Adding changes for Fleet v4.62.0

fleetdm · Jan 2, 2025 · 9d7508a · 9d7508a
1 parent 4c463b6
commit 9d7508a
Show file tree

Hide file tree

Showing 75 changed files with 86 additions and 94 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,58 @@
+## Fleet 4.62.0 (Jan 02, 2025)
+
+### Bug fixes
+
+### Endpoint Operations
+- Added capability to automatically generate "trigger policies" for custom software packages.
+- Stop older scheduled queries from filling logs with errors
+- Changed script upload endpoint (`POST /api/v1/fleet/scripts`) to automatically switch CRLF line endings to LF
+- Fleshed out server response from `queries` endpoint to include `count` and `meta` pagination information.
+- Updated UI queries page to filter, sort, paginate, etc. via query params in call to server.
+- Updated platform filtering on queries page to refer to targeted platforms instead of compatible platforms
+- Updated queries API to support above targeted platform filtering
+
+### Device Management (MDM)
+- Added license key validation on `fleetctl preview` if a license key is provided; fixes cases where an invalid license key would cause `fleetctl preview` to hang.
+- Allowed team policy endpoint (`PATCH /api/latest/fleet/teams/{team_id}/policies/{policy_id}`) to receive explicit `null` as a value for `script_id` or `software_title_id` to unset a script or software installer respectively.
+- Alises EAP versions of JetBrains IDEs to "last release version plus all fixes" to avoid vulnerability false positives.
+
+### Vulnerability Management
+- Added Mastodon icon and URL to server email templates.
+- Added a validation to prevent label deletion if it is used to scope the hosts targeted by a software installer.
+- Fixed issue where minio software was not scanned for vulnerabilities correctly because of unexpected trailing characters in the version string
+
+### Bug fixes and improvements
+- Fleet UI: Fix export to CSV from trimming leading zeros by treating those values as strings
+- Send alert via SNS when a scheduled "cron" job returns errors
+- SNS topic for job error alerts can be configured separately from the existing monitor alert by adding "cron_job_failure_monitoring" to sns_topic_arns_map, otherwise defaults to the using the same topic
+- Fix bug when creating a label to preserve the selected team
+- Add UI for scoping software via labels
+- Removed server error if no private IP was found by detail_query_network_interface.
+- Added ability to use secrets ($FLEET_SECRET_YOURNAME) in scripts and profiles.
+- Fleet UI: Add searchable query targets and cleaner UI for uses with many teams or labels
+- Increased maximum length for installer URLs specified in GitOps to 4000 characters
+- Fixed a panic (and resulting failure to load CVE details) on new installs when OS versions have not been populated yet.
+- Add functionality to filter host software based on label scoping.
+- Add the ability to click a software row on the my device page and see the details of that software's installation on the host.
+- Update fleetctl dependencies that cause warnings
+- Added service annotation field to Helm Chart
+- Added features to scope Fleet-maintained apps and custom packages via labels in UI, API, and CLI.
+- Allowed software uninstalls and script-based host lock/unlock/wipe to run while global scripts are disabled.
+- Fix policy truncation UI bug
+- Add support for fleet secret validation in software installer scripts
+- Added fallback to FileVersion on EXE installers when FileVersion is set but ProductVersion isn't to allow more custom packages to be uploaded
+- Removed duplicate software records from homebrew casks already reported in the osquery `apps` table to address false positive vulnerabilities due to lack of bundle_identifier
+- Fixed cases where showing results of an inherited query viewed inside a team would include results from hosts not on thta team by adding an optional team_id parameter to queries report endpoint (`GET /api/latest/fleet/queries/{query_id}/report`)
+- Added the `labels_include_any` and `labels_exclude_any` fields to the software installer activities.
+- Updated the get host endpoint to include disk encryption stats for a linux host only if the setting is enabled
+- Added a descriptive error when a GitOps file contains script references that are missing paths
+- Fixed CVE-2024-10004 false positive on Fleet-supported platforms (vuln is iOS-only and iOS vuln checking is not supported)
+- Removed `invalid UUID` log message when validating Apple MDM UDID.
+- Fixed a bug in determining sort type of query result columns by deducing that type from the data present in those columns.
+- Display the correct percentage of hosts online, 0, when there are no hosts online.
+- Validate fleet secrets embedded into scripts and profiles on ingestion
+- Adds functionality for skipping automatic installs if the software is not scoped to the host via labels.
+
 ## Fleet 4.61.0 (Dec 17, 2024)
 
 ## Endpoint operations

diff --git a/changes/19930-alert-on-cron-errors b/changes/19930-alert-on-cron-errors
diff --git a/changes/21855-paginate-queries b/changes/21855-paginate-queries
diff --git a/changes/22444-gitops-script-missing-path b/changes/22444-gitops-script-missing-path
diff --git a/changes/22448-searchable-query-targets b/changes/22448-searchable-query-targets
diff --git a/changes/22523-cve-500 b/changes/22523-cve-500
diff --git a/changes/22723-jetbrains-eap-versions b/changes/22723-jetbrains-eap-versions
diff --git a/changes/22813-software-scope-labels b/changes/22813-software-scope-labels
diff --git a/changes/22875-uninstall-with-scripts-disabled b/changes/22875-uninstall-with-scripts-disabled
diff --git a/changes/22884-license-error-fleetctl b/changes/22884-license-error-fleetctl
diff --git a/changes/22944-homebrew-casks b/changes/22944-homebrew-casks
diff --git a/changes/23011-dynamic-column-sort-type b/changes/23011-dynamic-column-sort-type
diff --git a/changes/23238-use-secrets-in-scripts-profiles b/changes/23238-use-secrets-in-scripts-profiles
diff --git a/changes/23309-mastodon-in-email-templates b/changes/23309-mastodon-in-email-templates
diff --git a/changes/23315-show-sw-install-details-on-my-device b/changes/23315-show-sw-install-details-on-my-device
diff --git a/changes/23448-maintainer-policy-automations b/changes/23448-maintainer-policy-automations
diff --git a/changes/23490-null-script-software-on-policies b/changes/23490-null-script-software-on-policies
diff --git a/changes/23541-fileversion-fallback b/changes/23541-fileversion-fallback
diff --git a/changes/23557-minio b/changes/23557-minio
diff --git a/changes/23579-cve-2024-10004-false-positive b/changes/23579-cve-2024-10004-false-positive
diff --git a/changes/23611-Update-CIS b/changes/23611-Update-CIS
diff --git a/changes/23783-controls-subnav-pagination b/changes/23783-controls-subnav-pagination
diff --git a/changes/23800-host-online-pctage b/changes/23800-host-online-pctage
diff --git a/changes/23803-leading-zeros-bug b/changes/23803-leading-zeros-bug
diff --git a/changes/23886-remove-associations-on-policy-delete b/changes/23886-remove-associations-on-policy-delete
diff --git a/changes/24006-host-query-report-team-id b/changes/24006-host-query-report-team-id
diff --git a/changes/24025-add-label-team-bug b/changes/24025-add-label-team-bug
diff --git a/changes/24033-helm-customization-options b/changes/24033-helm-customization-options
diff --git a/changes/24120-sw-title-id b/changes/24120-sw-title-id
diff --git a/changes/24166-script-line-endings b/changes/24166-script-line-endings
diff --git a/changes/24244-macos-encryption-verifying-query b/changes/24244-macos-encryption-verifying-query
diff --git a/changes/24268-update-fleetctl-deps b/changes/24268-update-fleetctl-deps
diff --git a/changes/24286-vulncheck b/changes/24286-vulncheck
diff --git a/changes/24315-update-windows-policy-constants b/changes/24315-update-windows-policy-constants
diff --git a/changes/24334-policy-truncation b/changes/24334-policy-truncation
diff --git a/changes/24385-automatic-install-custom-packages b/changes/24385-automatic-install-custom-packages
diff --git a/changes/24386-fleet-legacy-query-pack b/changes/24386-fleet-legacy-query-pack
diff --git a/changes/24456-include-linux-encryption-data-only-when-enabled b/changes/24456-include-linux-encryption-data-only-when-enabled
diff --git a/changes/24459-chart-serrvice-annotation b/changes/24459-chart-serrvice-annotation
diff --git a/changes/24533-skip-policy b/changes/24533-skip-policy
diff --git a/changes/24534-hide-software-2 b/changes/24534-hide-software-2
diff --git a/changes/24536-prevent-label-deletion-if-referenced-by-software b/changes/24536-prevent-label-deletion-if-referenced-by-software
diff --git a/changes/24538-24542-UI-for-scope-software-via-labels b/changes/24538-24542-UI-for-scope-software-via-labels
diff --git a/changes/24549-validate-script-profle-secrets b/changes/24549-validate-script-profle-secrets
diff --git a/changes/24663-software-scoped-via-labels-gitops b/changes/24663-software-scoped-via-labels-gitops
diff --git a/changes/24725-no-private-ip-found b/changes/24725-no-private-ip-found
diff --git a/changes/24792-update-software-installer-activities b/changes/24792-update-software-installer-activities
diff --git a/changes/24795-add-helpful-tooltip-setup-experience b/changes/24795-add-helpful-tooltip-setup-experience
diff --git a/changes/24899-software-installer-scripts-secrets b/changes/24899-software-installer-scripts-secrets
diff --git a/changes/24917-installer-url-length b/changes/24917-installer-url-length
diff --git a/changes/24961-invalid-uuid b/changes/24961-invalid-uuid
diff --git a/changes/25038-fix-profile-status-aggregate-tooltips-spacing b/changes/25038-fix-profile-status-aggregate-tooltips-spacing
diff --git a/changes/8903c-table-text-wrapping b/changes/8903c-table-text-wrapping
diff --git a/charts/fleet/Chart.yaml b/charts/fleet/Chart.yaml
@@ -8,7 +8,7 @@ version: v6.3.0
 home: https://github.com/fleetdm/fleet
 sources:
   - https://github.com/fleetdm/fleet.git
-appVersion: v4.61.0
+appVersion: v4.62.0
 dependencies:
   - name: mysql
     condition: mysql.enabled

diff --git a/charts/fleet/values.yaml b/charts/fleet/values.yaml
@@ -3,7 +3,7 @@
 hostName: fleet.localhost
 replicas: 3 # The number of Fleet instances to deploy
 imageRepository: fleetdm/fleet
-imageTag: v4.61.0 # Version of Fleet to deploy
+imageTag: v4.62.0 # Version of Fleet to deploy
 podAnnotations: {} # Additional annotations to add to the Fleet pod
 serviceAnnotations: {} # Additional annotations to add to the Fleet service
 serviceAccountAnnotations: {} # Additional annotations to add to the Fleet service account

diff --git a/infrastructure/dogfood/terraform/aws/variables.tf b/infrastructure/dogfood/terraform/aws/variables.tf
@@ -56,7 +56,7 @@ variable "database_name" {
 
 variable "fleet_image" {
   description = "the name of the container image to run"
-  default     = "fleetdm/fleet:v4.61.0"
+  default     = "fleetdm/fleet:v4.62.0"
 }
 
 variable "software_inventory" {

diff --git a/infrastructure/dogfood/terraform/gcp/variables.tf b/infrastructure/dogfood/terraform/gcp/variables.tf
@@ -68,7 +68,7 @@ variable "redis_mem" {
 }
 
 variable "image" {
-  default = "fleetdm/fleet:v4.61.0"
+  default = "fleetdm/fleet:v4.62.0"
 }
 
 variable "software_installers_bucket_name" {

diff --git a/infrastructure/guardduty/.terraform.lock.hcl b/infrastructure/guardduty/.terraform.lock.hcl
diff --git a/infrastructure/guardduty/main.tf b/infrastructure/guardduty/main.tf
@@ -2,7 +2,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "~> 4.61.0"
+      version = "~> 4.62.0"
     }
   }
   backend "s3" {

diff --git a/infrastructure/infrastructure/cloudtrail/main.tf b/infrastructure/infrastructure/cloudtrail/main.tf
@@ -2,7 +2,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "~> 4.61.0"
+      version = "~> 4.62.0"
     }
   }
   backend "s3" {

diff --git a/infrastructure/infrastructure/elastic-agent/.terraform.lock.hcl b/infrastructure/infrastructure/elastic-agent/.terraform.lock.hcl
diff --git a/infrastructure/infrastructure/elastic-agent/main.tf b/infrastructure/infrastructure/elastic-agent/main.tf
@@ -20,7 +20,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "~> 4.61.0"
+      version = "~> 4.62.0"
     }
   }
   backend "s3" {

diff --git a/infrastructure/infrastructure/guardduty-alerts/.terraform.lock.hcl b/infrastructure/infrastructure/guardduty-alerts/.terraform.lock.hcl
diff --git a/infrastructure/infrastructure/guardduty-alerts/main.tf b/infrastructure/infrastructure/guardduty-alerts/main.tf
@@ -15,7 +15,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "~> 4.61.0"
+      version = "~> 4.62.0"
     }
   }
   backend "s3" {

diff --git a/infrastructure/infrastructure/spend_alerts/main.tf b/infrastructure/infrastructure/spend_alerts/main.tf
@@ -2,7 +2,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "~> 4.61.0"
+      version = "~> 4.62.0"
     }
   }
   backend "s3" {

diff --git a/terraform/addons/ses/README.md b/terraform/addons/ses/README.md
@@ -9,7 +9,7 @@ No requirements.
 
 | Name | Version |
 |------|---------|
-| <a name="provider_aws"></a> [aws](#provider\_aws) | 4.61.0 |
+| <a name="provider_aws"></a> [aws](#provider\_aws) | 4.62.0 |
 
 ## Modules
 

diff --git a/terraform/addons/vuln-processing/variables.tf b/terraform/addons/vuln-processing/variables.tf
@@ -24,7 +24,7 @@ variable "fleet_config" {
     vuln_processing_cpu                  = optional(number, 2048)
     vuln_data_stream_mem                 = optional(number, 1024)
     vuln_data_stream_cpu                 = optional(number, 512)
-    image                                = optional(string, "fleetdm/fleet:v4.61.0")
+    image                                = optional(string, "fleetdm/fleet:v4.62.0")
     family                               = optional(string, "fleet-vuln-processing")
     sidecars                             = optional(list(any), [])
     extra_environment_variables          = optional(map(string), {})
@@ -82,7 +82,7 @@ variable "fleet_config" {
     vuln_processing_cpu                  = 2048
     vuln_data_stream_mem                 = 1024
     vuln_data_stream_cpu                 = 512
-    image                                = "fleetdm/fleet:v4.61.0"
+    image                                = "fleetdm/fleet:v4.62.0"
     family                               = "fleet-vuln-processing"
     sidecars                             = []
     extra_environment_variables          = {}

diff --git a/terraform/byo-vpc/byo-db/README.md b/terraform/byo-vpc/byo-db/README.md
@@ -6,7 +6,7 @@ No requirements.
 
 | Name | Version |
 |------|---------|
-| <a name="provider_aws"></a> [aws](#provider\_aws) | 4.61.0 |
+| <a name="provider_aws"></a> [aws](#provider\_aws) | 4.62.0 |
 
 ## Modules
 

diff --git a/terraform/byo-vpc/byo-db/byo-ecs/variables.tf b/terraform/byo-vpc/byo-db/byo-ecs/variables.tf
@@ -16,7 +16,7 @@ variable "fleet_config" {
     mem                          = optional(number, 4096)
     cpu                          = optional(number, 512)
     pid_mode                     = optional(string, null)
-    image                        = optional(string, "fleetdm/fleet:v4.61.0")
+    image                        = optional(string, "fleetdm/fleet:v4.62.0")
     family                       = optional(string, "fleet")
     sidecars                     = optional(list(any), [])
     depends_on                   = optional(list(any), [])
@@ -119,7 +119,7 @@ variable "fleet_config" {
     mem                          = 512
     cpu                          = 256
     pid_mode                     = null
-    image                        = "fleetdm/fleet:v4.61.0"
+    image                        = "fleetdm/fleet:v4.62.0"
     family                       = "fleet"
     sidecars                     = []
     depends_on                   = []

diff --git a/terraform/byo-vpc/byo-db/variables.tf b/terraform/byo-vpc/byo-db/variables.tf
@@ -77,7 +77,7 @@ variable "fleet_config" {
     mem                          = optional(number, 4096)
     cpu                          = optional(number, 512)
     pid_mode                     = optional(string, null)
-    image                        = optional(string, "fleetdm/fleet:v4.61.0")
+    image                        = optional(string, "fleetdm/fleet:v4.62.0")
     family                       = optional(string, "fleet")
     sidecars                     = optional(list(any), [])
     depends_on                   = optional(list(any), [])
@@ -205,7 +205,7 @@ variable "fleet_config" {
     mem                          = 512
     cpu                          = 256
     pid_mode                     = null
-    image                        = "fleetdm/fleet:v4.61.0"
+    image                        = "fleetdm/fleet:v4.62.0"
     family                       = "fleet"
     sidecars                     = []
     depends_on                   = []

diff --git a/terraform/byo-vpc/example/main.tf b/terraform/byo-vpc/example/main.tf
@@ -17,7 +17,7 @@ provider "aws" {
 }
 
 locals {
-  fleet_image = "fleetdm/fleet:v4.61.0"
+  fleet_image = "fleetdm/fleet:v4.62.0"
   domain_name = "example.com"
 }
 

diff --git a/terraform/byo-vpc/variables.tf b/terraform/byo-vpc/variables.tf
@@ -170,7 +170,7 @@ variable "fleet_config" {
     mem                          = optional(number, 4096)
     cpu                          = optional(number, 512)
     pid_mode                     = optional(string, null)
-    image                        = optional(string, "fleetdm/fleet:v4.61.0")
+    image                        = optional(string, "fleetdm/fleet:v4.62.0")
     family                       = optional(string, "fleet")
     sidecars                     = optional(list(any), [])
     depends_on                   = optional(list(any), [])
@@ -298,7 +298,7 @@ variable "fleet_config" {
     mem                          = 512
     cpu                          = 256
     pid_mode                     = null
-    image                        = "fleetdm/fleet:v4.61.0"
+    image                        = "fleetdm/fleet:v4.62.0"
     family                       = "fleet"
     sidecars                     = []
     depends_on                   = []