Commit Graph

8909 Commits

Author SHA1 Message Date
Luke Heath
204f082fe5
Pin all workflow actions versions by commit (#13462) 2023-08-31 12:09:21 -05:00
Luke Heath
0541618aeb
Add merge gatekeeper action (#13546) 2023-08-31 11:11:46 -05:00
Rachael Shaw
d7586a5742
Docs: Update deployment guide title (#13621)
Update page title for Cloud.gov deployment guide to match the other
deployment guides.
2023-08-31 10:52:06 -05:00
gillespi314
72f2f7ac12
Adjust error messages for run scripts API (#13618) 2023-08-31 10:37:51 -05:00
RachelElysia
8a796ff5bd
Fleet UI: Server side filtering for global, team, and inherited policies (#13479) 2023-08-31 11:23:57 -04:00
Rachael Shaw
7d0a85bd0a
Docs: Rename "Deploy Fleet on Cloud.gov" page in nav (#13619)
Rename "Deploy Fleet on Cloud.gov" to "Cloud.gov" to match updated names
for other deployment guides:
![Screenshot 2023-08-31 at 10 22 27
AM](https://github.com/fleetdm/fleet/assets/3065949/50e7e1a2-c439-46bc-a8f8-74a3a71e016b)
2023-08-31 10:23:06 -05:00
Mike Thomas
4e1218ba42
Migrate Deploy Fleet on Render to docs. (#13017)
Migrated the "Deploy Fleet on Render" guide to the docs.

- Moved content from `/articles/deploying-fleet-on-render.md` to
`/docs/deploy-on-render.md`
- Removed `/articles/deploy-fleet-on-render.md`
- moved images from the guide to `/docs/images` and renamed
- deleted redundant article cover image
- set up redirect in `routes.js` `/deploy/deploying-fleet-on-render` =>
`/docs/deploy/deploy-on-render`

# Checklist for submitter

- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
Co-authored-by: Rachael Shaw <r@rachael.wtf>
2023-08-31 10:15:52 -05:00
Martin Angers
cbc3f32e9d
Adjust response payload, messages and validations for /scripts/run/* endpoints. (#13607) 2023-08-31 09:08:50 -05:00
Lucas Manuel Rodriguez
9142c5de79
Prevent thundering herd when applying large number of policies on large number of hosts (#13552)
#13527

(Adding @mna to double check the changes in the async implementation of
policy result storage)

This PR also adds the osquery-perf changes needed to define the count of
macOS and Windows hosts.

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- ~[ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)~
- ~[ ] Documented any permissions changes (docs/Using
Fleet/manage-access.md)~
- [X] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [X] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality
  - ~For Orbit and Fleet Desktop changes:~
- ~[ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.~
- ~[ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).~

Test with 80k hosts: 70k simulated macOS, 10k simulated Windows.
Apply Windows policies first, then apply macOS policies:
```
fleetctl apply -f ee/cis/win-10/cis-policy-queries.yml

# Leave running for some time

fleetctl apply -f ee/cis/macos-13/cis-policy-queries.yml
```

After applying CIS policies previous to these changes:
![Screenshot 2023-08-23 at 11 36
18](https://github.com/fleetdm/fleet/assets/2073526/72c1dc7d-e601-4248-be35-93c85b749f5d)

After applying these changes and applying the same policies:
![Screenshot 2023-08-28 at 15 42
57](https://github.com/fleetdm/fleet/assets/2073526/6b6d76b8-6acb-4893-a913-bf603a68f1a4)
2023-08-31 10:58:50 -03:00
Noah Talerman
6637ea6517
MDM docs: disk encryption (FileVault) (#13609)
- Update statuses to match updates we made to the UI (double check disk
encryption)
2023-08-31 09:23:22 -04:00
Marcos Oviedo
fd0743dac0
Bitlocker PoC tool (#13452)
Bitlocker PoC tool to exercise drive encryption/decryption from go

This relates to #12694
2023-08-31 09:58:27 -03:00
OpenMynds
eed7888f03
Updating names in template for contractor hours (#13493)
updating this document for my first pull request
2023-08-30 22:08:07 -05:00
Sampfluger88
78808ffdc5
Added link to KPI spreadsheet and KPI change control (#13608)
Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
2023-08-30 21:47:29 -05:00
Sampfluger88
0f1bddc409
Handbook: Marketing (#13614)
Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
2023-08-30 21:36:21 -05:00
Mike Thomas
458dcfd366
Migrate Deploy Fleet on Hetzner Cloud (#13021)
This is the last of three PRs to migrate the deployment guides into the
docs.

Changes:

- Moved content from `/articles/deploying-fleet-on-hetzner-cloud.md` to
`/docs/deploy-on-hetzner-cloud.md`.
- Removed `/articles/deploy-fleet-on-hetzner-cloud.md`.
- Moved images from the guide to `/docs/images` and renamed.
- Deleted redundant images and article cover image.
- Set up a redirect `/deploy/deploying-fleet-on-hetzner-cloud` =>
`/docs/deploy/deploy-on-hetzner-cloud`.
- Set up a redirect `/deploy` => `/docs/deploy` to redirect "Deployment
guides" in the main nav to the docs.
- Updated display names (in the docs nav) for existing deployment guides
in the docs to match the naming convention (E.g., "Deploy Fleet on
CentOS" => "CentOS")
- Removed the deployment guides article category from the blog.

# Checklist for submitter

- [ ] Manual QA for all new/changed functionality

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
Co-authored-by: Rachael Shaw <r@rachael.wtf>
2023-08-30 19:17:22 -05:00
Mike Thomas
79512076ae
Migrate Deploy Fleet on AWS to docs (#13020)
Migrated the "Deploy Fleet on AWS with Terraform" guide to the docs.

- Moved content from
`/articles/deploying-fleet-on-aws-with-terraform.md` to
`/docs/deploy-on-aws.md`.
- Removed `/articles/deploy-fleet-on-aws-with-terraform.md`.
- Moved images from the guide to `/docs/images` and renamed.
- Deleted redundant image and article cover image.
- Set up a redirect in `routes.js`
`/deploy/deploying-fleet-on-aws-with-terraform` =>
`/docs/deploy/deploy-on-aws`.

# Checklist for submitter

- [ ] Manual QA for all new/changed functionality

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
Co-authored-by: Rachael Shaw <r@rachael.wtf>
2023-08-30 19:11:19 -05:00
Roberto Dip
cb357668d2
fix typo in migration text (#13612)
I had this locally but forgot to commit it
2023-08-30 20:32:37 -03:00
RachelElysia
d4c8111038
Fleet UI: Add more specific page titles to browser tab (#13335) 2023-08-30 16:11:49 -07:00
Roberto Dip
8f8a3758f9
ensure migration dialog doesn't open automatically if it was opened manually (#13551)
for #13505
2023-08-30 19:54:42 -03:00
Rachael Shaw
34474b2e1d
Docs: Move parameters tables for count policies REST API docs (#13610)
Moved "Parameters" section above "Example" for consistent order across
the page
2023-08-30 17:35:26 -05:00
Tim Lee
222b8f9f5c
paginate the policies API (#13459) 2023-08-30 16:30:17 -06:00
Rachael Shaw
a60b906339
Handbook: Add content about how to address potential blockers when implementing a user story (#13556)
Updated the "Product groups" page to emphasize **🟢 iteration** when
considering whether to bring a user story back for expedited drafting.

---------

Co-authored-by: Sampfluger88 <108141731+Sampfluger88@users.noreply.github.com>
2023-08-30 16:38:51 -05:00
Lucas Manuel Rodriguez
4654450bc8
Fix expected number of hosts for the Test fleetctl preview workflow (#13605)
Similar to the other we fixed recently the same way:
https://github.com/fleetdm/fleet/pull/13329
2023-08-30 17:45:41 -03:00
Rachael Shaw
fc867fa0c0
Handbook: Update link to be more specific (#13598)
Updated link referencing product group's capacities to go to the table
with that info, instead of the top of the product groups page.
2023-08-30 13:57:54 -05:00
Rachael Shaw
9bb301dc25
Handbook: Document fleetd capitalization (#13599)
Clarify stylization of "fleetd".
2023-08-30 13:52:27 -05:00
Mike McNeil
0acccc8e98
Handbook: defs (#13591) 2023-08-30 13:50:48 -05:00
Lucas Manuel Rodriguez
f701dc55ed
CI: Add shell cmd for windows runner and add some debug logs to help troubleshoot (#13592)
After @rfairburn made the DNS change the clouldflared tunnel started
working again (after months of being broken).

#13547

Run: https://github.com/fleetdm/fleet/actions/runs/6025182774

This PR adds some fixes to the two workflows that make use of
cloudflared.
There are still some issues to fix but these are some changes needed to
continue/help troubleshooting.
2023-08-30 15:49:47 -03:00
Martin Angers
090b142c49
Implement script execution on the fleetd agent (disabled by default) (#13569) 2023-08-30 14:02:44 -04:00
Roberto Dip
c0cb278a1f
fix MDM SSO layout (#13578)
for #13498 to match the layout as originally described in the
[Figma](https://www.figma.com/file/hdALBDsrti77QuDNSzLdkx/%F0%9F%9A%A7-Fleet-EE%2C-June-2023-and-earlier?type=design&node-id=14776-193245&mode=design&t=fNnPKmLPfiZErDay-0)
file
2023-08-30 14:16:08 -03:00
Rachael Shaw
1c18670628
Handbook: Add note about pausing drafting & begin documenting product group capacity (#13558)
Still need to get the actual numbers, but in the interest of **🟢
iteration**, I figured I'd open this as-is to get the structure in place
(since we're usually OK with the occasional TODO on a handbook page).

After chatting with @zhumo about it today, it sounds like sprint points
don't necessarily correspond to an amount of time (reflect effort
instead) and should be much the same across the organization now, so I
didn't leave stubs for that information in the different product group
sections.

Happy to convert this to a draft and revisit any of this if it feels too
far off what @mikermcneil had envisioned, lmk!

---------

Co-authored-by: Sharon Katz <121527325+sharon-fdm@users.noreply.github.com>
Co-authored-by: Luke Heath <luke@fleetdm.com>
2023-08-30 11:10:38 -05:00
Roberto Dip
e6dbdf3855
document script execution flags (#13577)
docs for https://github.com/fleetdm/fleet/issues/13304 and it's sibling
PR: https://github.com/fleetdm/fleet/pull/13564
2023-08-30 10:34:45 -03:00
Roberto Dip
b50e1939db
Allow to configure fleetd for script execution (#13564)
Related to #13310 and #13304 this adds two ways to enable script
execution in `fleetd` (the orbit component)

- By building a package with `--enable-scripts`
- By providing a setting via a configuration profile (macOS only)

Due to how the profile assignment works, this change automatically
updates the `com.fleetdm.fleetd.config` for hosts that already have the
profile installed.

> [!NOTE]
> Documentation is in
[#13577](https://github.com/fleetdm/fleet/pull/13577) to decouple
reviews.
2023-08-30 10:18:34 -03:00
Sampfluger88
b43e2c8eb1
Handbook: /handbook/marketing (#13575)
Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
2023-08-29 23:10:29 -05:00
Sampfluger88
a8cec5987b
CEO requests to be added to a call (#13589)
Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
2023-08-29 22:22:57 -05:00
Andrew Baker
ea79fb497f
Drew bakerfdm patch 2 (#13579)
Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
2023-08-29 22:11:45 -05:00
Sampfluger88
8910a74873
Handbook: Why spend less? (#13565)
https://github.com/fleetdm/classified/issues/377

---------

Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
2023-08-29 22:10:24 -05:00
Noah Talerman
6f36e0121a
Update story issue template (#13549)
- Remove "Product quality" section from the template. @sabrinabuckets
and I think this might be redundant. Separate "QA" section asks for
testing steps and has a confirmation step.
2023-08-29 21:43:10 -05:00
Joanne Stableford
d60f6409ff
Update formatting for consistency on bullet points (#13544) 2023-08-29 21:40:23 -05:00
Sampfluger88
4fac71eaa1
Removed "AttC" to prioritize readability (#13588) 2023-08-29 20:01:39 -05:00
Andrew Baker
a5af0db138
Remove LinkedIn insight tag (#13531)
In order to combat errors with the LinkedIn insight tag, adding version
9 in Google Tag Manager to be published when this PR is merged.

This will remove the LinkedIn Insight tag from the footer of layouts.ejs
and add the tag to Google Tag Manager instead.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes (docs/Using
Fleet/manage-access.md)
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2023-08-29 17:43:13 -05:00
Sampfluger88
90abd02980
Fixing link to make sense (#13580) 2023-08-29 16:25:15 -05:00
RachelElysia
12af094a8c
Fleet UI: [tiny released styling bug] Fix alignment on long label names (#13568) 2023-08-29 14:47:26 -04:00
Mike Thomas
69f34d9ce0
Update product-groups.md (#13559)
While archiving #help-docs, I saw an opportunity to add more detail to
the website group's description by including more specific references to
managing documentation and the group's purpose.
2023-08-29 09:34:35 -05:00
Lucas Manuel Rodriguez
22b879bcef
Add instructions to deploy server code changes to a loadtest env (#13563)
#12696
2023-08-29 11:06:32 -03:00
Gabriel Hernandez
f810fc31e2
use OrbitNodeKey for windows mdm enrollment authentication instead of HostUUID (#13503)
related to #12847

This changes the authentication method for windows mdm enrollment. We
were using `HostByIndentifier ` method but have changed to
`LoadHostByOrbitNodeKey`.

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-08-29 14:50:13 +01:00
Shawn Maddock
5ecd9e5dbe
Add JumpCloud to the list of well-known MDM solutions (#13554)
# Checklist for submitter
2023-08-29 10:41:18 -03:00
RachelElysia
6cac6ed80a
Fleet UI: Live query UI and export results tables include all columns returned (#13428) 2023-08-29 08:51:37 -04:00
Roberto Dip
39dc3d8ab2
close the migration dialog only after unenrollment (#13512)
for #13450, this additionally adds minor UI/UX tweaks to the migration
flow:

1. Increased padding between the notification screenshot and the text
(hacked by using a PNG for the image as we can't add padding)
2. Centered the text
3. Made sure that all dialogs take over the screen
2023-08-29 09:44:42 -03:00
Gabriel Hernandez
3755264529
Feat UI view script activity and script details (#13388)
relates to #13308

Implements the UI for the activity item for script ran, and the script
details modal.

NOTE: Still have to do API integration and will do when API is ready in
another PR.

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Added/updated tests
- [x] Manual QA for all new/changed functionality
2023-08-29 11:47:37 +01:00
Rachael Shaw
47670b7cea
Handbook: Reflect change in drafting step terminology (#13557)
When a design has gone through the review process and is approved, it
now goes in the "Settled" column of the drafting board (previously
"Designed").
2023-08-28 22:54:45 -05:00