Commit graph

441 commits

Author SHA1 Message Date
Luke Heath
d7f6ddb6d0
Adding changes for Fleet v4.65.0 (#26698) (#27166) 2025-03-18 11:18:10 -05:00
Robert Fairburn
cb9289942c
Dogfood tfvalidate (#27077) 2025-03-12 12:18:52 -05:00
Robert Fairburn
f32f80261a
Add cloudfront to dogfood (#26962) 2025-03-12 10:59:39 -05:00
Luke Heath
df60b75f2e
Adding changes for Fleet v4.64.2 (#26850) (#26857) 2025-03-05 11:40:16 -06:00
Luke Heath
658330d4f4
Enable Android in dogfood (#26735) 2025-02-28 16:26:11 -06:00
Lucas Manuel Rodriguez
ae00add76e
Update alpine to patch vulnerability with severity "HIGH" (#26593)
The vulnerability was posted by a prospect.

Posting manual command until we get #25902 done.
```sh
trivy image --ignore-unfixed --pkg-types os,library --severity CRITICAL,HIGH --show-suppressed fleetdm/fleet:v4.64.1
[...]
fleetdm/fleet:v4.64.1 (alpine 3.21.0)

Total: 2 (HIGH: 2, CRITICAL: 0)

┌────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬──────────────────────────────────────────────────────────┐
│  Library   │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                          Title                           │
├────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼──────────────────────────────────────────────────────────┤
│ libcrypto3 │ CVE-2024-12797 │ HIGH     │ fixed  │ 3.3.2-r4          │ 3.3.3-r0      │ openssl: RFC7250 handshakes with unauthenticated servers │
│            │                │          │        │                   │               │ don't abort as expected                                  │
│            │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-12797               │
├────────────┤                │          │        │                   │               │                                                          │
│ libssl3    │                │          │        │                   │               │                                                          │
│            │                │          │        │                   │               │                                                          │
│            │                │          │        │                   │               │                                                          │
└────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴──────────────────────────────────────────────────────────┘
```
2025-02-25 18:33:24 -03:00
Noah Talerman
a14fd0d263
Terraform cleanup (#26379)
- Remove `dogfood/aws/` folder
- Update links in docs and guides
2025-02-24 17:35:50 -05:00
George Karr
4a03051c10
Adding changes for Fleet v4.64.1 (#26491) 2025-02-20 19:39:26 -06:00
Robert Fairburn
15a19f8d31
Increase snapshot retention for rds in dogfood (#26454) 2025-02-20 11:30:33 -06:00
George Karr
076fe894c5
Adding changes for Fleet v4.63.1 (#26471) 2025-02-20 10:02:42 -06:00
Jahziel Villasana-Espinoza
6e3d6ddc66
fix: add a troubleshooting update to the loadtesting docs (#26415)
> no issue. something I ran into the last loadtest I ran.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Manual QA for all new/changed functionality
2025-02-18 11:04:49 -05:00
Martin Angers
efee4906f2
Add links to key metrics doc and spreadsheet in the load test readme (#26288) 2025-02-17 08:36:34 -05:00
Robert Fairburn
bc5406be7e
Setup dogfood to use fleet-terraform repo (#26199)
Note this has been applied from the branch and is required to merge
before applying dogfood from main going forward. This should
significantly speed up deployments from the clone speed difference.

Only the latest versions of modules have been migrated to the new repo,
so all the module versions needed updated in dogfood.
2025-02-10 18:42:14 -06:00
Luke Heath
5e83ba6cc8
Adding changes for Fleet v4.63.0 (#25433) 2025-02-04 13:55:00 -06:00
Robert Fairburn
e3bdc4bcbb
Update loadtesting snapshot (#25495) 2025-01-30 10:38:46 -06:00
George Karr
9e5ecfb1bc
Adding changes for Fleet v4.62.3 (#25768)
Co-authored-by: Robert Fairburn <8029478+rfairburn@users.noreply.github.com>
2025-01-29 07:49:45 -06:00
Lucas Manuel Rodriguez
af837906e1
Revert temporary settings (#25840) 2025-01-28 17:02:50 -06:00
Lucas Manuel Rodriguez
3eb0663a73
Temporary change of ADE/Autopilot URL for edge testing (#25823) 2025-01-28 16:14:51 -03:00
Harrison Ravazzolo
81b959a390
update logging dest (#25473)
Co-authored-by: Harrison John <harrisonjohn@Harrisons-MacBook-Pro.local>
2025-01-24 02:51:17 -06:00
Lucas Manuel Rodriguez
148d914f01
Optimize software_titles query to use indexes (#25722)
For #25160.

Measured improvement by splitting the MySQL query into two queries to
use the indexes more efficiently:
- ~8s vs ~100ms for ~30k entries in software_titles for ~1.7k incoming
software without bundle_identifier (linux software).
- ~1.64s vs ~2ms for 25k entries in software_titles and ~500 incoming
new software with bundle_identifier + ~200 new software without
bundle_identifier (macOS software).

---

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [X] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [X] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [X] Added/updated automated tests
- [x] A detailed QA plan exists on the associated ticket (if it isn't
there, work with the product group's QA engineer to add it)
- [X] Manual QA for all new/changed functionality
2025-01-23 15:48:21 -03:00
Luke Heath
ce012687cc
Adding changes for Fleet v4.62.2 (#25564) 2025-01-17 14:55:09 -06:00
Scott Gress
5f2b339429
Bump dogfood cron monitoring to v1.5.1 (#25278)
@rfairburn at your convenience, after tagging
https://github.com/fleetdm/fleet/pull/25268 plz approve and merge.
2025-01-16 10:46:49 -06:00
George Karr
a672ff8f1d
Adding changes for Fleet v4.62.1 (#25417) 2025-01-14 15:19:54 -06:00
Luke Heath
4cca22384d
Adding changes for Fleet v4.62.0 (#25092)
Ready for review.
2025-01-13 16:23:26 -06:00
Robert Fairburn
8449879c81
Changes needed for new dogfood monitoring (#25147) 2025-01-06 10:34:36 -06:00
Scott Gress
9181ba7053
Update Dogfood monitoring to v1.5 (#24425) 2025-01-03 16:24:01 -06:00
Luke Heath
ace2fa3f9f
Adding changes for Fleet v4.61.0 (#24407) (#24904) 2024-12-19 10:09:22 -06:00
Robert Fairburn
cc2faac781
Add JSON logging to loadtesting (#24808) 2024-12-16 17:09:17 -05:00
Robert Fairburn
990700acd4
Fix deprecation with terraform init (#24571) 2024-12-09 16:20:40 -06:00
Ian Littman
07852b4c60
Bump Go version from 1.23.1 to 1.23.4, Alpine on Docker images from 3.20 to 3.21 (#24518)
Kept the Debian-based image at Bullseye.

For #24517.

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality: Validated builds
(Docker and make) all work after this change, except for BitLocker
(requires Windows).
2024-12-09 11:06:07 -06:00
George Karr
d0cb6b8629
Adding changes for Fleet v4.60.1 (#24332) 2024-12-04 18:16:27 -06:00
Luke Heath
b312bb99e5
Adding changes for Fleet v4.60.0 (#23817) (#24294) 2024-12-03 10:03:37 -06:00
Luke Heath
5ff65462ca
Remove kubequery as no longer usable reference (#24291) 2024-12-02 16:24:20 -06:00
Robert Fairburn
6e5af7752a
Increase idle timeout for ALB to 15m across all configs (#23939) 2024-11-20 10:57:37 -06:00
Luke Heath
22ff5013e8
Adding changes for Fleet v4.59.1 (#23862) (#23929) 2024-11-18 16:30:23 -06:00
Luke Heath
ae92a7036f
Adding changes for Fleet v4.59.0 (#23292) (#23731) 2024-11-13 13:39:53 -06:00
Robert Fairburn
e20820dfe5
Deploy to free.fleetdm.com before dogfood (#23762) 2024-11-13 11:17:23 -06:00
Luke Heath
fdaf7be3ad
Prepare Fleet v4.58.0 (#22961) 2024-10-17 17:53:46 -05:00
Luke Heath
8979e8ff1b
Prepare Fleet v4.57.3 (#22869) (#22871) 2024-10-11 14:42:16 -05:00
George Karr
96771f46f4
Adding changes for Fleet v4.57.2 (#22599) 2024-10-04 10:21:46 -05:00
Robert Fairburn
54f209d338
Replace all lb idle timeouts with 605s (#22597) 2024-10-02 18:51:48 -05:00
George Karr
f7fc22d766
Adding changes for Fleet v4.57.1 (#22537) 2024-10-01 10:37:19 -05:00
Luke Heath
c51c20a10b
Adding changes for Fleet v4.57.0 (#22109) (#22327) 2024-09-23 19:02:23 -05:00
Robert Fairburn
631dc6075d
add s3 installers to loadtest (#22306) 2024-09-23 13:28:23 -05:00
Luke Heath
42b322e666
Fix changelog 4.56.0 (#21895) (#21901) 2024-09-11 10:19:01 -05:00
Roberto Dip
5df6db808a
update loadtesting documentation for OTA (#21950)
thiw new env var is being added in
https://github.com/fleetdm/fleet/pull/21942
2024-09-10 14:44:51 -03:00
Roberto Dip
92c6c26d40
update to go1.23.1 (#21868)
for #21440

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
2024-09-06 09:11:30 -03:00
Roberto Dip
08783b1a12
adjustments to support 60k MDM hosts after load testing (#21247)
for https://github.com/fleetdm/fleet/issues/20007
2024-08-26 15:20:57 -03:00
Roberto Dip
48e7066042
update Go to 1.22.6 (#21201)
for #21198

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
2024-08-26 10:50:14 -03:00
Tim Lee
3aa68aecc6
Bump Loadtest Aurora Version (#21395) 2024-08-19 10:32:01 -06:00
Robert Fairburn
07314c8d04
Update dogfood aurora version to latest (#21224) 2024-08-13 10:00:34 -05:00
Sam Pfluger
9325bca9c1
Fix sentence case (#21077) 2024-08-06 00:16:33 -05:00
Sharon Katz
95fc48c110
Adding changes for Fleet v4.54.1 (#20719) 2024-07-25 15:02:19 -04:00
Benjamin Edwards
e52f6c8291
update GCP terraform code to be compatible with software installers updates (#20585) 2024-07-22 11:23:44 -04:00
Luke Heath
1032841800
Adding changes for Fleet v4.54.0 (#20280) (#20561) 2024-07-17 16:50:26 -07:00
George Karr
415b0a7710
Adding changes for Fleet v4.53.1 (#20130)
Co-authored-by: Robert Fairburn <8029478+rfairburn@users.noreply.github.com>
2024-07-01 14:02:22 -05:00
Luke Heath
972988e39b
Adding changes for Fleet v4.53.0 (#19965) 2024-06-28 14:21:58 -07:00
Roberto Dip
2a9be32ffa
update Go to go1.22.4 (#19958)
for #19844

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
2024-06-25 10:55:36 -03:00
George Karr
2106767860
Adding changes for Fleet v4.52.0 (#19916) 2024-06-24 15:58:58 -05:00
Robert Fairburn
21207dab81
Disable osquery sidecar dogfood (#19764) 2024-06-14 10:10:03 -07:00
Robert Fairburn
41720df5a3
Update dogfood to fix carves to s3 (#19728) 2024-06-13 11:11:56 -05:00
George Karr
5af2f9751a
Adding changes for Fleet v4.51.1 (#19649)
Co-authored-by: Luke Heath <luke@fleetdm.com>
2024-06-12 16:27:18 -05:00
Benjamin Edwards
8742f886d2
Render installer store changes (#19705) 2024-06-12 17:06:44 -04:00
Robert Fairburn
f57ae38308
Add s3 installers configuration to dogfood (#19697) 2024-06-12 13:50:41 -05:00
Robert Fairburn
dcd551f671
initial osquery docker sidecar and osquery local builds (#19641) 2024-06-12 13:25:07 -05:00
Luke Heath
df16d76565
Add fleet_calendar_periodicity to dogfood environment (#19633)
From this PR: https://github.com/fleetdm/fleet/pull/19559

---------

Co-authored-by: Robert Fairburn <8029478+rfairburn@users.noreply.github.com>
2024-06-10 15:15:36 -07:00
Luke Heath
fbe9c1b498
Adding changes for Fleet v4.51.0 (#19601) 2024-06-10 09:47:23 -07:00
Robert Fairburn
d65f59ed84
update osquery-carve module version in dogfood (#19535) 2024-06-05 12:31:40 -05:00
Grant Bilstad
9db32a5827
Update s3 carves bucket expiry for dogfood (#19533)
Need to update to extended expiry for carves s3 as not to remove for
software_installs

@rfairburn will apply with no downtime to Dogfood
2024-06-05 12:12:32 -05:00
Robert Fairburn
d241ce7a1d
Fleet server private key (#19451)
This is needed to support the latest release in loadtesting and dogfood.
2024-06-03 13:21:01 -05:00
Sharon Katz
0d0d37d30d
Adding changes for Fleet v4.50.2 (#19410) 2024-05-31 16:51:21 -04:00
Sharon Katz
1047ed2622
Adding changes for Fleet v4.50.1 (#19334) 2024-05-30 12:23:59 -04:00
Robert Fairburn
0cf1f78bf1
Update loadtest osquery-perf to cleanup vulns in built image (#19317)
Note this is the same Dockerfile used in cloud for adding fake hosts to
preview/tests environments.
2024-05-28 16:33:55 -05:00
Benjamin Edwards
a2ac7e9083
increase monitoring delay (#19201)
part 1 of 2 of https://github.com/fleetdm/fleet/issues/19038
2024-05-23 16:18:38 -04:00
Roberto Dip
987b64a0c7
update to go1.22.3 + dependencies (#19142)
For #16795, this:

- Updates Go to go1.22.3
- Per
https://github.com/fleetdm/fleet/issues/16795#issuecomment-2100450618, I
also ran the following to update the versions requested by @getvictor

```
go get github.com/kataras/golog@v0.1.12
go get github.com/kataras/iris/v12@v12.2.11
go get github.com/sethvargo/go-password@v0.3.0
```

**Notes**

After this is merged people will need to update their Go version. I use
gvm and I did it like:

```
$ gvm install go1.22.3
$ gvm use go1.22.3 --default
```

**Relevant changes**

The release notes mention:

> Previously, the variables declared by a “for” loop were created once
> and updated by each iteration. In Go 1.22, each iteration of the loop
> creates new variables, to avoid accidental sharing bugs.

However, we already have a lint rule (see
https://github.com/fleetdm/fleet/pull/13877) for this scenario, so it
shouldn't affect us.
2024-05-23 16:23:38 -03:00
Luke Heath
a540e0e38b
Adding changes for Fleet v4.50.0 (#19191) 2024-05-23 11:11:28 -05:00
George Karr
e61e3edb39
Adding changes for patch 4.49.4 (#19163) 2024-05-21 11:20:37 -05:00
Benjamin Edwards
b7e10a3dd8
fleet on render (#18850) 2024-05-08 14:12:40 -04:00
Sharon Katz
e735e51915
Adding changes for patch 4.49.3 (#18769)
Co-authored-by: Luke Heath <luke@fleetdm.com>
2024-05-07 13:32:46 -04:00
George Karr
cb6cfe9da5
Adding changes for patch 4.49.2 (#18637) 2024-04-30 11:52:03 -05:00
Robert Fairburn
a4bd6aad04
engine_version in wrong place (#18624) 2024-04-29 18:41:11 -05:00
Luke Heath
9bd87ca87f
Bump dogfood terraform to 8.0.mysql_aurora.3.05.2 (#18620) 2024-04-29 18:00:43 -05:00
Robert Fairburn
27a4071a89
Make terraform match prod RDS versions (#18621) 2024-04-29 17:58:17 -05:00
George Karr
b75545ba26
Adding changes for patch 4.49.1 (#18573) 2024-04-26 12:35:44 -05:00
Luke Heath
2a1c19e26c
Adding changes for Fleet v4.49.0 (#18496) 2024-04-24 14:13:59 -05:00
Sharon Katz
420e2adb0f
Adding changes for patch 4.48.3 (#18306)
Co-authored-by: Luke Heath <luke@fleetdm.com>
2024-04-17 16:41:06 -04:00
George Karr
f02d4706f5
Adding changes for patch 4.48.2 (#18148) 2024-04-10 13:21:59 -05:00
George Karr
af7f0fa89e
Adding changes for patch 4.48.1 (#18129) 2024-04-09 11:41:41 -05:00
Victor Lyuboslavsky
e8487fae53
In kubequery, updating golang.org/x/net dependency to fix GO-2024-2687 (#18108)
#17903
In kubequery, updating golang.org/x/net dependency to fix GO-2024-2687
2024-04-05 17:43:10 -05:00
Luke Heath
7b91434452
Updating changelog for 4.48.0 (#18014) 2024-04-02 15:38:42 -05:00
Robert Fairburn
57793c27a0
Remove WAF from dogfood (#17940) 2024-03-28 13:55:41 -05:00
George Karr
f2b3a58bff
Updating changelog for 4.47.3 (#17871) 2024-03-27 10:41:51 -05:00
Sharon Katz
b44848eeba
Updating changelog for 4.47.2 (#17804) 2024-03-26 09:18:34 -05:00
StepSecurity Bot
80335d88d1
[StepSecurity] Apply security best practices (#17811) 2024-03-22 16:19:11 -05:00
George Karr
c6d5151198
Updating changelog for 4.47.1 (#17689) 2024-03-19 09:47:00 -05:00
Benjamin Edwards
0d9718aea6
enable & upgrade external vuln scans (#17038) 2024-03-15 11:45:58 -04:00
dependabot[bot]
49b689391d
Bump google.golang.org/protobuf from 1.27.1 to 1.33.0 in /infrastructure/kubequery (#17606) 2024-03-14 11:27:24 -05:00
Robert Fairburn
8aa1c2b147
Add Vanta Owner to spend alerts (#17623) 2024-03-14 11:25:55 -05:00
Luke Heath
88d41915eb
Prepare Fleet v4.47.0 (#17581) 2024-03-12 17:45:26 -05:00
George Karr
33bb67b7af
update changelog 4.46.2 (#17337)
- Updating changelog for 4.46.2
2024-03-06 15:41:55 -06:00