fleet/ee/server/service
Victor Lyuboslavsky 357c42cb08
Added Country:US to new CA certs created by Fleet. (#40081)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #38699 

The fix will only apply to new Fleet instances. To fix existing Fleet
instances, we need to support rotation:
https://github.com/fleetdm/fleet/issues/40080

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.

## Testing

- [x] QA'd all new/changed functionality manually
2026-02-19 09:26:22 -06:00
..
condaccess Added Country:US to new CA certs created by Fleet. (#40081) 2026-02-19 09:26:22 -06:00
digicert Changes needed before gokit/log to slog transition. (#39527) 2026-02-11 10:08:33 -06:00
embedded_scripts Delaying reboot so that script can report status. (#33386) 2025-09-24 14:25:52 -05:00
est EST certificate proxy backend and configs (#34689) 2025-11-04 16:27:15 -05:00
hostidentity Added Country:US to new CA certs created by Fleet. (#40081) 2026-02-19 09:26:22 -06:00
testdata Populate version for macOS Chrome FMA on import, use Chrome Enterprise PKG instead of DMG, add tooltip on "latest" version when adding FMA (#30926) 2025-07-24 16:14:01 -05:00
appconfig.go enable controlled rollout of features by teams (#7408) 2022-08-30 08:13:09 -03:00
calendar.go Use lighter Team call when it's obviously safe to do so, comment potential areas for further improvement (#35587) 2025-11-17 17:25:45 -06:00
calendar_test.go Changes needed before gokit/log to slog transition. (#39527) 2026-02-11 10:08:33 -06:00
certificate_authorities.go Added deny list for checking external user submitted urls (#39947) 2026-02-17 17:09:52 -06:00
certificate_authorities_test.go Added deny list for checking external user submitted urls (#39947) 2026-02-17 17:09:52 -06:00
devices.go Conditional access host bypass (#38542) 2026-01-26 17:58:31 -05:00
errors.go Hydrant CA Feature Branch (#31807) 2025-09-04 12:39:41 -04:00
hosts.go os_versions endpoint performance improvements (#34897) 2025-11-03 13:07:44 -06:00
in_house_apps.go Cloudfront signing for in-house apps (#37650) 2026-01-05 16:30:31 -05:00
maintained_apps.go Only allow FLEET_DEV_* env vars when --dev is passed, allow overriding configs one at a time in dev (#38652) 2026-01-27 14:32:56 -06:00
maintained_apps_test.go Only allow FLEET_DEV_* env vars when --dev is passed, allow overriding configs one at a time in dev (#38652) 2026-01-27 14:32:56 -06:00
mdm.go Migrate HTTP request logging from go-kit/log to slog (#39729) 2026-02-14 13:04:41 -06:00
mdm_export_for_test.go Update/fix/add tests for puppet-related flow (preassign+match) (#17859) 2024-03-26 13:41:40 -04:00
mdm_external_test.go Changes needed before gokit/log to slog transition. (#39527) 2026-02-11 10:08:33 -06:00
mdm_profiles.go handle non atomic windows profiles when sending and receiving (#38332) 2026-01-19 11:16:28 -05:00
mdm_test.go Added support of $FLEET_VAR_HOST_UUID in Windows MDM configuration profiles (#31695) 2025-08-10 12:24:38 +02:00
orbit.go add pagination metadata to get mdm commands endpoint (#37396) 2025-12-18 11:53:27 +00:00
request_certificate.go HTTP Message Signature Auth for certificate_request (#35139) 2025-11-06 12:06:00 -05:00
request_certificate_test.go Changes needed before gokit/log to slog transition. (#39527) 2026-02-11 10:08:33 -06:00
scep_proxy.go Added deny list for checking external user submitted urls (#39947) 2026-02-17 17:09:52 -06:00
scep_proxy_test.go Updated NDES SCEP proxy to auto-detect response encoding (#37873) 2026-01-06 10:47:34 -06:00
scim.go Added scim/details endpoint (#28007) 2025-04-10 14:08:45 -05:00
service.go Changes needed before gokit/log to slog transition. (#39527) 2026-02-11 10:08:33 -06:00
setup_experience.go manual agent install should only block macOS SE software (#38434) 2026-01-20 11:37:39 -05:00
setup_experience_test.go manual agent install should only block macOS SE software (#38434) 2026-01-20 11:37:39 -05:00
software.go Fixed bug when using without_vulnerability_details and vulnerability filters (#24769) 2024-12-13 16:39:21 -06:00
software_installers.go Enforce GitOps setup experience when manual agent install is enabled (#39775) 2026-02-13 16:21:39 -05:00
software_installers_test.go Add support for .sh scripts on macOS (#39479) 2026-02-09 15:24:37 -05:00
software_title_icons.go Use writer for reads for software icon activity population (#36552) 2025-12-02 08:38:12 -06:00
teams.go Fix technician permissions to access enroll secrets (#39959) 2026-02-18 09:42:25 -03:00
teams_test.go Fix technician permissions to access enroll secrets (#39959) 2026-02-18 09:42:25 -03:00
testing_utils.go Add backend support for Smallstep CA (#32872) 2025-09-25 10:03:36 -05:00
users.go Use lighter Team call when it's obviously safe to do so, comment potential areas for further improvement (#35587) 2025-11-17 17:25:45 -06:00
users_test.go Allow setting user roles during JIT provisioning (#10193) 2023-03-01 20:18:40 -03:00
vpp.go Enforce GitOps setup experience when manual agent install is enabled (#39775) 2026-02-13 16:21:39 -05:00
vpp_test.go Enforce GitOps setup experience when manual agent install is enabled (#39775) 2026-02-13 16:21:39 -05:00
vulnerabilities.go Updated /api/v1/fleet/vulnerabilities/{cve} endpoint (#21463) 2024-08-21 12:52:28 -05:00