Commit graph

268 commits

Author SHA1 Message Date
Lucas Manuel Rodriguez
b3e8b6007a
Update docs for device_mapping, works on all OSs (with fleetd) (#9982)
The `google_chrome_profiles` table is present in the three OSs. The one
requirement is that the user must use fleetd.
2023-02-22 08:41:50 -03:00
Noah Talerman
bb1ae51128
Turn on MDM: Update end user instructions (#9959)
- Update docs
- Update instructions on My device page
2023-02-21 12:27:54 -05:00
gillespi314
345a1f4c36
Update docs with permissions for MDM configuration profiles (#9906) 2023-02-17 13:26:39 -06:00
Benjamin Edwards
0db432f7e3
vuln processing distinct command (#9813)
closes https://github.com/fleetdm/fleet/issues/3723

Add new vuln processing command, configs, and documentation on how to utilize.
2023-02-17 10:00:57 -05:00
Noah Talerman
070f551070
MDM docs: Add supported macOS versions (#9887)
- Fleet supports MDM features on macOS 12+
2023-02-16 16:39:35 -05:00
Katheryn Satterlee
717f79f279
Update Fleet-desktop.md (#9891)
Add note for self-remediation
2023-02-16 15:23:54 -06:00
Lucas Manuel Rodriguez
b757e447bc
Fix private IP ingestion in network_interface_unix and network_interface_windows. (#9884)
#8924

This is reproduced in dogfood for `dogfood-centos-box` and
`dogfood-ubuntu-box` where their "Private IP" is also their "Public IP".
Given that these hosts have their "Primary IP" configured to be their
"Public IP" alongside their "Private IP", the `network_interface_unix`
and `network_interface_windows` queries are now changed to ingest only
private IPs for the "Private IP" field.

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- ~[ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)~
- ~[ ] Documented any permissions changes~
- ~[ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)~
- ~[ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.~
- ~[ ] Added/updated tests~
- [X] Manual QA for all new/changed functionality
  - ~For Orbit and Fleet Desktop changes:~
- ~[ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.~
- ~[ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).~
2023-02-16 17:16:40 -03:00
Martin Angers
4a1f3988f0
Add "edited macos profiles" activity when applying custom settings via fleetctl (#9862)
#9587 and #9639
2023-02-16 13:53:26 -03:00
Katheryn Satterlee
112e5ec05a
Add Packs entry to FAQ (#9825)
# Checklist for submitter

Documentation only change
2023-02-14 15:30:47 -06:00
gillespi314
8daead3ef5
Update route for hosts encryption key (#9821) 2023-02-14 12:17:31 -06:00
Noah Talerman
1c44d54454
MDM docs: Update migration instructions (#9820)
- For automatically enrolled hosts, add extra step to
first unassigned hosts from old MDM and then assign hosts to Fleet
2023-02-14 11:51:35 -05:00
RachelElysia
2c4c3a87ea
Fleet Documentation: Update agent options and enrollment secret documentation (#9565) 2023-02-13 10:45:37 -05:00
Mo Zhu
3de7b0c3d4
Update macos nudge docs (#9801) 2023-02-10 16:31:22 -05:00
Roberto Dip
7cd581866a
add API endpoint to see disk encryption key (#9713)
https://github.com/fleetdm/fleet/issues/8708
2023-02-08 20:20:23 -03:00
Jacob Shandling
5c0f635966
clarify Teams > MDM settings docs (#9754)
Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2023-02-08 11:49:01 -08:00
Noah Talerman
f4dd05d3ee
Docs: Fix images on Mobile device management page (#9734)
- Update links so that images render correctly
2023-02-07 14:00:32 -08:00
Noah Talerman
9ae5941d8c
Docs: MDM - pending hosts (#9728)
- Explain what MDM status "Pending" means
- Explain default team and how to update
2023-02-07 16:03:30 -05:00
Noah Talerman
b87c28726a
Docs: Add instructions for MDM migration (#9708)
These docs address 5 out of 7 requirements in the "Docs for MDM
migration" issue here: #9009

Docs also add an "Instructions for end users" section to address docs
for "Manual enrollment" issue:
https://github.com/fleetdm/fleet/issues/7957#issuecomment-1416262879

- Add instructions for IT admins on how to switch MDM solutions for
hosts manually enrolled to the old MDM solution
- Add instructions for IT admins on how to switch MDM solutions for
hosts automatically enrolled (DEP) to the old MDM solution
- Add information for IT admins about how Fleet treats Activation Lock
Bypass codes
- Add instructions for end users on how to switch MDM solutions for
hosts manually and automatically enrolled to the old MDM solution (same
instructions)
2023-02-07 13:53:14 -06:00
RachelElysia
f721e0daf5
Docs: Add disk encryption section to MDM page
- Add disk encryption section
- Update transparency section of website under here's what osquery can see on your device > file contents dropdown
2023-02-03 10:37:02 -05:00
Benjamin Edwards
dbcb638809
update file carver block size and various MySQL references (#9625)
Update the default file carver block size to be compatible with MySQL 8
& S3.
Update surrounding docs.
Various other updates to references of MySQL versions (all terraform
deploys are now defaulted MySQL 8 in AWS)

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
2023-02-02 01:01:34 -05:00
Roberto Dip
e06b00df11
Add readonly MDM.EnabledAndConfigured to app config and device responses (#9575)
Related to #9571, this adds a new value to both responses which is
calculated when the Fleet server is started, and only set to `true` if
the server is properly configured for MDM.

This helps the UI to determine wether or not we should show certain UI
elements that we only want to show to servers with MDM enabled.
2023-02-01 14:47:52 -03:00
Martin Angers
f47b7f538f
Mention that the min macos version activity is created when deadline is modified too (#9608)
Tiny follow-up to https://github.com/fleetdm/fleet/pull/9594
2023-02-01 09:10:29 -05:00
Martin Angers
c805ea2154
Record activity when the macos minimum version requirement is edited (#9594) 2023-01-31 16:36:18 -06:00
Katheryn Satterlee
ee0d93a80f
Add best practice for updating team config (#9580)
Documentation only changes.
2023-01-31 13:47:10 -05:00
Martin Angers
8a137e2b5b
Move host details mdm properties to new mdm object (#9505) 2023-01-30 16:40:11 -06:00
Juan Fernandez
e376d53294
Bug 9386: Docs chrome extension has the wrong CPE. (#9524)
Related to #9386 - this should fix one of the three reported problems.

* Add the ability to add exclusion rules to cpe_translations.
* Added exclusion rule for Docs chrome extension.
2023-01-27 15:11:20 -04:00
Roberto Dip
0c9a79b248
Adjust Nudge configuration to match the specification (#9519)
Related to #9013 this adjusts the Nudge configuration to match the spec.
2023-01-26 19:52:03 -03:00
Martin Angers
d0e6891d10
Add endpoint to trigger CSR request for APNs on fleetdm.com (#9494) 2023-01-25 14:44:29 -05:00
Katheryn Satterlee
0c1ec16dc4
Include information on flags for fleetctl apply (#9493)
Added details on using flags to change behavior when applying team and
config specs using fleetctl
2023-01-25 10:43:46 -06:00
Marcos Oviedo
980fbcc003
Adding more notes to overrides behavior in agent settings (#9482)
Adding notes on the agent_options.overrides behavior
2023-01-25 09:57:56 -03:00
Martin Angers
84717de461
Document APNs and ABM setup and renewal (#9471) 2023-01-24 15:20:41 -05:00
Roberto Dip
2d25a3f48d
add mdm root key and macos_updates to app and team configs (#9442)
Related to https://github.com/fleetdm/fleet/issues/9345,
https://github.com/fleetdm/fleet/issues/9358 and
https://github.com/fleetdm/fleet/issues/9346 this adds:

1. The ability to configure `mdm.macos_updates` via `PATCH /config` and
`PATCH /teams/{id}`
3. The ability to configure `mdm.macos_updates` by using `fleetctl apply
-f` for teams and global config.
2023-01-24 13:20:02 -03:00
Reagan Evans
5947bd74f4
FAQ.md:Add new entry related to default UI sorting (#9004)
Add question regarding the use of an ORDER BY clause to explain why that
sort may not match what the UI shows as results are received from hosts.

# Checklist for submitter: n/a

Co-authored-by: Chris McGillicuddy <108031970+chris-mcgillicuddy@users.noreply.github.com>
Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
2023-01-23 15:12:12 -06:00
Katheryn Satterlee
39db759c8a
8887 remove packs from docs (#9453)
Docs only chznge
2023-01-20 16:55:48 -06:00
Katheryn Satterlee
96ea1d6aae
Remove packs from docs (#9452)
Documentation only change, updating docs to reflect #8887
2023-01-20 16:47:24 -06:00
Lucas Manuel Rodriguez
328004d679
Log failed login attempts as activities (#9430)
#9119

To test the SSO changes locally you can use:

https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Testing-and-local-development.md#testing-sso

@RachelElysia Please take a look at the UI changes (All I did was
copy/paste and amend the changes for the new activity type.)

IMO we shouldn't display an avatar because there's no "actual user"
involved in these failed login attempts activities (by "actual user" I
mean the user attributed to the activity):

<img width="446" alt="Screenshot 2023-01-19 at 10 41 05"
src="https://user-images.githubusercontent.com/2073526/213524771-b85901ce-eec0-4cf3-919c-73162285e20b.png">

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [X] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- ~[ ] Documented any permissions changes~
- ~[ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)~
- ~[ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.~
- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality
  - ~For Orbit and Fleet Desktop changes:~
- ~[ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.~
- ~[ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).~
2023-01-20 12:43:22 -03:00
Noah Talerman
f11a905a09
Docs: MVP for MDM page (#9417)
- Add new "Mobile device management (MDM)" page to "Using Fleet" section
- Adds docs for OS updates
2023-01-19 17:50:06 -05:00
Lucas Manuel Rodriguez
1cdfe2d351
Add summary of hardcoded detail queries (#9425)
Adds a process to generate a summary of the hardcoded Fleet queries.
2023-01-19 17:44:03 -03:00
Noah Talerman
d513763445
Docs: Update MDM settings and configuration (#9416)
- Add callout that MDM features are currently under development
- Rename sections
2023-01-19 13:34:18 -05:00
Lucas Manuel Rodriguez
49fccdb7b0
Fix broken links in Adding-hosts.md and Orbit.md (#9230)
Hi folks!

I wanted to share some docs to a user and I got a 404:
The "cleanup script" link on
https://fleetdm.com/docs/using-fleet/orbit#mac-os click returns a 404.

- I used the "Markdown All in One" VS code extension to re-generate (and
fix) the indexes in those files.
- I used https://github.com/tcort/markdown-link-check to check for
broken links:
```
markdown-link-check Orbit.md
markdown-link-check Adding-hosts.md
```
2023-01-18 10:04:44 -06:00
Gabriel Hernandez
7d4653baaa
add attribute to GET /activities endpoint with pagination metadata (#9279)
relates to https://github.com/fleetdm/fleet/issues/8928

This adds a new `meta` attribute to the "GET /activities" endpoint that
includes pagination metadata. This can allow clients to know if there
are additional items to request.


- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2023-01-18 12:57:11 +00:00
Artemis Tosini
caa6b05c92
docs: Remove deprecated vulnerability_settings options (#9281)
Fixes #8697
2023-01-17 15:28:36 -08:00
gillespi314
fba3607c4a
Add mdm status and server url to host endpoint responses (#9320) 2023-01-16 17:08:24 -06:00
Katheryn Satterlee
d12c9bb5a2
Update FAQ.md (#9303)
Added entry for package generation on M1 Macs

# Checklist for submitter

Documentation only change
2023-01-12 14:15:51 -06:00
Tomas Touceda
65783d49c7
Add feature to change or disable Fleet's hardcoded detail queries (#9117)
#8984

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Added/updated tests

Co-authored-by: Lucas Rodriguez <lucas@fleetdm.com>
2023-01-09 08:56:10 -03:00
Tomas Touceda
398bb38da7
Add software_updated_at field to host (#9116)
#9012

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [x] Added/updated tests

Co-authored-by: Lucas Rodriguez <lucas@fleetdm.com>
2023-01-09 08:55:43 -03:00
Luke Heath
abb5a332c5
UI hackathon: transitions, tooltips, empty states, buttons, bookmarks (#9195) 2023-01-06 17:08:48 -06:00
Martin Angers
656e5bfc70
Flag when the Apple BM terms have expired (#9091)
#8862 

Co-authored-by: Roberto Dip <dip.jesusr@gmail.com>
Co-authored-by: gillespi314 <73313222+gillespi314@users.noreply.github.com>
2023-01-06 17:44:20 -03:00
gillespi314
f9f1a94b48
Update mdm enrollment status API response (#9189) 2023-01-05 15:52:46 -06:00
Gabriel Hernandez
71a2e8f517 merge in main 2023-01-05 17:48:46 +00:00