Commit graph

562 commits

Author SHA1 Message Date
Sam Pfluger
40bd4ccc45
Updating confidential maintainers (#38668)
Removed 'sampfluger88' from '.github/workflows' code owners and added
code owner assignments for various issue templates, specifying
responsible users for each template.
2026-01-22 21:58:18 -06:00
Isabell Reedy
7470f8bac5
Update custom.js maintainers (#38591)
Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2026-01-21 14:03:54 -06:00
Isabell Reedy
fcac359298
Handbook: org and responsibilities update (#38527)
Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2026-01-20 17:20:16 -07:00
Harrison Ravazzolo
fa59f05e03
Update link for renew apns doc (#38550)
Fix for broken link in Fleet - resolves
https://github.com/fleetdm/fleet/issues/38545
2026-01-20 17:52:33 -05:00
Sam Pfluger
c5c901a063
Update CODEOWNERS and custom.js for handbook ownership (#38490)
Moved several handbook path ownerships from CODEOWNERS to custom.js and
added corresponding entries in custom.js. Updated reviewer lists for
CODEOWNERS and custom.js files to include 'ireedy'. Adjusted ownership
for specific handbook sections to reflect current maintainers.
2026-01-19 12:22:17 -06:00
Sam Pfluger
a9e70c288b
Update contributors for various handbook sections (#38358) 2026-01-14 19:16:23 -06:00
Rachael Shaw
bcf5ebd019
Preview of v4.79.0 doc changes (#35930)
This PR will remain in draft as a preview of upcoming documentation
changes for 4.79.0

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
Co-authored-by: Marko Lisica <83164494+marko-lisica@users.noreply.github.com>
Co-authored-by: Magnus Jensen <magnus@fleetdm.com>
Co-authored-by: Ian Littman <iansltx@gmail.com>
Co-authored-by: Lucas Manuel Rodriguez <lucas@fleetdm.com>
Co-authored-by: melpike <79950145+melpike@users.noreply.github.com>
Co-authored-by: Steven Palmesano <3100993+spalmesano0@users.noreply.github.com>
Co-authored-by: Carlo <1778532+cdcme@users.noreply.github.com>
2026-01-14 14:47:06 -06:00
Lucas Manuel Rodriguez
ad31353efe
Update osquery schema and flags to 5.21.0 (#38248) 2026-01-14 09:29:45 -03:00
Noah Talerman
1bf72537f5
Clarify confusing "pending" behavior and fix broken link (#37902)
- Profiles are stuck in "pending" when APNs expires:
https://github.com/fleetdm/fleet/issues/37842#issuecomment-3715273644
2026-01-14 20:08:12 +09:00
Eric
7f23411c94
Website: Update VPP proxy endpoints (#38203) 2026-01-13 18:06:10 -06:00
Eric
35772b6ddc
Website: (Microsoft compliance proxy) Add support for multiple compliance partner shared secret config variables. (#38284)
Related to: https://github.com/fleetdm/confidential/issues/13468

Changes:
- Updated the `is-cloud-customer` policy to support a second compliance
partner shared secret config variable.
2026-01-13 17:24:40 -06:00
Sam Pfluger
1d8fa437e5
Update code owners for various files (#38295) 2026-01-13 17:04:41 -06:00
Marko Lisica
3f54635257
Add route for deploying self-service to iOS (#37702) 2026-01-13 15:04:57 -05:00
Eric
5219adb7b3
Website: update contact form for applications (#38125)
Changes:
- Updated the contact form to have a third form for job applications.
The form is only shown to users who visit the page with the `#apply`
hash.
- Added `deliver-application-submission` an action that sends
information from job application submissions to a zapier webhook.
- Updated the link to the contact form on the open positions template
page to link to /contact#apply
2026-01-12 11:01:02 -06:00
Mike McNeil
ce139eda61
Handbook: Consolidate writing.md page (#38143) 2026-01-10 13:04:17 -06:00
Eric
74b32889c8
Website: update VPP metadata proxy route (#38047)
Changes:
- Updated the route for the
`vpp-proxy/register-one-fleet-instance-using-vpp` action to be at
`/api/vpp/v1/auth`
2026-01-08 14:38:39 -06:00
Eric
b3bd4686a3
Website: Add VPP metadata proxy (#37997)
For https://github.com/fleetdm/fleet/issues/37261

Changes:
- Added a new database model: `FleetInstanceUsingVpp`
- Added `/api/vpp/v1/register`: An API endpoint that validates provided
Fleet license keys, creates a database record for the proxy
registration, and returns a generated secret used to authenticate
requests to the other VPP proxy endpoint
- Added `/api/vpp/v1/metadata/:storeRegion`: An API endpoint that
forwards requests to the
`https://api.ent.apple.com/v1/catalog/${storeRegion}/stoken-authenticated-apps`
Apple API with a token generated using Fleet's Apple developer
credentials.

---------

Co-authored-by: Ian Littman <iansltx@gmail.com>
2026-01-08 11:29:53 -06:00
Lucas Manuel Rodriguez
21588870b3
Update URL for Apple updates (#37409) 2025-12-17 18:25:26 -03:00
Rachael Shaw
f4828db816
Website: Add redirect for disabling Okta conditional access (#37303)
Currently points to a heading that doesn't exist, but will be in the
updated guide when the feature is released.
2025-12-15 16:31:58 -06:00
Eric
fa27fda724
Website: Add case study article template page and three articles (#37153)
Changes:
- Updated the website's build-static-content script to add support for a
new article category: `case study`.
- Added a new article template page for case study articles
- Added case study articles from Stripe, Faire, and Foursquare.

---------

Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
2025-12-12 13:37:16 +09:00
Steven Palmesano
7fb0ab105a
Windows MDM migration notification (#36525)
Related to https://github.com/fleetdm/confidential/issues/12925

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2025-12-08 14:10:46 -06:00
Marko Lisica
c9d997e69e
Update URL for unsigning configuration profiles guide (#36860)
I tested this and link redirects to "Enforce" section. "Create
configuration profile" section has all the information about signed
profiles.

Related to: #26688

<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #
2025-12-08 21:00:27 +01:00
Eric
44c707734d
Website: Update version of osquery schema used to build osquery_fleet_schema.json (#36727)
Closes: https://github.com/fleetdm/fleet/issues/36620

Changes:
- Updated the website to use the osquery 5.20.0 schema when generating
osquery table documentation pages and osquery_fleet_schema.json
- Regenerated osquery_fleet_schema.json
2025-12-05 12:10:30 -06:00
jacobshandling
26b33f37aa
Add missing website redirect (#36732)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #36731 

- [x] Changes file added for user-visible changes in `changes/`
- [x] QA'd all new/changed functionality manually
2025-12-05 08:54:10 -08:00
Rachael Shaw
c7c8e722c9
Placeholder for Okta conditional access guide (#36722)
This creates a stub for the upcoming Okta conditional access feature
guide, and gets the redirects in place so QA can test the links.

<img width="1624" height="1060" alt="Screenshot 2025-12-04 at 5 27
17 PM"
src="https://github.com/user-attachments/assets/f277ac39-93da-4a28-a7a1-5a7998700e63"
/>
2025-12-05 09:55:03 -06:00
Eric
ef355d5cd4
Website: add Fleet-maintained apps for Windows to /software-catalog (#36653)
Closes: https://github.com/fleetdm/fleet/issues/35983

Changes:
- Updated the Fleet website's `builtStaticContent.appLibrary`
configuration to include Fleet-maintained apps for Windows
- Added platform filters and Windows apps to the /software-catalog page
- Updated the URLs for Fleet maintained app detail pages to include the
app's platform, and added redirects for all changed URLs.
2025-12-04 12:02:05 -06:00
Marko Lisica
34db806d56
Explain behavior of unmanaged profiles (#36416)
Related to:

- #34879
2025-12-03 18:25:02 -05:00
Eric
438baad6cb
Website: add /fast-track page (#36601)
Closes: https://github.com/fleetdm/confidential/issues/11222

Changes:
- Added a new page for Fleet Fast-track (/fast-track)
2025-12-03 17:10:14 -06:00
Eric
a7cbc405fa
Website: Update routes (#36612)
Changes:
- Added a redirect for the updated "Install app store apps" guide.
- Removed `csrf: false` from three Android proxy endpoints. (CSRF does
not apply to GET routes)
2025-12-02 17:40:41 -06:00
Rachael Shaw
25191f3054
Preview of v4.77.0 doc changes (#35924)
This PR will remain in draft as a preview of upcoming documentation
changes for 4.77.0

---------

Co-authored-by: Marko Lisica <83164494+marko-lisica@users.noreply.github.com>
Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
Co-authored-by: Victor Lyuboslavsky <2685025+getvictor@users.noreply.github.com>
Co-authored-by: Ian Littman <iansltx@gmail.com>
Co-authored-by: Noah Talerman <noahtal@umich.edu>
Co-authored-by: Lucas Manuel Rodriguez <lucas@fleetdm.com>
Co-authored-by: Magnus Jensen <magnus@fleetdm.com>
Co-authored-by: Jordan Montgomery <elijah.jordan.montgomery@gmail.com>
Co-authored-by: Janis Watts <184028114+jmwatts@users.noreply.github.com>
Co-authored-by: Allen Houchins <32207388+allenhouchins@users.noreply.github.com>
Co-authored-by: Gabriel Hernandez <ghernandez345@gmail.com>
Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
Co-authored-by: Scott Gress <scottmgress@gmail.com>
Co-authored-by: Carlo <1778532+cdcme@users.noreply.github.com>
2025-12-02 17:24:15 -06:00
Marko Lisica
b8cad36eb1
Learn more link for configuration profiles error (#36588)
Related to: #34962
2025-12-02 12:50:04 -05:00
Eric
6cfb251c81
Website: update banned email domain list (#36535)
Changes:
- Added two domains to the `bannedEmailDomainsForWebsiteSubmissions`
list
2025-12-01 18:20:28 -06:00
Noah Talerman
9afd842af5
Fix broken UI redirect (#36506)
Link on the **Controls > Setup experience > Setup Assistant** page:

<img width="1263" height="316" alt="Screenshot 2025-12-01 at 1 41 47 PM"
src="https://github.com/user-attachments/assets/33180168-dbb8-4181-985b-f025d9dd2aa3"
/>
2025-12-01 19:16:10 -05:00
Mike McNeil
c4dc63a5ef
Add Ashish and John as auto-approvers for html edits (#36390) 2025-11-26 20:46:15 -06:00
Eric
f8a3f09460
Website: Move Fleet subscription terms and privacy policy to the Fleet website. (#36001)
Closes: https://github.com/fleetdm/fleet/issues/32373

Changes:
- Added Markdown versions of the Fleet's subscription terms and privacy
policy Google docs to a new folder (`legal/`) inside the
`handbook/company/` folder. (Note: These pages are not accessible from
the handbook.)
- Added pages that display the two Markdown files rendered as HTML
(`/legal/terms` and `/legal/privacy`)
2025-11-26 16:27:37 -06:00
Magnus Jensen
237105728e
Reduce API Android usage (#36209)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #36138 

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

## Testing

- [x] Added/updated automated tests
- [x] QA'd all new/changed functionality manually

---------

Co-authored-by: Jordan Montgomery <elijah.jordan.montgomery@gmail.com>
2025-11-25 09:39:06 -03:00
Eric
5fb3669d01
Website: Update error handler in http config (#36155)
Closes: https://github.com/fleetdm/fleet/issues/36127

Changes:
- Updated the middlewareErrorHandler in the website's http config to
send 412 responses for `PreconditionFailedError` errors.
2025-11-21 15:04:50 -06:00
Mike McNeil
9d42baaf0e
DRIs: Update custom.js (#36074) 2025-11-20 11:13:54 -08:00
Marko Lisica
1d2abe0032
Fix broken link (#35973)
Apple's URL doesn't work anymore.
2025-11-19 18:20:43 +01:00
Noah Talerman
6e635e7888
Delete Entra modal: Update instructions (#35874)
Deleting Microsoft Entra ID doesn't unblock end users. Instead, to
unblock, the IT admin has to disable the "Conditional Access" policy in
Entra.

Context: https://github.com/fleetdm/fleet/pull/35632/files#r2524534037
2025-11-18 06:45:24 -08:00
Luke Heath
093a54b959
Add Allen as maintainer for FMA (#35849) 2025-11-17 14:15:47 -06:00
Allen Houchins
333e40a004
Update DRI for Fleet-maintained apps (#35784)
- @georgekarrv => @allenhouchins

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2025-11-14 16:50:43 -06:00
Noah Talerman
1c1e19197c
Contributing Fleet-maintained apps (#35235)
- Simplify steps. Why? Fewer handoffs / approvals
- #g-software EM reviews all PRs within 3 business days
- Commit to automated tests. No need to do manual testing because the CI
already installs the app and checks, via osquery, if the
install/uninstalls worked
- Remove issue template

Why now?
- https://github.com/fleetdm/confidential/issues/12844

---------

Co-authored-by: Martin Angers <martin.n.angers@gmail.com>
Co-authored-by: George Karr <georgekarrv@users.noreply.github.com>
2025-11-14 10:12:24 -06:00
Jahziel Villasana-Espinoza
ff0ba413b7
Android app self service: backend support (#34711)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #34389

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)

## Testing

- [x] Added/updated automated tests
- [x] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)
- [x] QA'd all new/changed functionality manually

## Database migrations

- [x] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [x] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
2025-11-13 18:10:24 -05:00
Eric
739fce4ddd
Website: Update email domains in config.custom.bannedEmailDomainsForWebsiteSubmissions (#35558)
Related to: https://github.com/fleetdm/confidential/issues/10999

Changes:
- added domains to the list of personal email domains that cannot be
used to submit forms on the Fleet website, and sorted the list
alphabetically.
2025-11-11 18:44:19 -06:00
Rachael Shaw
86b80e28ed
Documentation v4.76.0 (#34943)
Documentation changes for the 4.76 release
2025-11-11 09:30:14 -05:00
Eric
fef609ce13
Website: Update Fleet Premium trial management script (#35472)
Closes: #33798
Closes: #35223
Related to: https://github.com/fleetdm/fleet/issues/34618
Related to: https://github.com/fleetdm/fleet/issues/34611

Changes:
- Updated the `manage-fleet-premium-trial-instances` script to:
- Send a request to the Github API to trigger a workflow to create a DNS
and SES configuration for new Render trial instances, and send a request
to trigger a workflow to delete the DNS and SES configuration when trial
instances expire
- Use a new prompt to generate unique slugs for new Render trial
instances
   - Configure SES on new Fleet Premium trial instances
- Prefix licenses generated for Fleet Premium trial instances with
'Render-trial-`
2025-11-10 18:16:35 -06:00
Eric
68d236aca6
Website: add Okta conditional access error page (#35355)
Closes https://github.com/fleetdm/fleet/issues/34902

Changes:
- Added /okta-conditional-access-error
2025-11-07 15:36:03 -06:00
Marko Lisica
10e6b0d638
Add instructions for deleting Android Enterprise (#34339)
Added section on deleting Android Enterprise in Google Admin.

I'll use this new title to link in the UI, inside the banner when user
deletes Android Enterprise in Google Admin.

Related to:
https://github.com/fleetdm/fleet/issues/34152#issuecomment-3407854195
2025-11-04 12:20:24 +01:00
Ian Littman
7f5652daff
Remove previews, add preview links, make copy tweaks to setup experience configuration UI (#34980)
Fixes #34530 and #34452. idP config is in a subsequent commit and will
handle the dangling path added here.

<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

## Testing

- [x] QA'd all new/changed functionality manually
2025-10-30 17:32:06 -05:00