Commit Graph

11221 Commits

Author SHA1 Message Date
Eric
b10d1db3f5
Website: Add primaryBuyingSituation attribute to User model. (#17638)
Changes:
- Added a new attribute to the `User` model: `primaryBuyingSituation`
- Updated `signup.js` to set this value on new User accounts


Before this PR can be merged, we will need to:
- [ ] Add the new column to the User table in the website's database
- [ ] Set a default value for existing User records.

---------

Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2024-03-19 17:45:20 -05:00
Victor Lyuboslavsky
9ae36d9a1d
Emojis back on Dogfood team names. Need to rename in UI before merging. (#17605)
Emojis are back on Dogfood team names. Need to rename the teams in UI
before merging. Otherwise, GitOps will simply create new teams.

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2024-03-19 16:18:10 -05:00
Victor Lyuboslavsky
759003e37d
Fixing false negative vulnerabilities on macOS Homebrew python packages. (#17709)
#17061

TODO: Need to also merge this fix into patch branch.

# Checklist for submitter
- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-03-19 14:12:07 -05:00
Martin Angers
b0ab7bbdc4
Add enable_release_device_manually setting to team and no-team (#17698) 2024-03-19 13:21:16 -04:00
Eric
61544f4bea
Website: update create-issues-from-todays-rituals script to work in production (#17680)
Closes: #17678

Changes:
- Updated the `create-issues-from-todays-rituals` to create GH issues
using rituals from website's configuration instead of the ritual.yml
files in the `handbook/` folder
- Moved `yaml` to `devDependencies` in `webiste/package.json`
2024-03-19 10:02:50 -05:00
George Karr
c6d5151198
Updating changelog for 4.47.1 (#17689) 2024-03-19 09:47:00 -05:00
Gabriel Hernandez
8a137ffe1f Merge branch 'main' into feat-macos-ddm 2024-03-19 11:54:12 +00:00
Gabriel Hernandez
aef64e3241
Fix export hosts csv UI and editing hidden columns UI (#17691)
relates to #17632

fixes a UI bug that prevented exporting hosts by csv.

also updates the edit hidden columns modal to use column id instead of
accessor. Id is safer to use as we are now using a function definition
for the accessor for mdm enrollment status and mdm server URL columns.

- [x] Manual QA for all new/changed functionality
2024-03-19 11:51:10 +00:00
Sarah Gillespie
3d73174e90
Add macOS DDM protocol endpoints for tokens, declaration-items, and declaration/.../... (#17679) 2024-03-18 17:48:07 -05:00
Eric
d7783286d3
Website: Update Vanta integration script to retry failed requests to Vanta's authorization endpoint. (#17704)
Changes:
- Chained a `.retry()` onto the post request that refreshes
authorization tokens for Vanta connections, that will retry requests
that return a `503 service unavailable` response.
2024-03-18 17:45:07 -05:00
SFriendLee
26965c8ae9
Handbook: Update communications.md (#17681) 2024-03-18 15:39:51 -05:00
Roberto Dip
93f040f7da
fix mysql 8+ test (#17702) 2024-03-18 17:35:18 -03:00
Luke Heath
d2b6d579a2
Update engineering handbook to adjust patch release process (#17571)
This outlines a new patch branching strategy to avoid the conflicts
we've been running into recently.

This will introduce more friction in the form of two PRs for released
bug fixes during patch weeks. The benefit is that we won't have to deal
with merge conflicts when we're cherry-picking commits into the patch
branch, which sometimes becomes a big distraction for the team.

We also found ourselves in a situation with 4.46.3 where we couldn't
release a fix without rewriting it because it had been built on top of
feature code that was not included in the patch. That was the motivation
to make this change.

---------

Co-authored-by: George Karr <georgekarrv@users.noreply.github.com>
Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2024-03-18 15:17:08 -05:00
RachelElysia
b9c3d3a5b4
Fleet UI: Persist toast messages after a modal closes (#17674) 2024-03-18 14:53:30 -04:00
Noah Talerman
f28509ea06
Update macos-disable-guest-account config profile (#17677)
- Update configuration profile to disable the guest account
2024-03-18 14:44:07 -04:00
Noah Talerman
3ab970f990
Update product design rituals (#17394)
- Add "🦢🔄 Product design sync" and "🦢🗣 Product office hours"

---------

Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2024-03-18 13:19:50 -05:00
Roberto Dip
e26d23460c
record declarative checkin command responses (#17693)
this is to prevent nanomdm to send the DeclarativeManagement command
every time the host checks in.
2024-03-18 14:41:33 -03:00
Martin Angers
813a831a08
Add mention of the environment variable to disable logs in integration tests (#17524) 2024-03-18 09:24:02 -04:00
Dave Herder
c2f0686a69
Update pricing-features-table.yml, edit description of "Self-managed"… (#17567)
… item

Removed reference to air-gapped environments, even though the fleet
agent can work air-gapped, MDM protocols (apple and msft) do not support
air-gapped deployments.

---------

Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
2024-03-15 18:08:24 -05:00
Noah Talerman
281b5ffaf7
Rachael is API design DRI (#17630)
- Move "API design" DRI from "Product groups" page to DRIs table
2024-03-15 18:02:15 -05:00
Eric
9f7fb1f79e
Website: Update tooltips on pricing page (#17672)
Closes: https://github.com/fleetdm/confidential/issues/5759

Changes:
- Updated the tooltips on the pricing page to close when a user is no
longer hovering their cursor over them.
2024-03-15 17:04:55 -05:00
Tim Lee
57d6c88a63
Policy Result Control in osquery-perf (#17649) 2024-03-15 16:04:46 -06:00
Noah Talerman
7afe341017
Update Supported-host-operating-systems.md (#17661)
For the following bug: #12334

- Call out that, currently on Ubuntu, Fleet Desktop only supports
display number of `0`
2024-03-15 18:03:33 -04:00
Roberto Dip
f5cf156653
improve mdmtest package to handle any kind of command (#17673)
it delegates any extra unmarshaling to the caller. We might consider
building our own types in the future instead of relying on micromdm, but
these are used only for tests right now.
2024-03-15 17:10:48 -03:00
Sarah Gillespie
48b31a02ae
Add DDM service struct, basic handlers, and test client (#17671) 2024-03-15 15:20:15 -03:00
Eric
29e66efc19
Website: Add required meta tag to page in contributing documentation (#17668)
Changes:
- Added a `pageOrderInSection` `<meta>` tag to the
`windows-mdm-glossary-and-protocol.md`
2024-03-15 13:19:54 -05:00
Noah Talerman
57d00f310d
Add script to workstations and canary (#17634)
- Add script to remove the old Nudge launch agent (deployed by
SimpleMDM)
2024-03-15 13:04:00 -04:00
Benjamin Edwards
0d9718aea6
enable & upgrade external vuln scans (#17038) 2024-03-15 11:45:58 -04:00
Dante Catalfamo
58dc1d4502
Create initial windows MDM glossary and diagram document (#17507)
```mermaid
sequenceDiagram
    participant windows as Windows
    participant orbit as Orbit
    participant server as fleet server
    loop every 30 seconds
        orbit->>+server: POST /api/fleet/orbit/config
        server-->>-orbit: pending notifications
    end
    note over orbit: receive enrollment notification
    orbit->>windows: mdmregistration.dll<br/>RegisterDeviceWithManagement
    windows->>+server: POST /api/mdm/microsoft/discovery
    server-->>-windows: EnrollmentServiceURL, EnrollmentPolicyServiceUrl
    windows->>+server: POST /api/mdm/microsoft/policy<br/>DeviceEnrollmentUserToken
    server-->>-windows: Policy Schema, Certificate requirements
    activate windows
    note left of windows: Generate keypair
    deactivate windows
    windows->>+server: POST /api/mdm/microsoft/enroll<br/>Self-signed CSR & cert values
    note right of server: Creates certificate signed by WSTEP ident key
    server-->>-windows: Signed certificate, management endpoint, enrollment parameters
    loop SYNCML MDM Protocol (mTLS)
        windows->>+server: POST /api/mdm/microsoft/management
        server-->>-windows: Response
    end
```
2024-03-15 10:02:47 -04:00
Dante Catalfamo
797e12983c
Add diagram to texting-and-local-development explaining internal certificate generation flow (#17396)
```mermaid
sequenceDiagram
    participant user as user email
    participant fleetctl as fleetctl
    participant server as fleet server
    participant fleetdm as fleetdm.com sails app
    participant apple as identity.apple.com
    link apple: PushCert @ https://identity.apple.com/pushcert
    note over fleetctl: fleetctl login
    fleetctl->>+server: login
    server-->>-fleetctl: token
    note over fleetctl: fleetctl generate mdm_apple
    fleetctl->>+server: generate certificates
    server->>server: generate self-signed SCEP cert & key
    server->>server: generate APNs key
    server->>server: generate APNs CSR
    server-)+fleetdm: request vendor signature on APNs CSR
    server-->>-fleetctl: SCEP cert, SCEP key, APNs key
    note over fleetdm: calls /ee/tools/mdm/cert
    fleetdm--)-user: vendor-signed APNs CSR
    user->>+apple: vendor-signed APNs CSR
    note right of apple: managed through web ui
    apple-->>-user: Apple-signed APNs certificate
```
2024-03-15 10:01:51 -04:00
Roberto Dip
d261762e83
add base types and handlers for DDM (#17657)
This includes the base types and the request handlers to reduce the
chances of conflicts.
2024-03-15 10:51:47 -03:00
Noah Talerman
01e0d70903
Noah is codeowner for dogfood (#17635)
- @noahtalerman get's a Toast notification for changes to dogfood
(managed via [Fleet's best practice
GitOps](https://github.com/fleetdm/fleet-gitops))

Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2024-03-14 21:20:11 -05:00
Luke Heath
fbcf63d5f4
Update CODEOWNERS (#17627)
This adds Ben back to the codeowners for infra files. This is necessary
because both Kathy and I will be out tomorrow, so no one will be able to
approve Robert's infra changes.
2024-03-14 19:02:33 -05:00
Eric
4ce61c0e2e
Website: add redirect for /try-fleet/fleetctl-preview (#17656)
Closes: #17655

Changes:
- Added a redirect for `/try-fleet/fleetctl-preview` going to
`/try-fleet`
2024-03-14 18:05:04 -05:00
Eric
224a5f89bd
Handbook: Fix broken links in handbook. (#17643)
Changes:
- Fixed two broken links on the digital experience handbook page
- Updated link text and removed a broken link on the engineering
handbook page.
2024-03-14 17:02:00 -05:00
Award Malisi
a7bb6ea333
Handbook: Open position: Typo fix: Upper-case the 'e' in 'experience'. (#17654)
Updated line# 53: Upper-case the 'e' in 'experience'.
2024-03-14 16:33:24 -05:00
Roberto Dip
dc87ac2271
add schema for DDM (#17636)
#17405
2024-03-14 18:08:19 -03:00
Eric
3586e89faa
Website: Move yaml dependency out of dev dependencies (#17647)
Closes: #17644

Changes:
- Updated the website's dependencies to include `yaml` so it can be used
by the `create-issues-for-todays-rituals` script.
2024-03-14 16:01:47 -05:00
Lucas Manuel Rodriguez
01dfce56cf
Doc changes for VSCode extensions (#17639)
Doc changes for #17003
2024-03-14 17:00:07 -03:00
Rachael Shaw
e6dbb66869
Add redirect for use in the policies UI (#17641)
Currently the policies UI links directly to the docs, but going forward
we're adding redirects for pages linked to from the Fleet UI, to make it
easier to keep those links up-to-date.

Since we're making changes to the policies UI right now, updating this
one.
2024-03-14 14:56:53 -05:00
Lucas Manuel Rodriguez
cf64d85deb
Add visual studio extensions to software inventory (#17501)
#17003

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [X] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [x] Added/updated tests
- [X] Manual QA for all new/changed functionality
2024-03-14 16:33:12 -03:00
Eric
5028722506
Website: update signup and login pages (#17637)
Changes:
- Removed the /try-fleet/explore-data redirects from the /login and
/register pages.
- Updated the login links on /register to go to /login (previously
/customers/login)
- Updated text on the /login page to say "Welcome to Fleet"
2024-03-14 14:27:12 -05:00
Robert Fairburn
c10c75cb83
Update monitoring terraform module to support multiple albs (saml-auth-proxy support) (#17631) 2024-03-14 13:42:48 -05:00
Rachael Shaw
5349403374
API design: Wipe host (#17107)
REST API updates for remote wipe
([#9951](https://github.com/fleetdm/fleet/issues/9951)).
2024-03-14 14:30:16 -04:00
Rachael Shaw
bc034b6bb2
#15919 API design: Vulnerabilities page (#16443)
REST API changes for #15919

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
Co-authored-by: Tim Lee <timlee@fleetdm.com>
2024-03-14 13:27:07 -05:00
Rachael Shaw
ee7dbaa5a0
#1642 API design: Populate policy data in GET /hosts API (#16582)
- Adds a `populate_policies` parameter to the "List hosts" endpoint
2024-03-14 14:07:03 -04:00
Eric
b1e73387ea
Website: update signup forms and license dispenser (#17572)
Closes: #16697

Changes:
- Updated the managed cloud feature in `pricing-features-table.yml` to
note that is only available for >700 hosts
- Updated `signup.js` to accept one new input `primaryBuyingSituation`
and to throw an error if someone signs up with a personal email address.
- Updated the /customers/register page to ask users signing up what they
will be using Fleet for, and to display an error if a user signs up with
a personal email address.
- Updated the /try-fleet/register page to show an error if a user signs
up with a personal email address
- Updated the /customers/new-license page to:
- only show the quoted price for users creating a quote for >700 hosts
- Add a checkbox to the billing form for users to confirm that they
understand they are buying a license for self-hosted Fleet Premium
2024-03-14 12:28:35 -05:00
Sharon Katz
3365fd736f
Repurpose policies (#17560)
- Update CIS guest account policy
- Update guest account policy in dogfood
2024-03-14 13:13:29 -04:00
Noah Talerman
3ba6bb50c4
Update Engineering handbook (#17628) 2024-03-14 11:29:04 -05:00
dependabot[bot]
49b689391d
Bump google.golang.org/protobuf from 1.27.1 to 1.33.0 in /infrastructure/kubequery (#17606) 2024-03-14 11:27:24 -05:00