mirror of
https://github.com/fleetdm/fleet
synced 2026-05-22 16:39:01 +00:00
4129b52fc6
Fixes #31173 Reproduced and fixed in loadtest environment. Uncovered another source of deadlocks, filed as a separate: https://github.com/fleetdm/fleet/issues/32201 - Also, still seeing some deadlocks (a lot fewer) in DB, and they are hidden from the API results by retries. They may still be happening because locks happen row by row and not all at once. A potential fix would be to lock the whole policy_membership table. Additional frontend fix, which is needed to prevent potential timeouts: https://github.com/fleetdm/fleet/pull/32212 Backend + frontend fix should be a sufficient fix for this issue (ignoring the issue with the long software transaction). Also, this PR contains some refactoring to split out the 1-host use case. # Checklist for submitter If some of the following don't apply, delete the relevant line. - [x] Changes file added for user-visible changes in `changes/`, `orbit/changes/` or `ee/fleetd-chrome/changes`. ## Testing - [x] QA'd all new/changed functionality manually <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * Bug Fixes * Resolved rare deadlocks during concurrent policy updates and bulk automations. * Correctly clears stale MDM data and actions on host re-enrollment and platform changes. * Performance Improvements * Optimized policy issue recalculation with per-host updates to reduce contention. * Improved concurrency handling for bulk policy updates to avoid lock contention. * Reliability * More robust host enrollment: updates seen time, display name, and label membership consistently. * Ensures accurate policy-issue counts after membership changes and re-enrollment. <!-- end of auto-generated comment: release notes by coderabbit.ai --> |
||
|---|---|---|
| .. | ||
| .keep | ||
| 4498-return-empty-software | ||
| 21754-fleetctl-api-body-support | ||
| 25025-dedup-vuln-count | ||
| 25636-fma-gitops | ||
| 26382-slsa-attestation-updates | ||
| 26404-stale-false-positive | ||
| 27902-linux-last-opened | ||
| 29250-force-filevault-on-login-for-manual-enrollments | ||
| 29554-gitops-mode-invalid-url | ||
| 29596-labels-platform-change | ||
| 29769-windows-profiles-with-cdata-escape-fails-to-verify | ||
| 29795-deleted-policies-still-showing | ||
| 29833-do-not-log-error-for-missing-eula | ||
| 29894-fix-deb-auto-install-query | ||
| 30154-add-custom-vars-ui | ||
| 30197-automatic-install-policies | ||
| 30248-custom-cvss-scores | ||
| 30357-all-teams-dd-bug | ||
| 30384-new-global-activity-when-key-escrowed | ||
| 30390-cert-country | ||
| 30455-errorstore-panic | ||
| 30526-update-run-script-modal | ||
| 30565-cron-errors | ||
| 30660-enforce-idp-authentication-for-byod-enrollment | ||
| 30746-remove-unintended-broken-sort | ||
| 30803-os-icon-bug-fix | ||
| 30853-fail-unknown-declaration-type-ddm-errors | ||
| 30853-gitops-secrets-validation | ||
| 30857-pending-script-unlock-cancellation-not-respected | ||
| 30879-host-uuid-for-windows-profiles | ||
| 30918-calendar-webhook-authz | ||
| 31055-secrets-in-ui-backend | ||
| 31106-macos-cis-updates | ||
| 31143-hosts-gets-configured-before-profiles-are-sent | ||
| 31173-fix-policy-deadlocks | ||
| 31180-add-ability-to-determine-pin-compliance | ||
| 31193-turn-on-ability-to-set-tpm-pin | ||
| 31212-surface-linux-kernel-vulns | ||
| 31224-scripts-page-updates | ||
| 31240-omit-batch-scripts-from-feed | ||
| 31268-last-opened | ||
| 31282-add-incompatible-filter-for-hosts | ||
| 31286-package-upgrade-fix | ||
| 31291-linux-lock-script | ||
| 31343-blank-email-on-failed-login-activity | ||
| 31372-host-identity-cert-renewal | ||
| 31444-strict-sql-mode | ||
| 31474-remove-incorrect-cves | ||
| 31477-secrets-in-macos-profiles | ||
| 31521-batch-script-cron-schedule | ||
| 31532-cancel-batch-activity | ||
| 31567-allow-canceling-from-modal | ||
| 31571-fix-panic-all-teams-software | ||
| 31592-improve-offline-indicator | ||
| 31623-add-new-batch-script-endpoints | ||
| 31690-windows-discovery-errors | ||
| 31721-missing-tar-summary-card | ||
| 31736-fleetctl-debug-binary-output | ||
| 31932-last-opened-at | ||
| issue-25367-os-updates-page-permissions | ||
| issue-27467-add-cells-to-cert-table | ||
| issue-29410-turn-on-mdm-styles | ||
| update-go-1.24.6 | ||