Prepare v4.43.0 (#15972)

fleetdm · Jan 9, 2024 · 502a811 · 502a811
1 parent 4be9ca3
commit 502a811
Show file tree

Hide file tree

Showing 52 changed files with 67 additions and 82 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,58 @@
+## Fleet 4.43.0 (Jan 9, 2024)
+
+### Changes
+
+* **Endpoint operations**:
+  - Added new `POST /api/v1/fleet/queries/:id/run` endpoint for synchronous live queries.
+  - Added `PUT /api/fleet/orbit/device_mapping` and `PUT /api/v1/fleet/hosts/{id}/device_mapping` endpoints for setting or replacing custom email addresses.
+  - Added experimental `--end-user-email` flag to `fleetctl package` for `.msi` installer bundling.
+  - Added `host_count_updated_at` to policy API responses.
+  - Added ability to query by host display name via list hosts endpoint.
+  - Added `gigs_total_disk_space` to host endpoint responses.
+  - Added ability to remotely configure `fleetd` update channels in agent options (Fleet Premium only, requires `fleetd` >= 1.20.0).
+  - Improved error message for osquery log write failures.
+  - Protect live query performance by limiting results per live query.
+  - Improved error handling and validation for `/api/fleet/orbit/device_token` and other endpoints.
+
+* **Device management (MDM)**:
+  - Added check for custom end user email fields in enrollment profiles.
+  - Modified hosts and labels endpoints to include only user-defined Windows MDM profiles.
+  - Improved profile verification logic for 'pending' profiles.
+  - Updated enrollment process so that `fleetd` auto-installs on Apple hosts enabling MDM features manually.
+  - Extended script execution timeout to 5 minutes.
+  - Extended Script disabling functionality to various script endpoints and `fleetctl`.
+
+### Bug fixes and improvements
+  - Fix profiles incorrectly being marked as "Failed". 
+    - **NOTE**: If you are using MDM features and have already upgraded to v4.42.0, you will need to take manual steps to resolve this issue. Please [follow these instructions](https://github.com/fleetdm/fleet/issues/15725) to reset your profiles. 
+  - Added tooltip to policies page stating when policy counts were last updated.
+  - Added bold styling to profile name in custom profile activity logs.
+  - Implemented style tweaks to the nudge preview on OS updates page.
+  - Updated sort query results and reports case sensitivity and default to sorting.
+  - Added disk size indication when disk is full. 
+  - Replaced 500 error with 409 for token conflicts with another host.
+  - Fixed script output text formatting.
+  - Fixed styling issues in policy automations modal and nudge preview on OS updates page.
+  - Fixed loading spinner not appearing when running a script on a host.
+  - Fixed duplicate view all hosts link in disk encryption table.
+  - Fixed tooltip text alignment UI bug.
+  - Fixed missing 'Last restarted' values when filtering hosts by label.
+  - Fixed broken link on callout box on host details page. 
+  - Fixed bugs in searching hosts by email addresses and filtering by labels.
+  - Fixed a bug where the host details > software > munki issues section was sometimes displayed erroneously.
+  - Fixed a bug where OS compatibility was not correctly calculated for certain queries.
+  - Fixed issue where software title aggregation was not running during vulnerability scans.
+  - Fixed an error message bug for password length on new user creation.
+  - Fixed a bug causing misreporting of vulnerability scanning status in analytics.
+  - Fixed issue with query results reporting after discard data is enabled.
+  - Fixed a bug preventing label selection while the label search field was active.
+  - Fixed bug where `fleetctl` did not allow placement of `--context` and `--debug` flags following certain commands.
+  - Fixed a validation bug allowing `overrides.platform` to be set to `null`.
+  - Fixed `fleetctl` issue with creating a new query when running a query by name.
+  - Fixed a bug that caused vulnerability scanning status to be misreported in analytics.
+  - Fixed CVE tooltip bullets on the software page.
+  - Fixed a bug that didn't allow enabling team disk encryption if macOS MDM was not configured.
+
 ## Fleet 4.42.0 (Dec 21, 2023)
 
 ### Changes

diff --git a/changes/13825-remotely-configure-fleetd-update-channels b/changes/13825-remotely-configure-fleetd-update-channels
diff --git a/changes/14500-disable-scripts-cli-endpoints b/changes/14500-disable-scripts-cli-endpoints
diff --git a/changes/14500-disable-scripts-impl b/changes/14500-disable-scripts-impl
diff --git a/changes/14780-orphaned-query-results b/changes/14780-orphaned-query-results
diff --git a/changes/14800-new-live-query-endpoint b/changes/14800-new-live-query-endpoint
diff --git a/changes/14874-clip-live-query-results b/changes/14874-clip-live-query-results
diff --git a/changes/15035-sql-parsing b/changes/15035-sql-parsing
diff --git a/changes/15058-add-gigs-total-disk-space b/changes/15058-add-gigs-total-disk-space
diff --git a/changes/15109-fix-scripts-spinner b/changes/15109-fix-scripts-spinner
diff --git a/changes/15213-vuln-enabled b/changes/15213-vuln-enabled
diff --git a/changes/15253-sort-results-case-insensitively b/changes/15253-sort-results-case-insensitively
diff --git a/changes/15323-add-host_count_updated_at-to-policy b/changes/15323-add-host_count_updated_at-to-policy
diff --git a/changes/15323-add-host_count_updated_at-to-policy-frontend b/changes/15323-add-host_count_updated_at-to-policy-frontend
diff --git a/changes/15436-fleetctl-generate-context b/changes/15436-fleetctl-generate-context
diff --git a/changes/15455-logging-issues b/changes/15455-logging-issues
diff --git a/changes/15458-host-search-pending-display-name b/changes/15458-host-search-pending-display-name
diff --git a/changes/15522-query-host-search b/changes/15522-query-host-search
diff --git a/changes/15525-email-search b/changes/15525-email-search
diff --git a/changes/15577-conditionally-display-munki-card b/changes/15577-conditionally-display-munki-card
diff --git a/changes/15625-password-error b/changes/15625-password-error
diff --git a/changes/15631-policy-automations-modal b/changes/15631-policy-automations-modal
diff --git a/changes/15714-windows-os-updates-profile-summary b/changes/15714-windows-os-updates-profile-summary
diff --git a/changes/15724-remove-bullets-from-CVEs b/changes/15724-remove-bullets-from-CVEs
diff --git a/changes/15725-fix-profile-updated-at-migration b/changes/15725-fix-profile-updated-at-migration
diff --git a/changes/15731-fix-double-view-all-links b/changes/15731-fix-double-view-all-links
diff --git a/changes/15802-remove-not-updating-policies-callout b/changes/15802-remove-not-updating-policies-callout
diff --git a/changes/15817-disk-encryption b/changes/15817-disk-encryption
diff --git a/changes/15822-missing-last_restarted_at b/changes/15822-missing-last_restarted_at
diff --git a/changes/15832-device_token-improvements b/changes/15832-device_token-improvements
diff --git a/changes/15930-bugfix-vuln-cmd b/changes/15930-bugfix-vuln-cmd
diff --git a/changes/feat-extend-script-timeout b/changes/feat-extend-script-timeout
diff --git a/changes/issue-15057-custom-email-device-mapping b/changes/issue-15057-custom-email-device-mapping
diff --git a/changes/issue-15057-custom-email-device-mapping-orbit b/changes/issue-15057-custom-email-device-mapping-orbit
diff --git a/changes/issue-15435-tooltip-text-alignment-fix b/changes/issue-15435-tooltip-text-alignment-fix
diff --git a/changes/issue-15515-fix-script-output-formatting b/changes/issue-15515-fix-script-output-formatting
diff --git a/changes/issue-15733-os-update-style b/changes/issue-15733-os-update-style
diff --git a/changes/issue-15762-bold-activities b/changes/issue-15762-bold-activities
diff --git a/changes/manual-enrollment b/changes/manual-enrollment
diff --git a/changes/profile-verification b/changes/profile-verification
diff --git a/charts/fleet/Chart.yaml b/charts/fleet/Chart.yaml
@@ -8,7 +8,7 @@ version: v6.0.1
 home: https://github.com/fleetdm/fleet
 sources:
   - https://github.com/fleetdm/fleet.git
-appVersion: v4.42.0
+appVersion: v4.43.0
 dependencies:
 - name: mysql
   condition: mysql.enabled

diff --git a/charts/fleet/values.yaml b/charts/fleet/values.yaml
@@ -2,7 +2,7 @@
 # All settings related to how Fleet is deployed in Kubernetes
 hostName: fleet.localhost
 replicas: 3 # The number of Fleet instances to deploy
-imageTag: v4.42.0 # Version of Fleet to deploy
+imageTag: v4.43.0 # Version of Fleet to deploy
 podAnnotations: {} # Additional annotations to add to the Fleet pod
 serviceAccountAnnotations: {} # Additional annotations to add to the Fleet service account
 resources:

diff --git a/infrastructure/dogfood/terraform/aws/variables.tf b/infrastructure/dogfood/terraform/aws/variables.tf
@@ -56,7 +56,7 @@ variable "database_name" {
 
 variable "fleet_image" {
   description = "the name of the container image to run"
-  default     = "fleetdm/fleet:v4.42.0"
+  default     = "fleetdm/fleet:v4.43.0"
 }
 
 variable "software_inventory" {

diff --git a/infrastructure/dogfood/terraform/gcp/variables.tf b/infrastructure/dogfood/terraform/gcp/variables.tf
@@ -68,5 +68,5 @@ variable "redis_mem" {
 }
 
 variable "image" {
-  default = "fleet:v4.42.0"
+  default = "fleet:v4.43.0"
 }
diff --git a/infrastructure/sandbox/JITProvisioner/jitprovisioner.tf b/infrastructure/sandbox/JITProvisioner/jitprovisioner.tf
@@ -206,7 +206,7 @@ resource "random_uuid" "jitprovisioner" {
 
 # Use the local to make the trigger work.
 locals {
-  fleet_tag = "v4.42.0"
+  fleet_tag = "v4.43.0"
 }
 
 resource "null_resource" "standard-query-library" {

diff --git a/infrastructure/sandbox/PreProvisioner/lambda/deploy_terraform/main.tf b/infrastructure/sandbox/PreProvisioner/lambda/deploy_terraform/main.tf
@@ -165,7 +165,7 @@ resource "helm_release" "main" {
 
   set {
     name  = "imageTag"
-    value = "v4.42.0"
+    value = "v4.43.0"
   }
 
   set {

diff --git a/terraform/byo-vpc/byo-db/byo-ecs/variables.tf b/terraform/byo-vpc/byo-db/byo-ecs/variables.tf
@@ -13,7 +13,7 @@ variable "fleet_config" {
   type = object({
     mem                          = optional(number, 4096)
     cpu                          = optional(number, 512)
-    image                        = optional(string, "fleetdm/fleet:v4.42.0")
+    image                        = optional(string, "fleetdm/fleet:v4.43.0")
     family                       = optional(string, "fleet")
     sidecars                     = optional(list(any), [])
     depends_on                   = optional(list(any), [])

diff --git a/terraform/byo-vpc/byo-db/variables.tf b/terraform/byo-vpc/byo-db/variables.tf
@@ -74,7 +74,7 @@ variable "fleet_config" {
   type = object({
     mem                          = optional(number, 4096)
     cpu                          = optional(number, 512)
-    image                        = optional(string, "fleetdm/fleet:v4.42.0")
+    image                        = optional(string, "fleetdm/fleet:v4.43.0")
     family                       = optional(string, "fleet")
     sidecars                     = optional(list(any), [])
     depends_on                   = optional(list(any), [])

diff --git a/terraform/byo-vpc/example/main.tf b/terraform/byo-vpc/example/main.tf
@@ -17,7 +17,7 @@ provider "aws" {
 }
 
 locals {
-  fleet_image = "fleetdm/fleet:v4.42.0"
+  fleet_image = "fleetdm/fleet:v4.43.0"
   domain_name = "example.com"
 }
 

diff --git a/terraform/byo-vpc/variables.tf b/terraform/byo-vpc/variables.tf
@@ -165,7 +165,7 @@ variable "fleet_config" {
   type = object({
     mem                          = optional(number, 4096)
     cpu                          = optional(number, 512)
-    image                        = optional(string, "fleetdm/fleet:v4.42.0")
+    image                        = optional(string, "fleetdm/fleet:v4.43.0")
     family                       = optional(string, "fleet")
     sidecars                     = optional(list(any), [])
     depends_on                   = optional(list(any), [])

diff --git a/terraform/variables.tf b/terraform/variables.tf
@@ -215,7 +215,7 @@ variable "fleet_config" {
   type = object({
     mem                          = optional(number, 4096)
     cpu                          = optional(number, 512)
-    image                        = optional(string, "fleetdm/fleet:v4.42.0")
+    image                        = optional(string, "fleetdm/fleet:v4.43.0")
     family                       = optional(string, "fleet")
     sidecars                     = optional(list(any), [])
     depends_on                   = optional(list(any), [])

diff --git a/tools/fleetctl-npm/package.json b/tools/fleetctl-npm/package.json
@@ -1,6 +1,6 @@
 {
   "name": "fleetctl",
-  "version": "v4.42.0",
+  "version": "v4.43.0",
   "description": "Installer for the fleetctl CLI tool",
   "bin": {
     "fleetctl": "./run.js"