Prepare Fleet v4.37.0 (#13821)

fleetdm · Sep 8, 2023 · a745c3a · a745c3a
1 parent 3dd85c6
commit a745c3a
Show file tree

Hide file tree

Showing 51 changed files with 93 additions and 60 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,83 @@
+## Fleet 4.37.0 (Sep 8, 2023)
+
+### Changes
+
+* Added `/scripts/run` and `scripts/run/sync` API endpoints to send a script to be executed on a host and optionally wait for its results.
+
+* Added `POST /api/fleet/orbit/scripts/request` and `POST /api/fleet/orbit/scripts/result` Orbit-specific API endpoints to get a pending script to execute and send the results back, and added an Orbit notification to let the host know it has scripts pending execution.
+
+* Improved performance at scale when applying hundreds of policies to thousands of hosts via `fleetctl apply`.
+  - IMPORTANT: In previous versions of Fleet, there was a performance issue (thundering herd) when applying hundreds of policies on a large number of hosts. To avoid this, make sure to deploy this version of Fleet, and make sure Fleet is running for at least 1h (or the configured `FLEET_OSQUERY_POLICY_UPDATE_INTERVAL`) before applying the policies.
+
+* Added pagination to the policies API to increase response time.
+
+* Added policy count endpoints to support pagination on the frontend.
+
+* Added an endpoint to report `fleetd` errors.
+
+* Added logic to report errors during MDM migration.
+
+* Added support in fleetd to execute scripts and send back results (disabled by default).
+
+* Added an activity log when script execution was successfully requested.
+
+* Automatically set the DEP profile to be the same as "no team" (if set) for teams created using the `/match` endpoint (used by Puppet).
+
+* Added JumpCloud to the list of well-known MDM solutions.
+
+* Added `fleetctl run-script` command.
+
+* Made all table links right-clickable.
+
+* Improved the layout of the MDM SSO pages.
+
+* Stored user email when a user turned on MDM features with SSO enabled.
+
+* Updated the copy and image displayed on the MDM migration modal.
+
+* Upgraded Go to v1.19.12.
+
+* Updated the macadmins/osquery-extension to v0.0.15.
+
+* Updated nanomdm dependency.
+
+### Bug Fixes
+
+* Fixed a bug where live query UI and export data tables showed all returned columns.
+
+* Fixed a bug where Jira and/or Zendesk integrations were being removed when an unrelated setting was changed.
+
+* Fixed software ingestion to not re-insert software when incoming fields from hosts were longer than what Fleet supports. This bug caused some CVEs to be reported every time the vulnerability cron ran.
+  - IMPORTANT: After deploying this fix, the vulnerability cron will report the CVEs one last time, and subsequent cron runs will not report the CVE (as expected).
+
+* Fixed duplicate policy names in `ee/cis/win-10/cis-policy-queries.yml`.
+
+* Fixed typos in policy queries in the Windows CIS policies YAML (`ee/cis/win-10/cis-policy-queries.yml`).
+
+* Fixed a bug where query stats (aka `Performance impact`) were not being populated in Fleet.
+
+* Added validation to `fleetctl apply` for duplicate policy names in the YAML file and attempting to change the team of an existing policy.
+
+* Optimized host queries when using policy statuses.
+
+* Changed the authentication method during Windows MDM enrollment to use `LoadHostByOrbitNodeKey` instead of `HostByIdentifier`.
+
+* Fixed alignment on long label names on host details label filter dropdown.
+
+* Added UI for script run activity and script details modal.
+
+* Fixed queries navigation bar bug where if in query detail, you could not navigate back to the manage queries table.
+
+* Made policy resolutions that include URLs clickable in the UI.
+
+* Fixed Fleet UI custom query frequency display.
+
+* Fixed live query filter icon and various other live query icons.
+
+* Fixed Fleet UI tabs highlight while tabbing but not on multiple clicks.
+
+* Fixed double scrollbar bug on dashboard page.
+
 ## Fleet 4.36.0 (Aug 17, 2023)
 
 * Added the `fleetctl upgrade-packs` command to migrate 2017 packs to the new combined schedule and query concept.

diff --git a/changes/12243-policy-resolution-urls b/changes/12243-policy-resolution-urls
diff --git a/changes/12476-ui-export-shows-all-columns b/changes/12476-ui-export-shows-all-columns
diff --git a/changes/12550-add-validation-for-policy-specs b/changes/12550-add-validation-for-policy-specs
diff --git a/changes/13064-highlighter-bug b/changes/13064-highlighter-bug
diff --git a/changes/13071-disable-fleetd-enroll-errors b/changes/13071-disable-fleetd-enroll-errors
diff --git a/changes/13082-fix-dashboard-double-scrollbar b/changes/13082-fix-dashboard-double-scrollbar
diff --git a/changes/13158-nag-and-copy b/changes/13158-nag-and-copy
diff --git a/changes/13158-update-macadmins-tables b/changes/13158-update-macadmins-tables
diff --git a/changes/13205-browser-page-titles-added b/changes/13205-browser-page-titles-added
diff --git a/changes/13205-table-links-can-open-in-new-tab b/changes/13205-table-links-can-open-in-new-tab
diff --git a/changes/13238-client-debug-error b/changes/13238-client-debug-error
diff --git a/changes/13318-fix-query-stats b/changes/13318-fix-query-stats
diff --git a/changes/13345-fix-queries-nav-bar-bug b/changes/13345-fix-queries-nav-bar-bug
diff --git a/changes/13363-match-dep-profiles b/changes/13363-match-dep-profiles
diff --git a/changes/13367-custom-query-frequencies b/changes/13367-custom-query-frequencies
diff --git a/changes/13431-sso-idp-store b/changes/13431-sso-idp-store
diff --git a/changes/13433-host-query-optimization b/changes/13433-host-query-optimization
diff --git a/changes/13434-paginate-policies b/changes/13434-paginate-policies
diff --git a/changes/13495-host-details-rbac b/changes/13495-host-details-rbac
diff --git a/changes/13498-fix-sso-layout b/changes/13498-fix-sso-layout
diff --git a/changes/13521-label-alignment b/changes/13521-label-alignment
diff --git a/changes/13527-applying-policies-at-scale b/changes/13527-applying-policies-at-scale
diff --git a/changes/13576-fix-filter-icon b/changes/13576-fix-filter-icon
diff --git a/changes/13616-go-upgrade b/changes/13616-go-upgrade
diff --git a/changes/9553-scripts-audit b/changes/9553-scripts-audit
diff --git a/changes/9999-run-script-cli b/changes/9999-run-script-cli
diff --git a/changes/add-jumpcloud-to-mdm-list b/changes/add-jumpcloud-to-mdm-list
diff --git a/changes/fix-broken-win-10-cis-queries b/changes/fix-broken-win-10-cis-queries
diff --git a/changes/fix-duplicate-cis-policy-queries-yml b/changes/fix-duplicate-cis-policy-queries-yml
diff --git a/changes/fix-software-reinserts-when-fields-are-too-long b/changes/fix-software-reinserts-when-fields-are-too-long
diff --git a/changes/issue-12847-change-win-mdm-auth b/changes/issue-12847-change-win-mdm-auth
diff --git a/changes/issue-13305-api-run-script b/changes/issue-13305-api-run-script
diff --git a/changes/issue-13306-implement-get-script-results-endpoint b/changes/issue-13306-implement-get-script-results-endpoint
diff --git a/changes/issue-13307-run-script-on-agent b/changes/issue-13307-run-script-on-agent
diff --git a/changes/issue-13308-implement-script-run-activity-and-details-ui b/changes/issue-13308-implement-script-run-activity-and-details-ui
diff --git a/changes/issue-13372-fix-integrations-auto-removed b/changes/issue-13372-fix-integrations-auto-removed
diff --git a/changes/issue-2943-update-nanomdm b/changes/issue-2943-update-nanomdm
diff --git a/charts/fleet/Chart.yaml b/charts/fleet/Chart.yaml
@@ -8,4 +8,4 @@ version: v5.0.1
 home: https://github.com/fleetdm/fleet
 sources:
   - https://github.com/fleetdm/fleet.git
-appVersion: v4.36.0
+appVersion: v4.37.0
diff --git a/charts/fleet/values.yaml b/charts/fleet/values.yaml
@@ -2,7 +2,7 @@
 # All settings related to how Fleet is deployed in Kubernetes
 hostName: fleet.localhost
 replicas: 3 # The number of Fleet instances to deploy
-imageTag: v4.36.0 # Version of Fleet to deploy
+imageTag: v4.37.0 # Version of Fleet to deploy
 podAnnotations: {} # Additional annotations to add to the Fleet pod
 serviceAccountAnnotations: {} # Additional annotations to add to the Fleet service account
 resources:

diff --git a/infrastructure/dogfood/terraform/aws/variables.tf b/infrastructure/dogfood/terraform/aws/variables.tf
@@ -56,7 +56,7 @@ variable "database_name" {
 
 variable "fleet_image" {
   description = "the name of the container image to run"
-  default     = "fleetdm/fleet:v4.36.0"
+  default     = "fleetdm/fleet:v4.37.0"
 }
 
 variable "software_inventory" {

diff --git a/infrastructure/dogfood/terraform/gcp/variables.tf b/infrastructure/dogfood/terraform/gcp/variables.tf
@@ -68,5 +68,5 @@ variable "redis_mem" {
 }
 
 variable "image" {
-  default = "fleet:v4.36.0"
+  default = "fleet:v4.37.0"
 }
diff --git a/infrastructure/sandbox/JITProvisioner/jitprovisioner.tf b/infrastructure/sandbox/JITProvisioner/jitprovisioner.tf
@@ -206,7 +206,7 @@ resource "random_uuid" "jitprovisioner" {
 
 # Use the local to make the trigger work.
 locals {
-  fleet_tag = "v4.36.0"
+  fleet_tag = "v4.37.0"
 }
 
 resource "null_resource" "standard-query-library" {

diff --git a/infrastructure/sandbox/PreProvisioner/lambda/deploy_terraform/main.tf b/infrastructure/sandbox/PreProvisioner/lambda/deploy_terraform/main.tf
@@ -165,7 +165,7 @@ resource "helm_release" "main" {
 
   set {
     name  = "imageTag"
-    value = "v4.36.0"
+    value = "v4.37.0"
   }
 
   set {

diff --git a/terraform/byo-vpc/byo-db/byo-ecs/variables.tf b/terraform/byo-vpc/byo-db/byo-ecs/variables.tf
@@ -13,7 +13,7 @@ variable "fleet_config" {
   type = object({
     mem                          = optional(number, 4096)
     cpu                          = optional(number, 512)
-    image                        = optional(string, "fleetdm/fleet:v4.36.0")
+    image                        = optional(string, "fleetdm/fleet:v4.37.0")
     family                       = optional(string, "fleet")
     sidecars                     = optional(list(any), [])
     depends_on                   = optional(list(any), [])

diff --git a/terraform/byo-vpc/byo-db/variables.tf b/terraform/byo-vpc/byo-db/variables.tf
@@ -74,7 +74,7 @@ variable "fleet_config" {
   type = object({
     mem                          = optional(number, 4096)
     cpu                          = optional(number, 512)
-    image                        = optional(string, "fleetdm/fleet:v4.36.0")
+    image                        = optional(string, "fleetdm/fleet:v4.37.0")
     family                       = optional(string, "fleet")
     sidecars                     = optional(list(any), [])
     depends_on                   = optional(list(any), [])

diff --git a/terraform/byo-vpc/example/main.tf b/terraform/byo-vpc/example/main.tf
@@ -17,7 +17,7 @@ provider "aws" {
 }
 
 locals {
-  fleet_image = "fleetdm/fleet:v4.36.0"
+  fleet_image = "fleetdm/fleet:v4.37.0"
 }
 
 resource "random_pet" "main" {}

diff --git a/terraform/byo-vpc/variables.tf b/terraform/byo-vpc/variables.tf
@@ -163,7 +163,7 @@ variable "fleet_config" {
   type = object({
     mem                          = optional(number, 4096)
     cpu                          = optional(number, 512)
-    image                        = optional(string, "fleetdm/fleet:v4.36.0")
+    image                        = optional(string, "fleetdm/fleet:v4.37.0")
     family                       = optional(string, "fleet")
     sidecars                     = optional(list(any), [])
     depends_on                   = optional(list(any), [])

diff --git a/terraform/example/main.tf b/terraform/example/main.tf
@@ -73,7 +73,7 @@ module "vulnprocessing" {
   ecs_cluster     = module.main.byo-vpc.byo-db.byo-ecs.cluster.cluster_arn
   vpc_id          = module.main.vpc.vpc_id
   fleet_config = {
-    image = "fleetdm/fleet:v4.36.0"
+    image = "fleetdm/fleet:v4.37.0"
     database = {
       password_secret_arn = module.main.byo-vpc.secrets.secret_arns["${var.rds_config.name}-database-password"]
       user                = module.main.byo-vpc.rds.db_instance_username

diff --git a/terraform/variables.tf b/terraform/variables.tf
@@ -215,7 +215,7 @@ variable "fleet_config" {
   type = object({
     mem                          = optional(number, 4096)
     cpu                          = optional(number, 512)
-    image                        = optional(string, "fleetdm/fleet:v4.36.0")
+    image                        = optional(string, "fleetdm/fleet:v4.37.0")
     family                       = optional(string, "fleet")
     sidecars                     = optional(list(any), [])
     depends_on                   = optional(list(any), [])

diff --git a/tools/fleetctl-npm/package.json b/tools/fleetctl-npm/package.json
@@ -1,6 +1,6 @@
 {
   "name": "fleetctl",
-  "version": "v4.36.0",
+  "version": "v4.37.0",
   "description": "Installer for the fleetctl CLI tool",
   "bin": {
     "fleetctl": "./run.js"