Commit graph

2503 commits

Author SHA1 Message Date
Tim Lee
2b18caaee1
Add Jetbrains plugins (#34024) 2025-10-14 09:01:45 -06:00
Ian Littman
bbc36bbc83
Fall back to app filename when ingesting macOS apps that have no display name/bundle name and run.sh as the bundle executable (#34176)
Fixes #34157. Seen on Steam games, which also don't have a bundle ID.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)

## Testing

- [x] QA'd all new/changed functionality manually
2025-10-13 17:33:20 -05:00
Mason Buettner
e78ad1b9ca
Fix typo in REST API "Request certificate" (#34092)
Changes:
 - Changed "isseud" to "issued" in `idp_client_id`.
2025-10-10 12:06:02 -05:00
Noah Talerman
9034d13b65
API reference: Clarify 'pending' (#33960) 2025-10-08 16:47:31 -04:00
Victor Lyuboslavsky
e274738b9d
Instructions to create a public mTLS reverse proxy (#33906)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #33165

Doc updates only.
2025-10-08 14:46:33 -05:00
Zach Wasserman
41c53860e3
Add support for VSCode fork extensions in software inventory (#33595)
**Related issue:** Resolves #31397

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)

## Testing

- [x] Added/updated automated tests

- [x] QA'd all new/changed functionality manually

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2025-10-07 14:05:22 -07:00
Harrison Ravazzolo
9e3cab666e
Update doc assets (#33740)
After talking with eng team and @nonpunctual, the /assets folder is
reserved for things inside the fleet app, so creating a new folder in
`/docs/solutions`

@AdamBaali - I updated your article paths and moved the assets to the
new folder, do you mind taking a peek and making sure it looks good?

Note: brock, we should also update handbook for new ritual to add
articles with assets like this.

---------

Co-authored-by: Brock Walters <153771548+nonpunctual@users.noreply.github.com>
2025-10-07 13:02:36 -06:00
Rachael Shaw
75104bfbcb
Rename "Single sign-on options" settings page to "Single sign-on (SSO)" (#33946)
As part of https://github.com/fleetdm/fleet/issues/25798, we planned to
rename "Single sign-on options" to "Single sign-on (SSO)". However, we
missed adding a check for the copy change in the test plan, so we didn't
catch that the change didn't make it in.

The documentation/guide changes referencing the new page name were
already merged as part of 4.71.
2025-10-07 13:38:37 -05:00
Rachael Shaw
b94aba24aa
Remove duplicate certificate authorities example from YAML docs (#33931)
There was an extra one left over from merging in doc updates.
2025-10-07 08:59:30 -05:00
Gabriel Hernandez
95c559fbab
Add host platform to mdm enrolled and mdm unenrolled activity details (#33858)
**Related issue:** Fixes #33807

Adds missing host platform key to mdm enrolled and mdm unenrolled
activity details api response data. This allows the UI to display the
activities properly

- [x] Added/updated automated tests
- [x] QA'd all new/changed functionality manually
2025-10-07 14:22:37 +01:00
Rachael Shaw
48cb0908cd
Docs v4.74.0 (#33879)
Documentation changes for 4.74

---------

Co-authored-by: Marko Lisica <83164494+marko-lisica@users.noreply.github.com>
Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
Co-authored-by: Victor Lyuboslavsky <2685025+getvictor@users.noreply.github.com>
Co-authored-by: Ian Littman <iansltx@gmail.com>
Co-authored-by: Noah Talerman <noahtal@umich.edu>
Co-authored-by: Lucas Manuel Rodriguez <lucas@fleetdm.com>
Co-authored-by: Magnus Jensen <magnus@fleetdm.com>
Co-authored-by: Jordan Montgomery <elijah.jordan.montgomery@gmail.com>
Co-authored-by: Janis Watts <184028114+jmwatts@users.noreply.github.com>
Co-authored-by: Allen Houchins <32207388+allenhouchins@users.noreply.github.com>
2025-10-06 17:03:10 -05:00
Noah Talerman
46df8f8274
API reference: Remove errant key (#33898) 2025-10-06 17:01:11 -05:00
Noah Talerman
e1ca48f549
Supported host operating systems (#33861)
- openSUSE 15.6+
- Lowercase "openSUSE"

Supported added in the following user story:
- #32778
2025-10-06 11:59:35 -05:00
Lucas Manuel Rodriguez
527c2230e9
Add support for legacy Company portal SSO extension (#33796)
Resolves #33319

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

## Testing

- [X] QA'd all new/changed functionality manually
2025-10-03 17:56:38 -03:00
Victor Lyuboslavsky
5ff5332026
Added SSF to Okta research doc. (#33720)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #32766
2025-10-03 08:16:41 -05:00
Noah Talerman
279cc8d0d4
YAML reference: Only one package, App Store app, or Fleet-maintained app per software (#33707)
Docs to address the following bug:
- #32607
2025-10-02 19:06:02 -05:00
Noah Talerman
5ee9fa774c
API reference: OTA profiles don't work if end user auth is enabled (#33705)
- @noahtalerman: We shipped a breaking change in Fleet 4.73 that
resulted in this bug: https://github.com/fleetdm/fleet/issues/33447
 - To fix this bug we decided to...
- Accept this breaking change, document it (this PR), and add an
improved error message. See
[bug](https://github.com/fleetdm/fleet/issues/33447).
- Improve the manual enrollment flow for macOS hosts. User story is
[here](https://github.com/fleetdm/fleet/issues/33640).
   - Both changes are targeted for 4.77
2025-10-02 19:05:09 -05:00
Allen Houchins
df0d60a8f4
Update rest-api.md (#33702)
- Added additional platform information to address confusion encountered
during a recent prospect call.

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
2025-10-02 18:48:16 -05:00
Eric
9e520f22dd
Docs: Update anchor link in Upgrading-Fleet.md (#33784)
Changes:
- Fixed an anchor link in the Upgrading Fleet documentation
2025-10-02 15:44:28 -05:00
Victor Lyuboslavsky
0498b2f200
Added research doc for osquery ebpfpub replacement (#33722)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #30639
2025-10-02 11:33:09 -05:00
Noah Talerman
a5978d16d9
YAML files: Add missing key (#33574)
Co-authored-by: Rachael Shaw <r@rachael.wtf>
2025-09-30 18:09:58 -05:00
Steven Palmesano
267a16d8e4
Update links for end user authentication in SSO documentation (#33623)
These redirected to the correct page, but the anchor was broken.
2025-09-30 18:08:23 -05:00
Jordan Montgomery
cfbc9d8829
Fix osquery detection of vscode extensions (#33523)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #33520 

Recent changes to the users query accidentally introduced an ambiguous
column error with the vscode extensions query. Fixed the SELECT
statement in vscode_extensions to properly account for this

No changes file added since this is an unreleased bug and the feature
has a changes file

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] If paths of existing endpoints are modified without backwards
compatibility, checked the frontend/CLI for any necessary changes

## Testing

No automated tests in this area so no tests to update/add

- [x] Added/updated automated tests
- [x] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)

- [x] QA'd all new/changed functionality manually

For unreleased bug fixes in a release candidate, one of:

- [x] Confirmed that the fix is not expected to adversely impact load
test results
2025-09-26 15:22:45 -04:00
Noah Talerman
65989fbfc6
API reference: Which software supports last_opened (#33459)
Context:
https://github.com/fleetdm/fleet/issues/31268#issuecomment-3319200507

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
2025-09-26 12:37:36 -05:00
Noah Talerman
375d7e8046
API reference: Which software supports hash_sha256 (#33506)
Context:
2025-09-26 12:35:42 -05:00
Sarah Gillespie
128a71eb4f
Add backend support for Smallstep CA (#32872)
Co-authored-by: Jordan Montgomery <elijah.jordan.montgomery@gmail.com>
Co-authored-by: Magnus Jensen <magnus@fleetdm.com>
2025-09-25 10:03:36 -05:00
Steven Palmesano
4a47305353
Change Mac script references from .ps1 to .sh (#33407)
Our example shows a Mac app using .ps1 scripts, but Macs don't use
PowerShell.
2025-09-24 10:12:34 -05:00
Mike Thomas
4bddc81357
Update why-fleet.md (#33257)
Closes https://github.com/fleetdm/fleet/issues/22566

I added scope transparency information based on @JoGSal 's suggestion
from [this issue](https://github.com/fleetdm/fleet/pull/20726/files).
The content was rewritten in Fleet's plain, straight-talking tone to
match the rest of the page, e.g., short sentences and active voice.

I also removed some instances of `<0xa0>` non-breaking spaces from the
section above.
2025-09-24 08:02:08 +09:00
Dante Catalfamo
834ab62ed0
Use new pacman table to ingest software from arch linux (#33238)
#32862
2025-09-23 10:28:32 -04:00
Victor Lyuboslavsky
2c38e97c97
Research doc for Okta conditional access. (#33057)
**Related issue:** Resolves #32766
2025-09-23 09:06:52 -05:00
Noah Talerman
a543a9c49e
Don't use contributor configuration (#33314)
Same language as the contributor API docs:
https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/api-for-contributors.md

Context:
https://github.com/fleetdm/fleet/issues/32669#issuecomment-3321434569
2025-09-22 17:48:16 -05:00
Martin Angers
72571a9f8e
Feature branch for Android config profiles (#32976) 2025-09-22 11:29:57 -04:00
Eric
26e552f2c0
Docs: Update host vital queries in queries.yml (#33228)
Changes:
- Updated host vital queries in queries.yml to include changes from
134c74a94b,
e9f595a2e2,
50151f6dee,
11097befb4,
4994571c22,
39dc7a3772, and
4dfe95304b.
2025-09-19 17:32:56 -05:00
Eric
048fcd13ed
Website: Add controls library pages (#33143)
Related to: https://github.com/fleetdm/confidential/issues/10737

Changes:
- Added `docs/scripts.yml`, a YAML file that contains a list of scripts
- Added `docs/mdm-commands.yml`, a YAML file that contains Windows and
Apple MDM commands
- Added `/mdm-commands`, a page that contains a list of MDM commands for
Windows and Apple commands
- Added `/scripts`, a page that contains a list of scripts
- Updated the `<docs-nav-and-search>` component to have a link to the
controls library, and reordered the lists.
- Updated the build static content script to add the scripts and mdm
commands from scripts.yml and mdm-commands.yml to the website's
`builtStaticContent` configuration.
- Updated the layout of the os-settings page to match the latest
wireframes
2025-09-19 12:02:55 -05:00
Noah Talerman
b6b012250a
Update design-qa-considerations.md (#33135) 2025-09-18 17:51:00 -05:00
Victor Lyuboslavsky
27d35524c8
Updated dev instructions for building a signed fleetd-base installer. (#33131) 2025-09-18 17:50:00 -05:00
George Karr
f9f5b6ab7e
Update sprint kickoff guidelines for clarity (#33123) 2025-09-18 17:48:48 -05:00
Lucas Manuel Rodriguez
134c74a94b
Add initial Arch Linux support (#33096)
For #32859.

We can ignore the "Dependency review" failure in
[CVE-2023-32698](https://github.com/advisories/GHSA-w7jw-q4fg-qc4c)
because we already have the rules to ignore it (we are not vulnerable).
I'm not updating nfpm to latest because it would require further changes
on all deb/rpm generation (source code breaking changes on the golang
interfaces).

---

<img width="448" height="151" alt="screenshot-2025-09-11_08-38-20"
src="https://github.com/user-attachments/assets/4c00b960-568a-48d9-8098-308c8ab8916f"
/>
<img width="391" height="73" alt="screenshot-2025-09-11_08-37-40"
src="https://github.com/user-attachments/assets/dec6ea22-31f8-4930-b067-0b04b4ec2b5f"
/>

<img width="759" height="428" alt="Image"
src="https://github.com/user-attachments/assets/0a76d070-4709-4a35-8e6e-caf869473d28"
/>
<img width="1178" height="634" alt="Image"
src="https://github.com/user-attachments/assets/98e6fa2a-ba07-4a55-81aa-ad747f1c57b9"
/>
<img width="1388" height="830" alt="Image"
src="https://github.com/user-attachments/assets/19d36bad-d01d-4130-b271-38bea2534833"
/>
<img width="933" height="930" alt="Image"
src="https://github.com/user-attachments/assets/1d6a369b-65d7-46a4-98a6-e6f0b29be2c8"
/>
<img width="2241" height="693" alt="Image"
src="https://github.com/user-attachments/assets/d8f98e97-f027-4c1c-ae5d-c4fa3b592a20"
/>

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

## Testing

- [x] Added/updated automated tests
- [X] QA'd all new/changed functionality manually
2025-09-18 18:55:31 -03:00
Marko Lisica
ba43b23a20
Remove object that's not implemented (#33156)
This is mistakenly documented. Probably this got deprioritized at some
point.
2025-09-18 16:52:08 -05:00
Lucas Manuel Rodriguez
b3adf3455e
Add support for Windows setup experience software (#33134)
For #32542.

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.
- [X] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)

## Testing

- [X] Added/updated automated tests
- [X] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)
- [X] QA'd all new/changed functionality manually
2025-09-18 16:39:15 -03:00
Noah Talerman
3d0a0639f6
YAML reference docs: Built-in variables (#33085)
Add `$FLEET_VAR_HOST_HARDWARE_SERIAL`

Looks like we added this variable as part of [this
sub-task](https://github.com/fleetdm/fleet/issues/26609) but we didn't
documented it.
2025-09-17 11:53:23 -05:00
Noah Talerman
d9cadccee7
Update design-qa-considerations.md (#33072) 2025-09-17 09:54:20 -05:00
Noah Talerman
03e785d1f2
Supported host operating systems (#33063)
Add RHEL. Fleet supports RHEL today. We have users/customers with RHEL
hosts enrolled.
2025-09-16 19:05:16 -04:00
Scott Gress
5718a42637
ADR-0006: Replace no team with default team (#32883) 2025-09-16 12:54:21 -05:00
Allen Houchins
fccdd8c152
Clean up "Compliance exclusions" references (#32969)
- https://github.com/fleetdm/fleet/issues/32633
2025-09-15 13:38:20 -05:00
Luke Heath
13df3f290d
Add Scrum ritual documentation (#32332) 2025-09-13 21:17:15 -05:00
Victor Lyuboslavsky
f28fa96321
Improving Building Fleet guide. (#32818) 2025-09-11 18:29:00 -05:00
jacobshandling
ee4d4c0a7d
Fix minor inconsistency in agent config overrides docs (#32874)
Only macs would be overridden here

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2025-09-11 12:37:14 -05:00
Rachael Shaw
35eaf7dec5
#29609 API design (add IdP department to host vitals) (#30054)
For #29609

> TODO: check whether IdP data is on "My device" page, and add to
documentation if so
2025-09-11 11:52:42 -05:00
Rachael Shaw
8e05a45680
"setup" (noun) to "set up" (verb) (#32717) 2025-09-11 11:29:30 -05:00