Commit Graph

10794 Commits

Author SHA1 Message Date
Gabriel Hernandez
66f5c34288
show error messages in flash message when wiping (#17245)
quick change to show the error message when wiping fails
2024-02-28 17:34:54 +00:00
Martin Angers
1710e1c8ef
Remote Wipe: implement transition of "wiped" back to "unlocked" after re-enrollment (#17217) 2024-02-28 09:48:26 -05:00
Gabriel Hernandez
b692d7fa05 Merge branch 'main' into feat-mdm-wipe-host 2024-02-28 11:54:45 +00:00
Will Mayhone
48f1ea994b
Update pricing-features-table.yml (#16739)
Added a customer quote to the human endpoint mapping

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any permissions changes (docs/Using
Fleet/manage-access.md)
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).

---------

Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
2024-02-27 22:50:45 -06:00
Noah Talerman
2a60823a93
Update Kubernetes best practice docs (#16807)
- Remove example YAML file from docs to deduplicate
- Update "Prepare a new version of Fleet" handbook instructions to point
to the best practice YAML
- Add README to point to docs
- Move tools for deploying Fleet on Kubernetes to `Deploy/` folder.
- Add @dherder as CODEOWNER so that Dave gets pinged every time a
contributor wants to make a change to the Kubernetes

---------

Co-authored-by: Dave Herder <27025660+dherder@users.noreply.github.com>
Co-authored-by: Luke Heath <luke@fleetdm.com>
2024-02-27 22:49:48 -06:00
Isabell Reedy
38adcc3f63
Adding Dante Catalfamo to MDM product group (#17167) 2024-02-27 22:47:58 -06:00
Martin Angers
6c0e56ea73
Address multiple redis-related issues observed with live queries (#16855)
#16331 

Doc updates in a separate PR:
https://github.com/fleetdm/fleet/pull/17214

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality (smoke-tested locally
with osquery-perf simulating 100 hosts, ran a live query, a saved live
query, stopped naturally and stopped before the end, and again via
fleetctl)

---------

Co-authored-by: Victor Lyuboslavsky <victor@fleetdm.com>
Co-authored-by: Victor Lyuboslavsky <victor.lyuboslavsky@gmail.com>
2024-02-27 19:35:27 -06:00
Rachael Shaw
d50ee081f2
API docs: Remove mdm.device_status and mdm.pending_action from list hosts response (#17222)
The "List hosts" endpoint doesn't actually include this information.
2024-02-27 16:05:10 -06:00
Jahziel Villasana-Espinoza
205338bfa3
feat: update error message for script timeouts (#17215)
> Related issue: #16019

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
2024-02-27 16:19:34 -05:00
Tim Lee
e0fb5d8e31
17146 query optim (#17177) 2024-02-27 13:51:42 -07:00
Lucas Manuel Rodriguez
220e55269e
Fix orphaned live queries in Redis when client terminates connection (#17202)
#17197

The following endpoints have the issue:
```
curl -v -k -X POST -H "Authorization: Bearer $TEST_TOKEN" https://localhost:8080/api/latest/fleet/queries/758/run -d '{"host_ids": [15858]}'
# Hit Ctrl + C before the API returns.

curl -v -k -X GET -H "Authorization: Bearer $TEST_TOKEN" https://localhost:8080/api/latest/fleet/queries/run -d '{"query_ids": [758], "host_ids": [15858]}'
# Hit Ctrl + C before the API returns.

curl -k -X POST -H "Authorization: Bearer $TEST_TOKEN" https://localhost:8080/api/latest/fleet/hosts/15858/query -d '{"query": "SELECT * FROM osquery_info;"}'
# Hit Ctrl + C before the API returns.

curl -k -X POST -H "Authorization: Bearer $TEST_TOKEN" https://localhost:8080/api/latest/fleet/hosts/identifier/2A249326-34B7-4B1D-BEB5-9B3A23BC30E6/query -d '{"query": "SELECT * FROM os_version;"}'
# Hit Ctrl + C before the API returns.

redis-cli -h 127.0.0.1
127.0.0.1:6379> SMEMBERS livequery:active
# Will list the four live queries for 7 days... and Fleet will be in live query mode for such 7 days...
```

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-02-27 17:47:05 -03:00
Martin Angers
b95e723275
Fix handling of enable_disk_encryption: null in PATCH /config (#17212) 2024-02-27 15:43:31 -05:00
Sam Pfluger
d2f8574a75
Update communications.md (#17132)
Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
2024-02-27 14:32:32 -06:00
Victor Lyuboslavsky
02de6b5695
Adding full unicode/emoji support for team/policy names. (#17163)
#17027 
Added Unicode and emoji support for policy and team names.

I have the manual test steps in the issue:
https://github.com/fleetdm/fleet/issues/17027

# Checklist for submitter
- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-02-27 12:55:05 -06:00
JD
2541574b93
Article: Fleet 4.46.0 release (#17207)
Article: Fleet 4.46.0 release
https://github.com/fleetdm/fleet/issues/17013
2024-02-27 10:03:17 -08:00
RachelElysia
57c3ec2ca5
[unreleased bug] Fleet UI: exploit not exploited key for filtering vulns (#17176) 2024-02-27 09:33:13 -05:00
Gabriel Hernandez
01af4b78cd Merge branch 'main' into feat-mdm-wipe-host 2024-02-27 14:23:43 +00:00
Noah Talerman
4b5a84b2f1
Add page to contributor docs for custom configuration web URL (#17081)
- Move instructions for how to use custom configuration_web_url (#15633)
to contributor docs so that change to instructions go through code
review.
2024-02-27 09:06:35 -05:00
Noah Talerman
c0e27ea115
API docs: Add note to Get host by identifier (#17097)
- `hostname` isn't always unique
2024-02-27 09:06:15 -05:00
Mike McNeil
2d73b99bb0
Update endpoint-ops.ejs: emphasize what helps OKRs get accomplished (#17201) 2024-02-27 02:03:41 -06:00
Mike McNeil
60fc306686
Update endpoint-ops.ejs: “a consistent interface” (#17200)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any permissions changes (docs/Using
Fleet/manage-access.md)
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-02-27 01:52:56 -06:00
Mike McNeil
74112b0302
Make the bottom match the top (#17199) 2024-02-26 21:46:39 -06:00
Eric
f9401d3bc6
Website: Update license dispenser (#17183)
Closes: #17161

Changes:
- Updated the license dispenser to direct users who want to purchase a
license for >700 hosts to talk to sales (Previously >1000)
- Updated button text on the /customers/new-license page ("Show me" »
"Talk to Sales")
2024-02-26 17:23:16 -06:00
Eric
c2c0d1db55
Website: Update order product category sections on homepage (#17192)
Closes: https://github.com/fleetdm/confidential/issues/5557

Changes:
- Moved the endpoint ops section to the top of the product categories on
the homepage.
2024-02-26 17:02:36 -06:00
Rachael Shaw
094392798d
Fix "Team policies" API docs heading (#17191)
Change from h3 to h2 so it's visible in the side navigation.
2024-02-26 16:27:24 -06:00
Martin Angers
e9dd418bb6
Fix case where the Remote Wipe causes the host's platform to become "unknown" and never reports "Wiped" (#17182) 2024-02-26 16:52:23 -05:00
Mike McNeil
ea02f0f5a4
A consistent interface (#17184)
Pregame for swapping top two sections ahead of unified branding push.
2024-02-26 14:23:49 -06:00
Jahziel Villasana-Espinoza
941bfa6ca1
updates to how MDM solution names are calculated (#17112)
> Related issue: #16838

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-02-26 14:38:20 -05:00
github-actions[bot]
23cccd4999
Update versions of fleetd components in Fleet's TUF [automated] (#17179)
Automated change from [GitHub
action](https://github.com/fleetdm/fleet/actions/workflows/fleetd-tuf.yml).

Co-authored-by: lucasmrod <lucasmrod@users.noreply.github.com>
2024-02-26 16:35:02 -03:00
Tim Lee
a0ca5dd1bf
Bugfix: Use CVE struct in Vuln Responses (#17140) 2024-02-26 11:29:59 -07:00
Lucas Manuel Rodriguez
4f0682f346
New scripts to automate download of components from Github actions (#17144)
#17054

This was used as part of the release of fleetd 1.22.0 to the `edge`
channel.
I added more automation to ease releasing fleetd. (They were too many
manual clicks and error prone actions.)
2024-02-26 14:29:04 -03:00
Gabriel Hernandez
32f4465a40
update Orbit docs url (#17077)
updated URL for orbit docs. The previous location forwarded to
https://fleetdm.com/docs/using-fleet/enroll-hosts and did not give info
about Orbit.

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
2024-02-26 17:13:25 +00:00
github-actions[bot]
a624555fb1
Update versions of fleetd components in Fleet's TUF [automated] (#17158)
Automated change from [GitHub
action](https://github.com/fleetdm/fleet/actions/workflows/fleetd-tuf.yml).

Co-authored-by: lucasmrod <lucasmrod@users.noreply.github.com>
2024-02-26 13:59:58 -03:00
Martin Angers
a01241ec2e
Remote wipe: add API endpoint and activity (#17060) 2024-02-26 11:31:00 -05:00
Sam Pfluger
e7825ec157
Update README.md (#17168) 2024-02-26 10:23:04 -06:00
Martin Angers
2dfb260850
Move nanodep dependency in monorepo (#16984) 2024-02-26 10:26:00 -05:00
Gabriel Hernandez
5d20ee85fc
UI for wiping a host (#16874)
# Checklist for submitter

add ability in the UI to wipe a host managed by the fleet mdm. This
includes:

**new wipe host action dropdown option:**


![image](https://github.com/fleetdm/fleet/assets/1153709/a5c01e45-d494-4762-8504-1e1963093809)

**new wipe modal to initiate wiping a host:**


![image](https://github.com/fleetdm/fleet/assets/1153709/829c8dfb-a60f-427b-b6b8-2804924c0b71)

**wipe and wiping host status tags: **


![image](https://github.com/fleetdm/fleet/assets/1153709/de947160-7273-409d-bcfd-c219e887bb9d)


![image](https://github.com/fleetdm/fleet/assets/1153709/2a13e79a-2bcd-4aa5-b15f-5bb57348d191)

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
- [x] Manual QA for all new/changed functionality
2024-02-26 14:26:30 +00:00
Lucas Manuel Rodriguez
762cd076d7
Start release of fleetd v1.22.0 (#17139)
#17053 & #17054
2024-02-26 09:36:53 -03:00
Mike McNeil
e8bd9f16b8
Update homepage.ejs (#17153)
See
https://docs.google.com/document/d/1pQv9wtmTEwVoUzb9zUwzGAHSClVAyXWwcbPPm64jM58/edit
2024-02-23 18:35:12 -06:00
Jacob Shandling
f18786b822
UI – handle missing vuln.severity (#17143) 2024-02-23 17:33:24 -06:00
Brock Walters
28d4991a46
Update standard-query-library.yml (#17142)
Removing entry. 1) failed to build again. Now that this is "device
health" this query probably doesn't really fit with the rest of the list
anyway. Sorry for all the approvals...

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
2024-02-23 17:28:31 -06:00
Rachael Shaw
1146141f2d
Fix formatting in a few places in the REST API docs (#17145)
+ Fixed some indentation
+ Added some missing commas & quotation marks
2024-02-23 17:26:39 -06:00
Roberto Dip
8645d4525e
build universal binaries for orbit in macOS in our test tuf server (#16712)
two motivations:

- prevent mysterious crashes in arm64 machines without Rosetta (often
the case in fresh VMs)
- prevent unexpected errors in Windows arm64 VMs when using certain
system calls

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Manual QA for all new/changed functionality
2024-02-23 19:09:56 -03:00
Brock Walters
dbed680af7
Update standard-query-library.yml (#17141)
Fixed schema error. Was missing "platform".
2024-02-23 15:44:52 -06:00
RachelElysia
67cff18106
[unreleased bug] Fleet UI: Remove stack table controls on vulnerabili… (#17130) 2024-02-23 16:02:54 -05:00
RachelElysia
22bcc6cce7
[unreleased bug] Fleet UI: Button container min-width = max-content (#17128) 2024-02-23 16:02:33 -05:00
Brock Walters
308a1549eb
Update standard-query-library.yml (#17123)
Added query for listing all table names in the schema of the currently
installed Fleet version per customer request.
2024-02-23 15:58:31 -05:00
Brock Walters
a430194969
Update standard-query-library.yml (#17122)
1. Updated 1password query with final version
2024-02-23 15:58:04 -05:00
George Karr
6efe55d6f7
Updating changelog for 4.45.1 (#17134) 2024-02-23 14:49:11 -06:00
Victor Lyuboslavsky
8e2ca6ea50
Updated backup.sh to dump UTF8. (#17100)
#17099
2024-02-23 13:49:23 -06:00