 -05:00
Luke Heath
70d369dcf7
Update Releasing-Fleet.md (#17436) 2024-03-07 15:17:37 -06:00
Victor Lyuboslavsky
165917b492
Doc changes for running live queries with team_id=0 (No team) (#17267)
Doc changes for #16350
2024-03-07 14:23:18 -06:00
Sharon Katz
2be6a32295
Update Releasing-Fleet.md (#17233)
Swap steps 1 and 3

---------

Co-authored-by: Luke Heath <luke@fleetdm.com>
2024-03-07 15:07:00 -05:00
Tim Lee
2e67ef61d4
Bugfix: Revert host filters fix (#17390) (#17464)
This reverts commit 4b2ebdc8dc.
2024-03-07 12:57:27 -07:00
Eric
447baf32d3
Website: Update "Talk to us" form redirect (#17465)
Changes:
- Updated the "Talk to us" form on the /contact page to redirect users
who have <700 hosts to the "Lets get you set up" Calendly event
(https://calendly.com/fleetdm/chat)
2024-03-07 13:47:28 -06:00
RachelElysia
6b73816548
Fleet UI: Fix host summary data styling bug (#17421) 2024-03-07 14:46:13 -05:00
Eric
dcaf2d0a4c
Website: update relative link validation in markdown content (#17213)
Closes: #16797

Changes:
- Updated `build-static-content` to throw an error if an extensionless
Markdown link containing a hash link is found.
- Fixed two broken relative links in the contributing documentation
2024-03-07 13:45:41 -06:00
Victor Lyuboslavsky
e01c79ca7f
Updating server config docs. (#17214)
Server config doc updates for:
https://github.com/fleetdm/fleet/issues/16331
2024-03-07 13:22:03 -06:00
Victor Lyuboslavsky
58f30aaf99
Allowing GitOps role to read org configs -- doc change. (#17238)
Allowing GitOps role to read org configs.

Docs for https://github.com/fleetdm/fleet/pull/17223
2024-03-07 13:21:14 -06:00
Victor Lyuboslavsky
a173be8f52
For fleetctl gitops, when MDM configs are not explicitly defined in gitops yml file, they are now set to default values. (#17223)
For fleetctl gitops, when MDM configs are not explicitly defined in
gitops yml file, they are now set to default values.
#17209

Gitops role can now read org config/settings. This is used to determine
whether license is Premium.
Doc changes for permission access:
https://github.com/fleetdm/fleet/pull/17238

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Documented any permissions changes (docs/Using
Fleet/manage-access.md)
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-03-07 13:20:14 -06:00
Drew Baker
6e31da558b
Update handbook for LinkedIn promoted posts. (#17236)
Added LinkedIn promoted posts to communications page and demand. ...

---------

Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2024-03-07 12:36:12 -06:00
Brock Walters
b112626874
Update apple-developer-certificates-on-linux-for-configuration-profil… (#17461)
…e-signing.md

Changed a typo in the SCP instruction for username & domain & one
sentence near the end.

---------

Co-authored-by: JD <spokanemac@users.noreply.github.com>
2024-03-07 08:45:59 -08:00
Roberto Dip
53c270e3cd
add webserver to unmanage Jamf devices for MDM migration (#17458)
# Checklist for submitter

- [x] Manual QA for all new/changed functionality
2024-03-07 12:52:02 -03:00
Sarah Gillespie
06d5c9cada
Fix UI styling of host name in ran script activity item (#17437) 2024-03-07 09:28:24 -06:00
Roberto Dip
e8b7ce81dc
don't run SCEP test in parallel to avoid race in dependency (#17457)
The https://pkg.go.dev/go.mozilla.org/pkcs7 package uses an unguarded
package-level variable:


33d05740a3/ber.go (L19-L21)

This was causing this data race during tests:

```
==================
WARNING: DATA RACE
Read at 0x0000009b89b0 by goroutine 22:
  go.mozilla.org/pkcs7.asn1Structured.EncodeTo()
      /home/runner/go/pkg/mod/go.mozilla.org/pkcs7@v0.0.0-20210826202110-33d05740a352/ber.go:21 +0x56
  go.mozilla.org/pkcs7.(*asn1Structured).EncodeTo()
      <autogenerated>:1 +0xa5
  go.mozilla.org/pkcs7.ber2der()
      /home/runner/go/pkg/mod/go.mozilla.org/pkcs7@v0.0.0-20210826202110-33d05740a352/ber.go:68 +0xdb
  go.mozilla.org/pkcs7.Parse()
      /home/runner/go/pkg/mod/go.mozilla.org/pkcs7@v0.0.0-20210826202110-33d05740a352/pkcs7.go:160 +0x12f
  github.com/fleetdm/fleet/v4/server/mdm/scep/scep.ParsePKIMessage()
      /home/runner/work/fleet/fleet/server/mdm/scep/scep/scep.go:234 +0x1d2
  github.com/fleetdm/fleet/v4/server/mdm/scep/scep_test.testParsePKIMessage()
      /home/runner/work/fleet/fleet/server/mdm/scep/scep/scep_test.go:21 +0x56
  github.com/fleetdm/fleet/v4/server/mdm/scep/scep_test.TestNewCSRRequest.func1()
      /home/runner/work/fleet/fleet/server/mdm/scep/scep/scep_test.go:198 +0x7e5
  testing.tRunner()
      /opt/hostedtoolcache/go/1.21.7/x64/src/testing/testing.go:1595 +0x261
  testing.(*T).Run.func1()
      /opt/hostedtoolcache/go/1.21.7/x64/src/testing/testing.go:1648 +0x44

Previous write at 0x0000009b89b0 by goroutine 23:
  go.mozilla.org/pkcs7.asn1Structured.EncodeTo()
      /home/runner/go/pkg/mod/go.mozilla.org/pkcs7@v0.0.0-20210826202110-33d05740a352/ber.go:21 +0x6e
  go.mozilla.org/pkcs7.(*asn1Structured).EncodeTo()
      <autogenerated>:1 +0xa5
  go.mozilla.org/pkcs7.ber2der()
      /home/runner/go/pkg/mod/go.mozilla.org/pkcs7@v0.0.0-20210826202110-33d05740a352/ber.go:68 +0xdb
  go.mozilla.org/pkcs7.Parse()
      /home/runner/go/pkg/mod/go.mozilla.org/pkcs7@v0.0.0-20210826202110-33d05740a352/pkcs7.go:160 +0x12f
  github.com/fleetdm/fleet/v4/server/mdm/scep/scep.(*PKIMessage).DecryptPKIEnvelope()
      /home/runner/work/fleet/fleet/server/mdm/scep/scep/scep.go:344 +0xde
  github.com/fleetdm/fleet/v4/server/mdm/scep/scep_test.TestNewCSRRequest.func1()
      /home/runner/work/fleet/fleet/server/mdm/scep/scep/scep_test.go:199 +0x7fa
  testing.tRunner()
      /opt/hostedtoolcache/go/1.21.7/x64/src/testing/testing.go:1595 +0x261
  testing.(*T).Run.func1()
      /opt/hostedtoolcache/go/1.21.7/x64/src/testing/testing.go:1648 +0x44

Goroutine 22 (running) created at:
  testing.(*T).Run()
      /opt/hostedtoolcache/go/1.21.7/x64/src/testing/testing.go:1648 +0x845
  github.com/fleetdm/fleet/v4/server/mdm/scep/scep_test.TestNewCSRRequest()
      /home/runner/work/fleet/fleet/server/mdm/scep/scep/scep_test.go:165 +0x3ac
  testing.tRunner()
      /opt/hostedtoolcache/go/1.21.7/x64/src/testing/testing.go:1595 +0x261
  testing.(*T).Run.func1()
      /opt/hostedtoolcache/go/1.21.7/x64/src/testing/testing.go:1648 +0x44

Goroutine 23 (running) created at:
  testing.(*T).Run()
      /opt/hostedtoolcache/go/1.21.7/x64/src/testing/testing.go:1648 +0x845
  github.com/fleetdm/fleet/v4/server/mdm/scep/scep_test.TestNewCSRRequest()
      /home/runner/work/fleet/fleet/server/mdm/scep/scep/scep_test.go:165 +0x3ac
  testing.tRunner()
      /opt/hostedtoolcache/go/1.21.7/x64/src/testing/testing.go:1595 +0x261
  testing.(*T).Run.func1()
      /opt/hostedtoolcache/go/1.21.7/x64/src/testing/testing.go:1648 +0x44
==================
    testing.go:1465: race detected during execution of test
=== NAME  TestNewCSRRequest/KeyEncipherment_not_set_with_NOP_certificates_selector
```
2024-03-07 12:01:52 -03:00
Noah Talerman
d0467de86e
Update features.yml w/ new timelines (#17323)
- Add "Fleet gets in your calendar" (#17230)
- "Declaration (DDM) profiles" (#14550) before "App deployment" (#14921)
  - Deploy apps => Deploy security agents
  - Pushes deploy security agents to Q2 (2024-04-22)

Note: Upcoming activity (unified queue) won't guarantee
first-in-first-out in Q1
...
2024-03-06 21:48:57 -06:00
Mike Thomas
a55c7a397d
Updated text content (#17389)
Mike, let me know what you think of these text and order changes based
on your screen recording.
Also updated the hero image to match the updated color palette.

> I think we need to be leading with report what matters.

>And I think followed by deep context from the environment with the eye
to rewriting that section a bit later.

>I think we close out with up to date scans because it engages with the
problem, but it doesn’t really, right. We could swap that out later with
we look at the actual content.

![Image from
iOS](https://github.com/fleetdm/fleet/assets/78363703/551c8262-7cee-4f45-ad03-fd9f1bbf9917)
2024-03-06 21:46:55 -06:00
Noah Talerman
7143887e15
Disk encryption is the same as “Encrypt macOS hard disks with FileVault” (#17358)
- Remove "Encrypt macOS hard disks with FileVault" because it's the same
thing as disk encryption
- Update "Disk encryption" to Fleet Premium
...
2024-03-06 21:44:52 -06:00
Noah Talerman
854faa0c3d
Update pricing page (#17382)
- Fix double asterisk

<img width="348" alt="Screenshot 2024-03-05 at 3 44 18 PM"
src="https://github.com/fleetdm/fleet/assets/47070608/5e447437-8588-4f62-a64e-a38735476b9f">

...
2024-03-06 21:43:22 -06:00
Noah Talerman
e4766ad27e
Update features.yml (#17398)
- Clarify "Native macOS update reminders"...
2024-03-06 21:41:14 -06:00
Jacob Shandling
e957292746
Update reference in mdm integration test (#17452)
Add one missed update

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-03-06 23:01:21 -03:00
Eric
4a1e202acb
Website: Update contact page and CTAs (#17450)
Changes:
- Updated the contact page to have a second form that users can fill out
to schedule a Calendly meeting with Fleet.
- Updated CTAs on all landing pages, product category pages, article
pages, pricing page, and license dispenser.
- Updated the CTAs on the landing page generator template
- Removed the function that opens the hubspot chat widget from page
scripts.
- Updated `deliver-contact-form-message` to send a request to a Zapier
webhook
- Created a new action: `deliver-talk-to-us-form-submission` that sends
form submissions to a Zapier webhook.
2024-03-07 10:07:50 +09:00
JD
c9f1d3dff0
Article: Developer certificate image md fix (#17451)
Fix image markdown.
2024-03-06 16:26:04 -08:00
JD
c4a9a522e9
Article: Developer certificates on Linux (#17431)
Article: Apple developer certificates on Linux for configuration profile
signing https://github.com/fleetdm/fleet/issues/17169
2024-03-06 15:51:52 -08:00
Rachael Shaw
6f7fd8f881
Docs: Fix some links in the hosts API section (#17449)
Noticed a few links in the hosts section of the REST API docs that were
out-of-date or missing.
2024-03-06 16:34:29 -06:00
George Karr
33bb67b7af
update changelog 4.46.2 (#17337)
- Updating changelog for 4.46.2
2024-03-06 15:41:55 -06:00
Roberto Dip
9c5b59df0d
prevent redundant ADE profile assignment (#17427)
For #17291, this prevent re-assigning profiles to ABM hosts that already
have the right one.

This was happening very frequently for hosts that are in the last page
of the `/sync` request, as there's no indication that the cursor was
exhausted and we keept on assigning profiles to those hosts.

This caused profile assignment to eventually fail, presumably due to
rate limiting.
2024-03-06 18:16:10 -03:00
Tim Lee
4b2ebdc8dc
17257 host filters fix (#17390) 2024-03-06 14:15:53 -07:00
RachelElysia
ceaa6d13fa
Transfer/Delete bug fix: fix low_disk_space (#17434) 2024-03-06 16:15:34 -05:00
Jahziel Villasana-Espinoza
babf4e17c8
fix: return bad request error during MDM migration when appropriate (#16551)
> Related issue: https://github.com/fleetdm/confidential/issues/5138

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-03-06 15:38:44 -05:00
github-actions[bot]
91f2f11f9c
Update versions of fleetd components in Fleet's TUF [automated] (#17429)
Automated change from [GitHub
action](https://github.com/fleetdm/fleet/actions/workflows/fleetd-tuf.yml).

Co-authored-by: zwass <zwass@users.noreply.github.com>
2024-03-06 17:32:28 -03:00
Lucas Manuel Rodriguez
1fceb19ad0
Automate osqueryd release to edge (#17425)
Automation and documentation for releasing osqueryd to `edge`

---------

Co-authored-by: Zach Wasserman <zach@fleetdm.com>
2024-03-06 17:31:49 -03:00
Jahziel Villasana-Espinoza
c808bba438
fix: don't show windows hosts when filtering by bootstrap package status (#17386)
> Related issue: #17341

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-03-06 15:07:48 -05:00
Zach Wasserman
549c66cb32
Generate osqueryd targets for 5.12.0 (#17403) 2024-03-06 10:46:27 -08:00
RachelElysia
fe4a6c8aca
[tiny released bug] Fleet UI: Fix Munki issues tooltip wrapping (#17415) 2024-03-06 13:43:09 -05:00
Benjamin Edwards
fc567cea2a
osquery carve update (#17426) 2024-03-06 13:38:35 -05:00
RachelElysia
dfcca55b80
[released bugs] Fleet FE: Bulk host transfer and delete respects all UI page filters (#17263) 2024-03-06 13:29:14 -05:00
Eric
30a36b0b3a
Website: enable parallax animation on cloud city image (#17104)
Changes:
- Merged two layers of the parallax cloud city image & updated
filenames.
- Added a transition property to the parallax cloud city image to make
the animation smoother when scrolling with a mouse wheel.
- Updated the z-index of the website's footer to prevent the content
from being hidden by the parallax image when it is at its starting
position

---------

Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
2024-03-06 16:28:11 +09:00
Jacob Shandling
fa093203df
UI – Simpler edit icon solution, applied to Edit query and Edit policy forms (#17364)
## ➡️ #17224  

- Replace the [solution merged
here](https://github.com/fleetdm/fleet/pull/17086) with a simpler and
more easily extendable one
- Apply same approach to the Edit policies form.

Edit query demo:

https://www.loom.com/share/589d3bfedc754f62b31c39bc517c2382?sid=ce65e5a5-e13f-4446-a37c-991a09cc8960

Edit query:
<img width="1791" alt="Screenshot 2024-03-04 at 5 34 35 PM"
src="https://github.com/fleetdm/fleet/assets/61553566/6727bd9e-ad05-45b0-a65c-e01487d7d923">

Edit policy:
<img width="2550" alt="Screenshot 2024-03-05 at 11 47 34 AM"
src="https://github.com/fleetdm/fleet/assets/61553566/fdd8e455-7f54-4177-be3e-4a82a879a176">

<img width="2550" alt="Screenshot 2024-03-05 at 11 47 27 AM"
src="https://github.com/fleetdm/fleet/assets/61553566/3b33b097-f652-4e99-b944-2d29ffe3f311">



- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-03-05 14:08:24 -08:00
Sarah Gillespie
ba211437c6
Update integration tests for run script by name feature (#17381) 2024-03-05 15:12:52 -06:00
Jacob Shandling
a184d1e073
UI – increase scope of policy > critical checkbox width override to include new policy form (#17348)
## ➡️ #17036 

![Screenshot 2024-03-04 at 11 36
34 AM](https://github.com/fleetdm/fleet/assets/61553566/47fef465-25b8-48cb-9634-a060d5acd90c)



- [x] Changes file added for user-visible changes in `changes/`
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-03-05 13:02:42 -08:00
Sarah Gillespie
1e43cd813c
Use --team flag for run-script command (#17373) 2024-03-05 11:54:26 -06:00
RachelElysia
1440584d06
Fleet UI: Surface VS code extensions in UI (#17333) 2024-03-05 11:59:53 -05:00
Martin Angers
977c376be2
Scripts char limit: feature branch (#17342) 2024-03-05 11:04:11 -05:00
Martin Angers
3184ee2cee
Merge branch 'main' into feat-scripts-char-limit 2024-03-05 10:49:43 -05:00
Gabriel Hernandez
252848720c
Fix for mdm solution rollup to handle empty string for rollup correctly. (#17366)
relates to #17335

This fixes the issue with empty strings for mdm solution names. I also
cleans up a bit around the code and typing for this feature.

- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-03-05 15:48:55 +00:00
Martin Angers
0bb6d45596
Merge branch 'main' into feat-scripts-char-limit 2024-03-05 10:10:04 -05:00
Sarah Gillespie
c29f0abf92
Update API and CLI to enable running scripts by name and team id (#17322)
TODO:
- Integration tests

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any permissions changes (docs/Using
Fleet/manage-access.md)
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-03-05 08:53:17 -06:00
Martin Angers
16ba308039 Store script contents for wipe host via script 2024-03-05 08:51:57 -05:00