Commit graph

410 commits

Author SHA1 Message Date
Mo Zhu
28654a352a
document docker 4.17 package generation error (#12485)
Part of https://github.com/fleetdm/fleet/issues/10700
2023-06-28 11:33:31 -07:00
Dave Herder
0bdee0d079
Update REST-API.md (#12515) 2023-06-28 10:02:02 -07:00
Martin Angers
f641c3ec57
Add activities when Windows MDM is turned on/off (#12533) 2023-06-28 12:53:46 -04:00
Marcos Oviedo
821f6b064f
Adding support for GetPolicies message (#12477)
This relates to #12262 

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality
2023-06-27 12:59:33 -03:00
Marcos Oviedo
22bb16bf2e
Pushing initial support for MS-MDE2 Discovery message (#12387)
This PR requires the Windows MDM configuration changes - This will be
updated next week

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [x] Documented any permissions changes
- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
2023-06-22 17:31:17 -03:00
Dave Herder
08a0a4ec48
Update Security-audits.md (#12057) 2023-06-21 11:26:49 -07:00
Martin Angers
1c249b60da
Add support to configure and enable Windows MDM, notify elegible hosts (#12340) 2023-06-20 14:06:45 -04:00
Eric
dacabef2fd
Docs: Fix broken link in MDM setup documentation (#12399)
Changes:
- `(business.apple.com)[https://business.apple.com]` »
`[business.apple.com](https://business.apple.com)`
2023-06-20 11:16:21 -05:00
Sharon Katz
da71da3e63
CIS Windows documentation (#12307)
Co-authored-by: Mo Zhu <mo@fleetdm.com>
Co-authored-by: Rachael Shaw <r@rachael.wtf>
2023-06-16 13:14:23 -04:00
Rachael Shaw
74af345f74
Docs: fix heading indentation (#12373)
Added a newline to fix "List all sofware" heading indentation on the
website:
<img width="816" alt="Screenshot 2023-06-15 at 4 22 36 PM"
src="https://github.com/fleetdm/fleet/assets/3065949/4a0cc555-18c5-470b-8879-c535988b3243">
2023-06-15 19:03:30 -05:00
Lucas Manuel Rodriguez
517acdad72
Add guide to configure process_file_events on CentOS 7 (#12322)
#11890

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
2023-06-14 18:23:47 -03:00
Martin Angers
68fa60c54d
Add a transferred_hosts activity when hosts are transferred to a new team (#12287) 2023-06-14 08:15:05 -04:00
Rachael Shaw
d970a02723
Update MDM-migration-guide.md (#12326)
Fixes a couple spots where "&lt;organization&gt;" wasn't displaying
because it was treated as a custom HTML element (and also fixes a
front-end error from Vue)
2023-06-13 18:50:02 -05:00
Rachael Shaw
095d907e8b
Fix title formatting in nav for ChromeOS doc page (#12278)
Added <meta> tag with correct capitalization for the page title.
2023-06-12 11:20:35 -05:00
RachelElysia
d1e085f7ab
Fleet docs: Clarify to use chrome extension only on ChromeOS (#12266)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Documented any permissions changes
2023-06-09 12:12:14 -07:00
Lucas Manuel Rodriguez
ed92176194
smtp_settings and sso_settings are not returned to non-global-admins anymore (#12256)
#12248
2023-06-09 15:29:11 -03:00
Mo Zhu
50746c6b48
Chrome docs (#11747) 2023-06-09 10:03:01 -07:00
Lucas Manuel Rodriguez
2a532ede94
Do not return empty SSO and SMTP settings for non-global-admins (#12180)
#11266

PS: I first attempted a serialization trick by introducing a new
`appConfigResponse` and implementing `json.Marshal` to exclude these
fields but it was too hacky and hard to maintain moving forward, so I'm
bitting the bullet now. Happy to hear other ideas.

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- ~[ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)~
- ~[ ] Documented any permissions changes~
- ~[ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)~
- ~[ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.~
- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality
  - ~For Orbit and Fleet Desktop changes:~
- ~[ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.~
- ~[ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).~
2023-06-07 16:06:36 -03:00
Martin Angers
f390055847
Fix table formatting of fleetctl get mdm-command-results output (#12197) 2023-06-07 14:35:48 -04:00
Martin Angers
68ddaafac0
Fix bug preventing gitops role from fleetctl applying macos setup assistant (and bootstrap package) (#12193) 2023-06-07 13:29:36 -04:00
Dave Herder
155f3f37eb
Update MDM-migration-guide.md (#12119)
Added clarification about the end user experience when walking through
migration in manual vs. automatic enrollment workflows.
2023-06-06 10:38:49 -07:00
gillespi314
372c77ff23
Add backend for verified MDM profiles (#12078) 2023-06-05 12:05:28 -05:00
Dave Herder
4a19f4954a
Update Application-security.md (#12100)
adding reference to SDLC
2023-06-02 10:09:15 -07:00
Luke Heath
b9f0b6336e
Update host summary example response payload (#12103) 2023-06-02 09:55:11 -05:00
Martin Angers
2f59a8cde1
MDM docs: Instructions for viewing recent MDM commands (#12006)
- Add section for viewing recent MDM commands using fleetctl get mdm-commands
- Add example output for fleetctl get mdm-commands and fleetctl get mdm-command-results
2023-06-02 09:46:12 -04:00
Eric
ac8cd8e024
Website: Throw error if Markdown content contains a Vue template (#12096)
Changes:
- Updated the build-static-content script to throw an error if a
Markdown file contains a vue template (e.g., `{{ foo }}`)
- Updated an example in the "Using Fleet" FAQ to use single curly
brackets (`{{host}} ` » `{host}`)


Context: https://github.com/fleetdm/fleet/pull/12088
2023-06-01 14:06:02 -05:00
Lucas Manuel Rodriguez
03ce7dd940
Add guide to help troubleshoot live queries (#12082)
This guide are the lessons learned during the troubleshooting for
#10957.
It attempts to reduce pain for future oncall issues with live queries.

PS: AFAICS, this should close
https://github.com/fleetdm/fleet/issues/6141.
2023-06-01 14:27:58 -03:00
Juan Fernandez
43ab81ee11
Feature 11829: Tailor host table response to ChromeOS (#12002)
Updated ingestion logic and fixed ChromeOS virtual tables to accommodate the requested UI changes.
2023-05-30 22:13:42 -04:00
Lucas Manuel Rodriguez
33d61044b5
Change role of existing users only if SSO attributes are present in the SAMLResponse (#11966)
#10784

The removal of the now deprecated `sso_settings.enable_jit_role_sync`
config will be tackled in: #10688.

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- ~[ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)~
- ~[ ] Documented any permissions changes~
- ~[ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)~
- ~[ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.~
- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality
  - ~For Orbit and Fleet Desktop changes:~
- ~[ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.~
- ~[ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).~
2023-05-30 17:49:59 -03:00
Eric
d5f26fce89
Docs: Fix permission table headers (#11659)
Closes #11640 
Changes: 
- Removed the whitespace in between the permission role names and the
asterisk that was causing the table header to have a linebreak in the
permission roles table.
2023-05-30 12:24:53 -05:00
Mo Zhu
e1a0021e7a
remove address column from network_interfaces chromeos table (#11787)
Co-authored-by: Zach Wasserman <zach@fleetdm.com>
2023-05-26 16:47:19 -05:00
Rachael Shaw
344bd27218
Fix heading indentation in "Configuration files" docs (#11618)
Added an extra line before one of the section headings so it will align
with the content below and not the list items above it:
![Screenshot 2023-05-10 at 12 39 47
PM](https://github.com/fleetdm/fleet/assets/3065949/4ddf013e-97a3-4a60-bab0-b38d12a19e3e)

Co-authored-by: Eric <eashaw@sailsjs.com>
2023-05-25 12:02:51 -05:00
Mo Zhu
d74a15642d
convenience link to team schedule in REST API docs (#11782) 2023-05-19 11:44:27 -07:00
Eric
a0876fe892
Docs: Update endpoint used for add users to a team example (#11658)
Closes #11436
Changes:
- Updated the example used for adding users to a team in the Rest API
docs.

---------

Co-authored-by: Luke Heath <luke@fleetdm.com>
2023-05-18 17:01:50 -05:00
Juan Fernandez
009a87d33e
Feature 10196: Add filepath to end-points and third party integrations (#11285)
Adds the software installed path property to the proper end-points and third party integrations (webhook, Zendesk and Jira).
2023-05-17 16:53:15 -04:00
Noah Talerman
7f61c82910
MDM docs: Custom macOS settings (#11713)
Changes address the feedback below:

> Disk encryption docs should say that you shouldn’t use custom settings
to enforce disk encryption (prevent user from trying to do filevault via
imazing)

I decided not to call this out in the docs because this is handled by
the product. The UI (and CLI) show this error if the user tries to use
custom settings to enforce disk encryption:
![Screenshot 2023-05-16 at 9 48 59
AM](https://github.com/fleetdm/fleet/assets/47070608/d5f5de9b-f3c2-4b4f-b8a0-30fbf5292b9e)

> Custom settings docs says randomly that it only works for macOS.
Should be obvious. No need to state?

I removed sentence about Fleet only supporting macOS
2023-05-17 11:34:19 -07:00
Reed Haynes
feeae2ad0c
Update require password reset REST-API.md (#11718)
For #11279.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
2023-05-17 11:09:31 -05:00
Rachael Shaw
7f881f2765
Docs: Add stub for section about adding hosts on ChromeOS (#11728)
Added [a new
section](https://www.figma.com/file/hdALBDsrti77QuDNSzLdkx/%F0%9F%9A%A7-Fleet-EE-(dev-ready%2C-scratchpad)?type=design&node-id=16041%3A205158&t=61RnyHFztxjth1BT-1)
to "Adding hosts" to prepare for #10585 🔮
2023-05-16 16:51:26 -05:00
RachelElysia
cdf5843e76
Fleet UI Bug fix: Team admin/maintainer do not see save button for global policies (#11673) 2023-05-16 13:18:29 -04:00
gillespi314
ceeb4c1ed5
Add mdm.macos_migration to app config endpoints (#11694) 2023-05-15 11:50:07 -05:00
Marko Lisica
f20cacc10f
Update REST API docs for activities (#11691)
Current REST API documentation for activities is outdated. Since we have
automatically generated documentation for activity types on the Audit
activities page, with all the necessary details I think it's a good idea
to link REST API docs to this one.

REST API docs will have a description of what will be returned with
example and specific information about each activity type can be found
on the Audit activities page, which is always up-to-date.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-05-15 18:35:29 +02:00
Jacob Shandling
70f5b2e444
Update Permissions.md (#11440)
- Specify that MDM commands are CLI-only
2023-05-15 09:55:29 -04:00
Zay Hanlon
b9c05238f4
Update fleetctl-CLI.md (#11646)
Adding instructions for creating GitOps user to make it clearer for
customers (based on feedback from Epic)
2023-05-11 15:32:15 -04:00
Jacob Shandling
28600be584
Clarify permission description (#11438)
Clarify the descriptions of two permission
2023-05-11 12:24:10 -07:00
Jacob Shandling
59211901bf
Update MDM-commands.md (#11439)
copy edit
2023-05-11 12:23:55 -07:00
gillespi314
a9584dc32f
Allow end user authentication during automatic MDM enrollment to be enabled on a per-team basis (#11566) 2023-05-10 15:22:08 -05:00
Gabriel Hernandez
a6df488f0e
add more details to detail query docs (#11501)
quick doc update to add a bit more context around detail queries
2023-05-09 16:58:57 +01:00
Noah Talerman
a9f335edec
MDM docs: Update bootstrap package docs (#11526)
- Clarify that Fleet uses the URL to upload the package to Fleet
2023-05-05 14:31:27 -07:00
Mo Zhu
cc2773afbf
Update MDM-disk-encryption.md based on some beta feedback (#11474)
* Be more explicit about sending migration instructions to end users
* Be explicit about activity being logged when disk encryption key is
viewed
2023-05-03 14:14:40 -04:00
Mo Zhu
0ffba95b15
Fix sub-bulleted list in MDM migration guide (#11473) 2023-05-03 10:39:44 -04:00