Adding changes for Fleet v4.54.0 (#20280)

fleetdm · Jul 17, 2024 · ad26462 · ad26462
1 parent b0595d6
commit ad26462
Show file tree

Hide file tree

Showing 77 changed files with 103 additions and 100 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,84 @@
+## Fleet 4.54.0 (Jul 17, 2024)
+
+### Endpoint Operations
+
+- Updated `fleetctl gitops` to be used to rename teams.
+  - **NOTE:** `fleetctl gitops` needs to have previously run with this Fleet/fleetctl version or later.
+  - The team name is changed if the YAML config is applied from the same filename as before.
+- Updated `fleetctl query --hosts` to work with hostnames, host UUIDs, and/or hardware serial numbers.
+- Added a host's upcoming scheduled maintenance window, if any, on the host details page of the UI and in host responses from the API.
+- Added support to `fleetctl debug connection` to test TLS connection with the embedded certs.pem in
+  the fleetctl executable.
+- Added host's display name to calendar event descriptions.
+- Added .yml and .yaml file type validation and error message to `fleetctl apply`.
+- Added a tooltip to truncated text and not to untruncated values.
+
+### Device Management (MDM)
+
+- Added iOS/iPadOS builtin manual labels. 
+  - **NOTE:** Before migrating to this version, make sure to delete any labels with name "iOS" or "iPadOS".
+- Added aggregation of iOS/iPadOS OS versions.
+- Added change to custom profiles for iOS/iPadOS to go from 'pending' straight to 'verified' (skip 'verifying').
+- Added support for renewing SCEP certificates with custom enrollment profiles.
+- Added automatic install of `fleetd` when a host turns on MDM now uses the latest released `fleetd` version.
+- Added support for `END_USER_EMAIL` and `FLEET_DESKTOP` parameters to Windows MSI install package.
+- Added API changes to support the `labels_include_all` and `labels_exclude_any` fields (and accept the deprecated `labels` field as an alias for `labels_include_all`).
+- Added `fleetctl gitops` and `fleetctl apply` support for `labels_include_all` and `labels_exclude_any` to configure a custom setting.
+- Added UI for uploading custom profiles with a target of hosts that include all/exclude any selected labels.
+- Added the database migrations to create the new `exclude` column for labels associated with MDM profiles (and declarations).
+- Updated host script timeouts to be configurable via agent options using `script_execution_timeout`. 
+- `fleetctl` now uses a polling mechanism when running `run-script` to accommodate longer script timeout values.
+- Updated the profile reconciliation logic to handle the new "exclude any" labels.
+- Updated so that the `fleetd` cleanup script for macOS that will return completed when run from Fleet.
+- Updated so that the `fleetd` uninstall script will return completed when run from Fleet.
+- Updated script run permissions -- only admins and maintainers can run arbitrary or saved scripts (not observer or observer+).
+- Updated `fleetctl get mdm_commands` to return 20 rows and support `--host` `--type` filters to improve response time.
+- Updated the instructions for manual MDM enrollment on the "My device" page to be clearer and align with Apple updates.
+- Updated UI to allow device users to reinstall self-service software.
+- Updated API to not return a 500 status code if a host sends a command response with an invalid command uuid.
+- Increased the timeout of the upload software installer endpoint to 4 minutes.
+- Disabled credential caching and reboot on Windows lock.
+
+### Vulnerability Management
+
+- Added "Vulnerable" filter to the host details software table.
+- Fixed Microsoft Office June 2024 false negative vulnerabilities and added custom vulnerability matching.
+- Fixed issue where some Windows applications were getting matched against Windows OS vulnerabilities.
+
+### Bug fixes and improvements
+
+- Updated Go version to go1.22.4.
+- Updated to render only one banner on the my device page based on priority order.
+- Updated software updated timestamp tooltip.
+- Removed DB error message from the UI when showing a error response.
+- Updated fleetctl get queries/labels/hosts descriptions.
+- Reinstated ability to sort policies by passing count.
+- Improved the accuracy of the heuristic used to deterimine if a host is connected to Fleet via MDM by using osquery data for hosts that didn't send a Checkout message.
+- Improved the matching of `pkg` installer files to existing software.
+- Improved extraction of application name from `pkg` installers.
+- Clarified various help and error texts around host identifiers.
+- Hid CTA on inherited queries/policies from team level users.
+- Hid query delete checkboxes from team observers.
+- Hid "Self-service" in Fleet Desktop and My device page if there is no self-service software available.
+- Hid the host detail page's "Run script" action from Global and Team Observer/+s.
+- Aligned the "View all hosts" links in the Software titles and versions tables.
+- Fixed counts for hosts with with low disk space in summary page.
+- Fixed allowing Observer and Observer+ roles to download software installers.
+- Fixed crash in `fleetd` installer on Windows if there are registry keys with special characters on the system.
+- Fixed `fleetctl debug connection` to support server TLS certificates with intermediates.
+- Fixed macOS declarations being stuck in "to be removed" state indefinitely.
+- Fixed link to `fleetd` uninstall instructions in "Delete device" modal.
+- Fixed exporting CSVs with fields that contain commas to render properly.
+- Fixed issue where the Fleet UI could not be used to renew the ABM token after the ABM user who created the token was deleted.
+- Fixed styling issues with the target inputs loading spinner on the run live query/policy page.
+- Fixed an issue where special characters in HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall breaks the "installer_utils.ps1 -uninstallOrbit" step in the Windows MSI installer.
+- Fixed a bug causing "No Team" OS versions to display the wrong number.
+- Fixed various UI capitalizations.
+- Fixed UI issue where "Script is already running" tooltip incorrectly displayed when the script is not running.
+- Fixed the script details modal's error message on script timeout to reflect the newly dynamic script timeout limit, if hit.
+- Fixed a discrepancy in the spacing between DataSet labels and values on Firefox relative to other browsers.
+- Fixed bug that set `Added to Fleet` to `Never` after macOS hosts re-enrolled to Fleet via MDM. 
+
 ## Fleet 4.53.1 (Jul 01, 2024)
 
 ### Bug fixes

diff --git a/changes/18239-delete-secret-copy b/changes/18239-delete-secret-copy
diff --git a/changes/18471-gitops-rename-team b/changes/18471-gitops-rename-team
diff --git a/changes/18554-store-and-show-next-host-maintenance-window b/changes/18554-store-and-show-next-host-maintenance-window
diff --git a/changes/18815-hide-cta-from-team-roles b/changes/18815-hide-cta-from-team-roles
diff --git a/changes/18849-config-profiles-exclude-labels b/changes/18849-config-profiles-exclude-labels
diff --git a/changes/19031-maintenance-windows-every-week b/changes/19031-maintenance-windows-every-week
diff --git a/changes/19055-hide-run-script b/changes/19055-hide-run-script
diff --git a/changes/19055-scripts-run-permissions b/changes/19055-scripts-run-permissions
diff --git a/changes/19127-update-logic-and-copy-around-host-identifiers b/changes/19127-update-logic-and-copy-around-host-identifiers
diff --git a/changes/19143-mdm-cmd-filters b/changes/19143-mdm-cmd-filters
diff --git a/changes/19144-improve-extraction b/changes/19144-improve-extraction
diff --git a/changes/19144-pkg-matching b/changes/19144-pkg-matching
diff --git a/changes/19176-fleetd-base-mdm b/changes/19176-fleetd-base-mdm
diff --git a/changes/19219-fleetd-base-email-desktop b/changes/19219-fleetd-base-email-desktop
diff --git a/changes/19281-add-host-name-to-event-descriptions b/changes/19281-add-host-name-to-event-descriptions
diff --git a/changes/19352-calendar-real-time b/changes/19352-calendar-real-time
diff --git a/changes/19557-empty-hover-styles b/changes/19557-empty-hover-styles
diff --git a/changes/19577-fleetctl-get-desc b/changes/19577-fleetctl-get-desc
diff --git a/changes/19586-capitalization-bug b/changes/19586-capitalization-bug
diff --git a/changes/19645-cleanup_macos b/changes/19645-cleanup_macos
diff --git a/changes/19645-uninstall-script-fleetd b/changes/19645-uninstall-script-fleetd
diff --git a/changes/19651-hide-self-service b/changes/19651-hide-self-service
diff --git a/changes/19683-csv-comma-bug b/changes/19683-csv-comma-bug
diff --git a/changes/19694-vul-page-bugs b/changes/19694-vul-page-bugs
diff --git a/changes/19760-software-update-tooltip b/changes/19760-software-update-tooltip
diff --git a/changes/19789-serial-number--1 b/changes/19789-serial-number--1
diff --git a/changes/19800-renew-scep-migration b/changes/19800-renew-scep-migration
diff --git a/changes/19828-hide-query-delete-checkboxes-from-observers b/changes/19828-hide-query-delete-checkboxes-from-observers
diff --git a/changes/19844-update-go b/changes/19844-update-go
diff --git a/changes/19875-custom-script-timeout b/changes/19875-custom-script-timeout
diff --git a/changes/19876-dynamic-script-timeout-ui b/changes/19876-dynamic-script-timeout-ui
diff --git a/changes/19910-fix-low_disk_space-counts b/changes/19910-fix-low_disk_space-counts
diff --git a/changes/19937-fix-anchor-link b/changes/19937-fix-anchor-link
diff --git a/changes/19950-changes b/changes/19950-changes
diff --git a/changes/19963-ios-ipados-as-platforms b/changes/19963-ios-ipados-as-platforms
diff --git a/changes/20010-win-false-positives b/changes/20010-win-false-positives
diff --git a/changes/20020-mdm-instructions b/changes/20020-mdm-instructions
diff --git a/changes/20050-vuln-software b/changes/20050-vuln-software
diff --git a/changes/20056-sort-policy-bug b/changes/20056-sort-policy-bug
diff --git a/changes/20057-connected-tweaks b/changes/20057-connected-tweaks
diff --git a/changes/20059-fix-last_enrolled_at b/changes/20059-fix-last_enrolled_at
diff --git a/changes/20075-fleetctl-apply-validation b/changes/20075-fleetctl-apply-validation
diff --git a/changes/20077-align-view-all-hosts-link-sw-page b/changes/20077-align-view-all-hosts-link-sw-page
diff --git a/changes/20080-lock-disable-credential-caching b/changes/20080-lock-disable-credential-caching
diff --git a/changes/20131-self-service-reinstall b/changes/20131-self-service-reinstall
diff --git a/changes/20143-targets-input-spinner b/changes/20143-targets-input-spinner
diff --git a/changes/20150-no-team b/changes/20150-no-team
diff --git a/changes/20236-tooltip-on-truncation b/changes/20236-tooltip-on-truncation
diff --git a/changes/20293-script-pending-tooltip b/changes/20293-script-pending-tooltip
diff --git a/changes/20309-increase-software-installer-upload-timeout b/changes/20309-increase-software-installer-upload-timeout
diff --git a/changes/20363-fix-dataset-spacing-on-firefox b/changes/20363-fix-dataset-spacing-on-firefox
diff --git a/changes/20367-command-uuid b/changes/20367-command-uuid
diff --git a/changes/20900-abm-invalid-ui b/changes/20900-abm-invalid-ui
diff --git a/changes/6085-fleetctl-debug-connection b/changes/6085-fleetctl-debug-connection
diff --git a/changes/6979-observer-software b/changes/6979-observer-software
diff --git a/changes/7014-custom-vulnerability-matching b/changes/7014-custom-vulnerability-matching
diff --git a/changes/issue-18848-include-all-exclude-any-custom-profile b/changes/issue-18848-include-all-exclude-any-custom-profile
diff --git a/changes/issue-19731-dont-show-db-error-message b/changes/issue-19731-dont-show-db-error-message
diff --git a/changes/issue-19951-render-banners-on-my-device-page-in-priority-order b/changes/issue-19951-render-banners-on-my-device-page-in-priority-order
diff --git a/changes/update-installutils-to-allow-for-special-characters-in-registry b/changes/update-installutils-to-allow-for-special-characters-in-registry
diff --git a/charts/fleet/Chart.yaml b/charts/fleet/Chart.yaml
@@ -8,7 +8,7 @@ version: v6.2.0
 home: https://github.com/fleetdm/fleet
 sources:
   - https://github.com/fleetdm/fleet.git
-appVersion: v4.53.1
+appVersion: v4.54.0
 dependencies:
   - name: mysql
     condition: mysql.enabled

diff --git a/charts/fleet/values.yaml b/charts/fleet/values.yaml
@@ -3,7 +3,7 @@
 hostName: fleet.localhost
 replicas: 3 # The number of Fleet instances to deploy
 imageRepository: fleetdm/fleet
-imageTag: v4.53.1 # Version of Fleet to deploy
+imageTag: v4.54.0 # Version of Fleet to deploy
 podAnnotations: {} # Additional annotations to add to the Fleet pod
 serviceAccountAnnotations: {} # Additional annotations to add to the Fleet service account
 resources:

diff --git a/infrastructure/dogfood/terraform/aws/variables.tf b/infrastructure/dogfood/terraform/aws/variables.tf
@@ -56,7 +56,7 @@ variable "database_name" {
 
 variable "fleet_image" {
   description = "the name of the container image to run"
-  default     = "fleetdm/fleet:v4.53.1"
+  default     = "fleetdm/fleet:v4.54.0"
 }
 
 variable "software_inventory" {

diff --git a/infrastructure/dogfood/terraform/gcp/variables.tf b/infrastructure/dogfood/terraform/gcp/variables.tf
@@ -68,5 +68,5 @@ variable "redis_mem" {
 }
 
 variable "image" {
-  default = "fleet:v4.53.1"
+  default = "fleet:v4.54.0"
 }