Prepare v4.40.0 (#14940)

fleetdm · Nov 6, 2023 · 8dbe690 · 8dbe690
1 parent 7c11706
commit 8dbe690
Show file tree

Hide file tree

Showing 55 changed files with 72 additions and 109 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,63 @@
+## Fleet 4.40.0 (Nov 3, 2023)
+
+### Changes
+
+* **Endpoint operations**:
+  - New tables added to the fleetd extension: app_icons, falconctl_options, falcon_kernel_check, cryptoinfo, cryptsetup_status, filevault_status, firefox_preferences, firmwarepasswd, ioreg, and windows_updates.
+
+* **Device management (MDM)**:
+  - Introduced support for MS-MDM management protocol.
+  - Added a host detail query for Windows hosts to ingest MDM device id and updated the Windows MDM device enrollment flow.
+  - Implemented `--context` and `--debug` flags for `fleetctl mdm run-command`.
+  - Support added for `fleetctl mdm run-command` on Windows hosts.
+  - macOS hosts with MDM features via SSO can now run `sudo profiles renew --type enrollment`.
+  - Introduced `GET mdm/commandresults` endpoint to retrieve MDM command results for Windows and macOS.
+  - `fleetctl get mdm-command-results` now uses the new above endpoint.
+  - Added `POST /fleet/mdm/commands/run` platform-agnostic endpoint for MDM commands.
+  - Introduced API for recent Windows MDM commands via `fleetctl` and the API.
+
+* **Vulnerability management**:
+  - Added vulnerability data support for JetBrains apps with similar names (e.g., IntelliJ IDEA.app vs. IntelliJ IDEA Ultimate.app).
+  - Apple Rapid Security Response version added to macOS host details (requires osquery v5.9.1 on macOS devices).
+  - For ChromeOS hosts, software now includes chrome extensions.
+  - Updated vulnerability processing to omit software without versions.
+  - Resolved false positives in vulnerabilities for Chrome and Firefox extensions.
+
+* **UI improvements**:
+  - Fleet tables in UI reset rows upon filter/search/page changes.
+  - Improved handling when deleting a large number of hosts; operations now continue in the background after 30 seconds.
+  - Added the ability for Observers and Observer+ to view policy resolutions.
+  - Improved app settings clarity for premium users regarding usage statistics.
+  - UI buttons for live queries or policies are now disabled with a tooltip if live queries are globally turned off.
+  - Observers and observer+ can now run existing policies in the UI.
+
+### Bug fixes and improvements
+
+* **REST API**:
+  - Overhauled REST API input validation for several endpoints (hosts, carves, users).
+  - Validation error status codes switched from 500 to 400 for clarity.
+  - Numerous new validations added for policy details, os_name/version, etc.
+  - Addressed issues in /fleet/sso and /mdm/apple/enqueue endpoints.
+  - Updated response codes for several other endpoints for clearer error handling.
+
+* **Logging and debugging**:
+  - Updated Apple Business Manager terms logging behavior.
+  - Refined the copy of the ABM terms banner for better clarity.
+  - Addressed a false positive CVE detection on the `certifi` python package.
+  - Fixed a logging issue with Fleet's Cloudflare WARP software version ingestion for Windows.
+
+* **UI fixes**:
+  - Addressed UI bugs for the "Turn off MDM" action display and issues with the host details page's banners.
+  - Fixed narrow viewport EULA display issue on the Windows TOS page.
+  - Rectified team dropdown value issues and ensured consistent help text across query and policy creation forms.
+  - Fixed issues when applying config changes without MDM features enabled.
+
+* **Others**:
+  - Removed the capability for Premium customers to disable usage statistics. Further information provided in the Fleet documentation.
+  - Retired creating OS policies from host OSes in the UI.
+  - Addressed issues in Live Queries with the POST /fleet/queries/run endpoint.
+  - Introduced database migrations for Windows MDM command tables.
+
 ## Fleet 4.39.0 (Oct 19, 2023)
 
 ### Changes

diff --git a/changes/10888-backend-analytics-for-premium b/changes/10888-backend-analytics-for-premium
diff --git a/changes/10888-premium-usage-statistics b/changes/10888-premium-usage-statistics
diff --git a/changes/12274-return-code-for-password-reset b/changes/12274-return-code-for-password-reset
diff --git a/changes/12559-sso-metadata-url b/changes/12559-sso-metadata-url
diff --git a/changes/12888-apple-rapid-security-response b/changes/12888-apple-rapid-security-response
diff --git a/changes/12997-mdm-config-validations b/changes/12997-mdm-config-validations
diff --git a/changes/13615-ignore-software-without-version b/changes/13615-ignore-software-without-version
diff --git a/changes/13712-context-run-command b/changes/13712-context-run-command
diff --git a/changes/13889-IDEA-apps-with-similar-names b/changes/13889-IDEA-apps-with-similar-names
diff --git a/changes/13907-get-mdm-commands b/changes/13907-get-mdm-commands
diff --git a/changes/13908-get-mdm-command-results b/changes/13908-get-mdm-command-results
diff --git a/changes/13998-host-options-validation b/changes/13998-host-options-validation
diff --git a/changes/14056-file-ext b/changes/14056-file-ext
diff --git a/changes/14097-deleting-large-number-of-hosts b/changes/14097-deleting-large-number-of-hosts
diff --git a/changes/14170-chromeos-software-bug b/changes/14170-chromeos-software-bug
diff --git a/changes/14238-enroll-reference b/changes/14238-enroll-reference
diff --git a/changes/14267-disable-run-button b/changes/14267-disable-run-button
diff --git a/changes/14267-forbidden-status-code b/changes/14267-forbidden-status-code
diff --git a/changes/14464-add-kolide-tables b/changes/14464-add-kolide-tables
diff --git a/changes/14509-consistent-help-save-text b/changes/14509-consistent-help-save-text
diff --git a/changes/14522-fix-cloudflare-warp-versioning b/changes/14522-fix-cloudflare-warp-versioning
diff --git a/changes/14529-enqueue-apple-error b/changes/14529-enqueue-apple-error
diff --git a/changes/14543-fix-false-positive-python-certifi b/changes/14543-fix-false-positive-python-certifi
diff --git a/changes/14554-software-endpoint-validation b/changes/14554-software-endpoint-validation
diff --git a/changes/14577-observer-plus-run-policies b/changes/14577-observer-plus-run-policies
diff --git a/changes/14596-reset-selected-rows b/changes/14596-reset-selected-rows
diff --git a/changes/14620-save-inherited-query b/changes/14620-save-inherited-query
diff --git a/changes/14643-retire-creating-os-policy b/changes/14643-retire-creating-os-policy
diff --git a/changes/14733-14661-queries-page-fix b/changes/14733-14661-queries-page-fix
diff --git a/changes/14742-mdm-windows-enrollments-host-uuid b/changes/14742-mdm-windows-enrollments-host-uuid
diff --git a/changes/14842-turn-off-mdm-action b/changes/14842-turn-off-mdm-action
diff --git a/changes/bug-14431-surface-resolution-to-observers b/changes/bug-14431-surface-resolution-to-observers
diff --git a/changes/fix-chrome-and-firefox-extensions-false-positives b/changes/fix-chrome-and-firefox-extensions-false-positives
diff --git a/changes/issue-12841-msmdm-management-protocol b/changes/issue-12841-msmdm-management-protocol
diff --git a/changes/issue-13010-fix-host-details-page-banners b/changes/issue-13010-fix-host-details-page-banners
diff --git a/changes/issue-13012-log-abm-terms-change b/changes/issue-13012-log-abm-terms-change
diff --git a/changes/issue-13012-update-abm-terms-banner-copy b/changes/issue-13012-update-abm-terms-banner-copy
diff --git a/changes/issue-13594-run-mdm-command-on-windows b/changes/issue-13594-run-mdm-command-on-windows
diff --git a/changes/issue-13595-add-run-mdm-command-endpoint b/changes/issue-13595-add-run-mdm-command-endpoint
diff --git a/changes/issue-13880-fix-windows-eula b/changes/issue-13880-fix-windows-eula
diff --git a/changes/issue-13904-create-windows-mdm-command-tables b/changes/issue-13904-create-windows-mdm-command-tables
diff --git a/changes/issue-14418-fix-team-dropdown b/changes/issue-14418-fix-team-dropdown
diff --git a/charts/fleet/Chart.yaml b/charts/fleet/Chart.yaml
@@ -8,4 +8,4 @@ version: v5.0.1
 home: https://github.com/fleetdm/fleet
 sources:
   - https://github.com/fleetdm/fleet.git
-appVersion: v4.39.0
+appVersion: v4.40.0
diff --git a/charts/fleet/values.yaml b/charts/fleet/values.yaml
@@ -2,7 +2,7 @@
 # All settings related to how Fleet is deployed in Kubernetes
 hostName: fleet.localhost
 replicas: 3 # The number of Fleet instances to deploy
-imageTag: v4.39.0 # Version of Fleet to deploy
+imageTag: v4.40.0 # Version of Fleet to deploy
 podAnnotations: {} # Additional annotations to add to the Fleet pod
 serviceAccountAnnotations: {} # Additional annotations to add to the Fleet service account
 resources:

diff --git a/infrastructure/dogfood/terraform/aws/variables.tf b/infrastructure/dogfood/terraform/aws/variables.tf
@@ -56,7 +56,7 @@ variable "database_name" {
 
 variable "fleet_image" {
   description = "the name of the container image to run"
-  default     = "fleetdm/fleet:v4.39.0"
+  default     = "fleetdm/fleet:v4.40.0"
 }
 
 variable "software_inventory" {

diff --git a/infrastructure/dogfood/terraform/gcp/variables.tf b/infrastructure/dogfood/terraform/gcp/variables.tf
@@ -68,5 +68,5 @@ variable "redis_mem" {
 }
 
 variable "image" {
-  default = "fleet:v4.39.0"
+  default = "fleet:v4.40.0"
 }
diff --git a/infrastructure/sandbox/JITProvisioner/jitprovisioner.tf b/infrastructure/sandbox/JITProvisioner/jitprovisioner.tf
@@ -206,7 +206,7 @@ resource "random_uuid" "jitprovisioner" {
 
 # Use the local to make the trigger work.
 locals {
-  fleet_tag = "v4.39.0"
+  fleet_tag = "v4.40.0"
 }
 
 resource "null_resource" "standard-query-library" {

diff --git a/infrastructure/sandbox/PreProvisioner/lambda/deploy_terraform/main.tf b/infrastructure/sandbox/PreProvisioner/lambda/deploy_terraform/main.tf
@@ -165,7 +165,7 @@ resource "helm_release" "main" {
 
   set {
     name  = "imageTag"
-    value = "v4.39.0"
+    value = "v4.40.0"
   }
 
   set {

diff --git a/terraform/byo-vpc/byo-db/byo-ecs/variables.tf b/terraform/byo-vpc/byo-db/byo-ecs/variables.tf
@@ -13,7 +13,7 @@ variable "fleet_config" {
   type = object({
     mem                          = optional(number, 4096)
     cpu                          = optional(number, 512)
-    image                        = optional(string, "fleetdm/fleet:v4.39.0")
+    image                        = optional(string, "fleetdm/fleet:v4.40.0")
     family                       = optional(string, "fleet")
     sidecars                     = optional(list(any), [])
     depends_on                   = optional(list(any), [])

diff --git a/terraform/byo-vpc/byo-db/variables.tf b/terraform/byo-vpc/byo-db/variables.tf
@@ -74,7 +74,7 @@ variable "fleet_config" {
   type = object({
     mem                          = optional(number, 4096)
     cpu                          = optional(number, 512)
-    image                        = optional(string, "fleetdm/fleet:v4.39.0")
+    image                        = optional(string, "fleetdm/fleet:v4.40.0")
     family                       = optional(string, "fleet")
     sidecars                     = optional(list(any), [])
     depends_on                   = optional(list(any), [])

diff --git a/terraform/byo-vpc/example/main.tf b/terraform/byo-vpc/example/main.tf
@@ -17,7 +17,7 @@ provider "aws" {
 }
 
 locals {
-  fleet_image = "fleetdm/fleet:v4.39.0"
+  fleet_image = "fleetdm/fleet:v4.40.0"
 }
 
 resource "random_pet" "main" {}

diff --git a/terraform/byo-vpc/variables.tf b/terraform/byo-vpc/variables.tf
@@ -165,7 +165,7 @@ variable "fleet_config" {
   type = object({
     mem                          = optional(number, 4096)
     cpu                          = optional(number, 512)
-    image                        = optional(string, "fleetdm/fleet:v4.39.0")
+    image                        = optional(string, "fleetdm/fleet:v4.40.0")
     family                       = optional(string, "fleet")
     sidecars                     = optional(list(any), [])
     depends_on                   = optional(list(any), [])

diff --git a/terraform/variables.tf b/terraform/variables.tf
@@ -215,7 +215,7 @@ variable "fleet_config" {
   type = object({
     mem                          = optional(number, 4096)
     cpu                          = optional(number, 512)
-    image                        = optional(string, "fleetdm/fleet:v4.39.0")
+    image                        = optional(string, "fleetdm/fleet:v4.40.0")
     family                       = optional(string, "fleet")
     sidecars                     = optional(list(any), [])
     depends_on                   = optional(list(any), [])

diff --git a/tools/fleetctl-npm/package.json b/tools/fleetctl-npm/package.json
@@ -1,6 +1,6 @@
 {
   "name": "fleetctl",
-  "version": "v4.39.0",
+  "version": "v4.40.0",
   "description": "Installer for the fleetctl CLI tool",
   "bin": {
     "fleetctl": "./run.js"