Commit Graph

227 Commits

Author SHA1 Message Date
Jacob Shandling
eb327faabf
maintenance merge of main into feature branch (#14393)
maintenance merge of `main` into feature branch
2023-10-09 14:28:35 -07:00
Robert Fairburn
0f4e24a40a
Initial saml-auth-proxy code. (#14017) 2023-09-28 12:48:57 -05:00
Luke Heath
6807cfe897
Prepare v4.38.0 (#14123) 2023-09-25 16:43:52 -05:00
Martin Angers
1ce9eb5976
Fix invalid digest used in loadtest dockerfile (#13916) 2023-09-13 16:02:33 -04:00
Luke Heath
a745c3a8a8
Prepare Fleet v4.37.0 (#13821) 2023-09-08 13:35:44 -05:00
Zachary Winnerman
075ecf4a62
Add separate kms key for installers (#13786)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes (docs/Using
Fleet/manage-access.md)
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-09-07 07:21:24 -04:00
Robert Fairburn
595ccd376f
Update dogfood mdm module version (#13751) 2023-09-06 15:26:50 -05:00
Robert Fairburn
8a653c1b00
Enable windows mdm on dogfood (#13739) 2023-09-06 11:33:04 -05:00
Robert Fairburn
21b01605ae
Update nginx for redirect container in sandbox (#13509) 2023-09-06 11:16:27 -05:00
Roberto Dip
5ad734d617
upgrade go to v1.19.12 (#13617) 2023-08-31 13:49:24 -05:00
Lucas Manuel Rodriguez
22b879bcef
Add instructions to deploy server code changes to a loadtest env (#13563)
#12696
2023-08-29 11:06:32 -03:00
Luke Heath
1260db9360
Prepare v4.36.0 (#13364) 2023-08-17 16:11:19 -05:00
Luke Heath
21b21abd22
Prepare v4.35.2 (#13273) 2023-08-10 11:35:03 -07:00
Luke Heath
f3b9bcc02a
Prepare v4.35.1 (#13163) 2023-08-10 08:43:52 -07:00
Zachary Winnerman
b95c85be59
Revert "Do vuln scans only during peak hours (#12978)" (#13166)
This reverts commit bea7fa6dd0.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-08-05 00:17:34 -04:00
Zachary Winnerman
3fe9d56fcd
Add changes needed for EKS upgrade (#13135)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-08-03 16:43:27 -04:00
Luke Heath
648b25bf4d
Prepare v4.35.0 (#13077) 2023-08-01 09:22:01 -07:00
Luke Heath
c8dee16121
Prepare v4.34.1 (#13073) 2023-07-31 16:54:24 -07:00
Zachary Winnerman
b042a1a503
Disable windows mdm (#13042)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-07-28 19:07:25 -04:00
Zachary Winnerman
fc7c7544a9
Revert these PRs: (#13001)
https://github.com/fleetdm/fleet/pull/12763/files
https://github.com/fleetdm/fleet/pull/12854/files
https://github.com/fleetdm/fleet/pull/12764/files

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-07-27 14:57:11 -04:00
Zachary Winnerman
bea7fa6dd0
Do vuln scans only during peak hours (#12978)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-07-26 14:25:52 -04:00
Roberto Dip
d9de78e9fc
upgrade Go version to 1.19.11 (#12902) 2023-07-26 11:09:22 -07:00
Zachary Winnerman
0baf8441c6
see https://github.com/fleetdm/confidential/issues/3166#issuecomment-… (#12940)
…1648567704

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-07-24 16:53:29 -04:00
Zachary Winnerman
e7f4441f7b
fixup (#12939)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-07-24 16:11:03 -04:00
Zachary Winnerman
7eecb4ac90
Add Windows MDM variables to the MDM terraform mdoule and update dogfood (#12938)
https://github.com/fleetdm/confidential/issues/3166
2023-07-24 15:49:30 -04:00
Zachary Winnerman
d6f51f893c
fix bug in deprovisioner (#12854)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-07-19 19:59:02 -04:00
Zachary Winnerman
bd3a37ea5c
Update sandbox to latest fleet (#12845)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-07-19 19:30:22 -04:00
Lucas Manuel Rodriguez
b803bbe5bf
osquery-perf changes needed for load testing with simulated Windows hosts (#12754)
Changes in osquery-perf to allow for testing of Windows hosts in
loadtest environments.
2023-07-14 13:06:34 -03:00
Zachary Winnerman
ce57fa2c84
Scale down and delete cronjob for expired instances (#12764)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-07-13 20:57:00 -04:00
Zachary Winnerman
0c864613ab
Fix for sandbox vuln processing (#12763)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-07-13 20:43:20 -04:00
Luke Heath
a001fbf3ec
Prepare v4.34.0 (#12706) 2023-07-11 14:38:57 -07:00
Robert Fairburn
c14752e7ce
Increase log retention for dogfood cloudwatch logs (#12664) 2023-07-06 11:53:33 -05:00
Luke Heath
cc8a2d0605
Prepare v4.33.1 (#12417) 2023-06-30 09:49:50 -07:00
dependabot[bot]
dd0f5f81e8
Bump github.com/gin-gonic/gin from 1.8.1 to 1.9.1 in /infrastructure/sandbox/JITProvisioner/lambda (#12098)
Bumps [github.com/gin-gonic/gin](https://github.com/gin-gonic/gin) from
1.8.1 to 1.9.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gin-gonic/gin/releases">github.com/gin-gonic/gin's
releases</a>.</em></p>
<blockquote>
<h2>v1.9.1</h2>
<h2>Changelog</h2>
<h3>BUG FIXES</h3>
<ul>
<li>fix Request.Context() checks <a
href="https://redirect.github.com/gin-gonic/gin/pull/3512">#3512</a></li>
</ul>
<h3>SECURITY</h3>
<ul>
<li>fix lack of escaping of filename in Content-Disposition <a
href="https://redirect.github.com/gin-gonic/gin/pull/3556">#3556</a></li>
</ul>
<h3>ENHANCEMENTS</h3>
<ul>
<li>refactor: use bytes.ReplaceAll directly <a
href="https://redirect.github.com/gin-gonic/gin/pull/3455">#3455</a></li>
<li>convert strings and slices using the officially recommended way <a
href="https://redirect.github.com/gin-gonic/gin/pull/3344">#3344</a></li>
<li>improve render code coverage <a
href="https://redirect.github.com/gin-gonic/gin/pull/3525">#3525</a></li>
</ul>
<h3>DOCS</h3>
<ul>
<li>docs: changed documentation link for trusted proxies <a
href="https://redirect.github.com/gin-gonic/gin/pull/3575">#3575</a></li>
<li>chore: improve linting, testing, and GitHub Actions setup <a
href="https://redirect.github.com/gin-gonic/gin/pull/3583">#3583</a></li>
</ul>
<h2>v1.9.0</h2>
<h2>Changelog</h2>
<h3>BREAK CHANGES</h3>
<ul>
<li>Stop useless panicking in context and render <a
href="https://redirect.github.com/gin-gonic/gin/pull/2150">#2150</a></li>
</ul>
<h3>BUG FIXES</h3>
<ul>
<li>fix(router): tree bug where loop index is not decremented. <a
href="https://redirect.github.com/gin-gonic/gin/pull/3460">#3460</a></li>
<li>fix(context): panic on NegotiateFormat - index out of range <a
href="https://redirect.github.com/gin-gonic/gin/pull/3397">#3397</a></li>
<li>Add escape logic for header <a
href="https://redirect.github.com/gin-gonic/gin/pull/3500">#3500</a> and
<a
href="https://redirect.github.com/gin-gonic/gin/pull/3503">#3503</a></li>
</ul>
<h3>SECURITY</h3>
<ul>
<li>Fix the GO-2022-0969 and GO-2022-0288 vulnerabilities <a
href="https://redirect.github.com/gin-gonic/gin/pull/3333">#3333</a></li>
<li>fix(security): vulnerability GO-2023-1571 <a
href="https://redirect.github.com/gin-gonic/gin/pull/3505">#3505</a></li>
</ul>
<h3>ENHANCEMENTS</h3>
<ul>
<li>feat: add sonic json support <a
href="https://redirect.github.com/gin-gonic/gin/pull/3184">#3184</a></li>
<li>chore(file): Creates a directory named path <a
href="https://redirect.github.com/gin-gonic/gin/pull/3316">#3316</a></li>
<li>fix: modify interface check way <a
href="https://redirect.github.com/gin-gonic/gin/pull/3327">#3327</a></li>
<li>remove deprecated of package io/ioutil <a
href="https://redirect.github.com/gin-gonic/gin/pull/3395">#3395</a></li>
<li>refactor: avoid calling strings.ToLower twice <a
href="https://redirect.github.com/gin-gonic/gin/pull/3433">#3343</a></li>
<li>console logger HTTP status code bug fixed <a
href="https://redirect.github.com/gin-gonic/gin/pull/3453">#3453</a></li>
<li>chore(yaml): upgrade dependency to v3 version <a
href="https://redirect.github.com/gin-gonic/gin/pull/3456">#3456</a></li>
<li>chore(router): match method added to routergroup for multiple HTTP
methods supporting <a
href="https://redirect.github.com/gin-gonic/gin/pull/3464">#3464</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/gin-gonic/gin/blob/master/CHANGELOG.md">github.com/gin-gonic/gin's
changelog</a>.</em></p>
<blockquote>
<h2>Gin v1.9.1</h2>
<h3>BUG FIXES</h3>
<ul>
<li>fix Request.Context() checks <a
href="https://redirect.github.com/gin-gonic/gin/pull/3512">#3512</a></li>
</ul>
<h3>SECURITY</h3>
<ul>
<li>fix lack of escaping of filename in Content-Disposition <a
href="https://redirect.github.com/gin-gonic/gin/pull/3556">#3556</a></li>
</ul>
<h3>ENHANCEMENTS</h3>
<ul>
<li>refactor: use bytes.ReplaceAll directly <a
href="https://redirect.github.com/gin-gonic/gin/pull/3455">#3455</a></li>
<li>convert strings and slices using the officially recommended way <a
href="https://redirect.github.com/gin-gonic/gin/pull/3344">#3344</a></li>
<li>improve render code coverage <a
href="https://redirect.github.com/gin-gonic/gin/pull/3525">#3525</a></li>
</ul>
<h3>DOCS</h3>
<ul>
<li>docs: changed documentation link for trusted proxies <a
href="https://redirect.github.com/gin-gonic/gin/pull/3575">#3575</a></li>
<li>chore: improve linting, testing, and GitHub Actions setup <a
href="https://redirect.github.com/gin-gonic/gin/pull/3583">#3583</a></li>
</ul>
<h2>Gin v1.9.0</h2>
<h3>BREAK CHANGES</h3>
<ul>
<li>Stop useless panicking in context and render <a
href="https://redirect.github.com/gin-gonic/gin/pull/2150">#2150</a></li>
</ul>
<h3>BUG FIXES</h3>
<ul>
<li>fix(router): tree bug where loop index is not decremented. <a
href="https://redirect.github.com/gin-gonic/gin/pull/3460">#3460</a></li>
<li>fix(context): panic on NegotiateFormat - index out of range <a
href="https://redirect.github.com/gin-gonic/gin/pull/3397">#3397</a></li>
<li>Add escape logic for header <a
href="https://redirect.github.com/gin-gonic/gin/pull/3500">#3500</a> and
<a
href="https://redirect.github.com/gin-gonic/gin/pull/3503">#3503</a></li>
</ul>
<h3>SECURITY</h3>
<ul>
<li>Fix the GO-2022-0969 and GO-2022-0288 vulnerabilities <a
href="https://redirect.github.com/gin-gonic/gin/pull/3333">#3333</a></li>
<li>fix(security): vulnerability GO-2023-1571 <a
href="https://redirect.github.com/gin-gonic/gin/pull/3505">#3505</a></li>
</ul>
<h3>ENHANCEMENTS</h3>
<ul>
<li>feat: add sonic json support <a
href="https://redirect.github.com/gin-gonic/gin/pull/3184">#3184</a></li>
<li>chore(file): Creates a directory named path <a
href="https://redirect.github.com/gin-gonic/gin/pull/3316">#3316</a></li>
<li>fix: modify interface check way <a
href="https://redirect.github.com/gin-gonic/gin/pull/3327">#3327</a></li>
<li>remove deprecated of package io/ioutil <a
href="https://redirect.github.com/gin-gonic/gin/pull/3395">#3395</a></li>
<li>refactor: avoid calling strings.ToLower twice <a
href="https://redirect.github.com/gin-gonic/gin/pull/3433">#3343</a></li>
<li>console logger HTTP status code bug fixed <a
href="https://redirect.github.com/gin-gonic/gin/pull/3453">#3453</a></li>
<li>chore(yaml): upgrade dependency to v3 version <a
href="https://redirect.github.com/gin-gonic/gin/pull/3456">#3456</a></li>
<li>chore(router): match method added to routergroup for multiple HTTP
methods supporting <a
href="https://redirect.github.com/gin-gonic/gin/pull/3464">#3464</a></li>
<li>chore(http): add support for go1.20 http.rwUnwrapper to
gin.responseWriter <a
href="https://redirect.github.com/gin-gonic/gin/pull/3489">#3489</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4ea0e648e3"><code>4ea0e64</code></a>
Ready release gin 1.9.1 (by: thinkerou) (<a
href="https://redirect.github.com/gin-gonic/gin/issues/3630">#3630</a>)</li>
<li><a
href="bb1fc2e0fe"><code>bb1fc2e</code></a>
fix Request.Context() checks (<a
href="https://redirect.github.com/gin-gonic/gin/issues/3512">#3512</a>)</li>
<li><a
href="2d4bbec941"><code>2d4bbec</code></a>
fix lack of escaping of filename in Content-Disposition (<a
href="https://redirect.github.com/gin-gonic/gin/issues/3556">#3556</a>)</li>
<li><a
href="9f5ecd4be4"><code>9f5ecd4</code></a>
chore(deps): bump actions/setup-go from 3 to 4 (<a
href="https://redirect.github.com/gin-gonic/gin/issues/3543">#3543</a>)</li>
<li><a
href="20cd6bcfc4"><code>20cd6bc</code></a>
chore(deps): bump github.com/go-playground/validator/v10 (<a
href="https://redirect.github.com/gin-gonic/gin/issues/3610">#3610</a>)</li>
<li><a
href="6bdc725c8d"><code>6bdc725</code></a>
Fix typos in ISSUE_TEMPLATE.md (<a
href="https://redirect.github.com/gin-gonic/gin/issues/3616">#3616</a>)</li>
<li><a
href="1ab268989d"><code>1ab2689</code></a>
chore(deps): bump golang.org/x/net from 0.9.0 to 0.10.0 (<a
href="https://redirect.github.com/gin-gonic/gin/issues/3599">#3599</a>)</li>
<li><a
href="6a0556ed5a"><code>6a0556e</code></a>
improve render code coverage (<a
href="https://redirect.github.com/gin-gonic/gin/issues/3525">#3525</a>)</li>
<li><a
href="eac2daac64"><code>eac2daa</code></a>
chore: update dependencies for various packages and libraries (<a
href="https://redirect.github.com/gin-gonic/gin/issues/3585">#3585</a>)</li>
<li><a
href="757a638b7b"><code>757a638</code></a>
chore: improve linting, testing, and GitHub Actions setup (<a
href="https://redirect.github.com/gin-gonic/gin/issues/3583">#3583</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/gin-gonic/gin/compare/v1.8.1...v1.9.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/gin-gonic/gin&package-manager=go_modules&previous-version=1.8.1&new-version=1.9.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts page](https://github.com/fleetdm/fleet/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-26 11:03:23 -04:00
Zachary Winnerman
a8ee03b457
Add code for elastic agent (#12490)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-06-25 20:15:32 -04:00
Robert Fairburn
2649073d91
Comment cost-saving changes in sandbox Helm Chart (#12424)
These are comments for 3 of the main changes that prevent lingering
containers from causing runaway costs in sandbox.
2023-06-21 14:35:48 -05:00
Robert Fairburn
7fcabff060
Add sandbox cleanup failed executions script (#12404)
Just in case we ever need this again.
2023-06-20 11:21:02 -05:00
Robert Fairburn
e3aaa7b4d0
Release v4.33.0 to sandbox (#12390) 2023-06-20 10:28:32 -05:00
Luke Heath
55387eb189
Prepare v4.33.0 (#12302) 2023-06-12 20:35:28 -05:00
Roberto Dip
ab9ac28538
upgrade go version to 1.19.10 (#12187)
for #12177
2023-06-07 17:59:30 -03:00
Zachary Winnerman
4c53beef2e
Add additional stuff I forgot for sandbox traces (#12146)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-06-05 18:01:46 -04:00
Zachary Winnerman
166b83a461
Add APM to sandbox (#12134)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-06-05 13:46:36 -04:00
Luke Heath
1f8ca0bbb4
Use personal access token for workflows (#12118) 2023-06-02 16:23:23 -05:00
Zachary Winnerman
85e0ac8cb7
Add aws guard duty alerts to slack and version bump the spend alerts (#12117)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-06-02 15:01:06 -04:00
Robert Fairburn
297d87934f
Update sandbox preprovisioner deploy chart (#12067) 2023-05-31 13:38:46 -05:00
Zachary Winnerman
5058e79879
Add changes for v4.32.0 to sandbox (#12066)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-05-31 14:12:11 -04:00
Zachary Winnerman
1974783585
Add AWS spending alerts (#12050)
Closes https://github.com/fleetdm/confidential/issues/2700

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-05-30 20:10:14 -04:00
Lucas Manuel Rodriguez
ef16e1b41f
Add docs to loadtest with MDM enabled and configured (#11891) 2023-05-25 09:07:24 -03:00
Luke Heath
9055564b0c
Prepare v4.32.0 (#11908) 2023-05-24 17:31:20 -05:00
Zachary Winnerman
af8ea1eb2f
Use tags for our code (#11854)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).

See #11583
2023-05-22 14:07:09 -04:00