Adding changes for Fleet v4.51.0 (#19601)

fleetdm · Jun 10, 2024 · fbe9c1b · fbe9c1b
1 parent be753af
commit fbe9c1b
Show file tree

Hide file tree

Showing 58 changed files with 66 additions and 75 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,46 @@
+## Fleet 4.51.0 (Jun 10, 2024)
+
+### Endpoint Operations
+- Added support for environment variables in configuration profiles for GitOps.
+- `fleetctl gitops --dry-run` now errors on duplicate (or conflicting) global/team enroll secrets.
+- Added `activities_webhook` configuration option to allow for a webhook to be called when an activity is recorded. This can be used to send activity data to external services. If the webhook response is a 429 error code, the webhook retries for up to 30 minutes.
+- Added Tuxedo OS to the Linux distribution platform list.
+
+### Device Management (MDM)
+- **NOTE:** Added new required Fleet server config environment variable when MDM is enabled,
+  `FLEET_SERVER_PRIVATE_KEY`. This variable contains the private key used to encrypt the MDM
+  certificates and keys stored in Fleet. Learm more at
+  https://fleetdm.com/learn-more-about/fleet-server-private-key.
+- Added MDM support for iPhone/iPad.
+- Added software self-service support. 
+- Added query parameter `self_service` to filter the list of software titles and the list of a host's software so that only those available to install via self-service are returned.
+- Added the device-authenticated endpoint `POST /device/{token}/software/install/{software_title_id}` to self-install software.
+- Added new endpoints to configure ABM keypairs and tokens.
+- Added `GET /fleet/mdm/apple/request_csr` endpoint, which returns the signed APNS CSR needed to activate Apple MDM.
+- Added the ability to automatically log off and lock out `Administrator` users on Windows hosts.
+- Added clearer error messages when attempting to set up Apple MDM without a server private key configured.
+- Added UI for the global and host activities for self-service software installation.
+- Updated UI to support new workflows for macOS MDM setup and credentials.
+- Updated UI to support software self-service features.
+- Updated UI controls page language and hid CTA button for users without access to turn on MDM.
+
+### Vulnerability Management
+- Updated the CIS policies for Windows 11 Enterprise from v2.0.0 (03-07-2023) to v3.0.0 (02-22-2024).
+- Fleet now detects Ubuntu kernel vulnerabilities from the Canonical OVAL feed.
+- Fleet now detects and reports vulnerabilities on Firefox ESR editions on macOS.
+
+### Bug fixes and improvements
+- Fixed a bug that might prevent enqueuing commands to renew SCEP certificates if the host was enrolled more than once.
+- Prevented the `host_id`s field from being returned from the list labels endpoint.
+- Improved software ingestion performance by deduplicating incoming software.
+- Placed all form field label tooltips on top.
+- Fixed a number of related issues with the filtering and sorting of the queries table.
+- Added various optimizations to the rendering of the queries table.
+- Fixed host query page styling bugs.
+- Fixed a UI bug where "Wipe" action was not being hidden from observers.
+- Fixed UI bug for builtin label names for selecting targets.
+- Removed references to Administrator accounts in the comments of the Windows lock script.
+
 ## Fleet 4.50.2 (May 31, 2024)
 
 ### Bug fixes

diff --git a/changes/10383-mdm-saved-certs-ui b/changes/10383-mdm-saved-certs-ui
diff --git a/changes/11942-duplicated-software b/changes/11942-duplicated-software
diff --git a/changes/14722-activity-feed-webhooks b/changes/14722-activity-feed-webhooks
diff --git a/changes/16795-update-go b/changes/16795-update-go
diff --git a/changes/17309-support-env-vars-profiles b/changes/17309-support-env-vars-profiles
diff --git a/changes/17513-bulk-host-opts-filters b/changes/17513-bulk-host-opts-filters
diff --git a/changes/17587-software-self-service-ui b/changes/17587-software-self-service-ui
diff --git a/changes/17860-improve-license-expiration-banner b/changes/17860-improve-license-expiration-banner
diff --git a/changes/18053-ubuntu-kernel-vuln-detection b/changes/18053-ubuntu-kernel-vuln-detection
diff --git a/changes/18119-iphone-ipad-support b/changes/18119-iphone-ipad-support
diff --git a/changes/18447-firefox-esr b/changes/18447-firefox-esr
diff --git a/changes/18461-windows-lock b/changes/18461-windows-lock
diff --git a/changes/18515-remove-host-ids-from-list-labels b/changes/18515-remove-host-ids-from-list-labels
diff --git a/changes/18732-switch-teams-reset-page b/changes/18732-switch-teams-reset-page
diff --git a/changes/18741-form-field-tooltip-positions b/changes/18741-form-field-tooltip-positions
diff --git a/changes/18833-filter-software-by-self-service b/changes/18833-filter-software-by-self-service
diff --git a/changes/18834-add-self-service-install-endpoint b/changes/18834-add-self-service-install-endpoint
diff --git a/changes/18834-fleetctl-add-self-service-field b/changes/18834-fleetctl-add-self-service-field
diff --git a/changes/18838-additional-db-optimizations b/changes/18838-additional-db-optimizations
diff --git a/changes/18847-software-self-install-activities b/changes/18847-software-self-install-activities
diff --git a/changes/18862-upgradeCIS-win11 b/changes/18862-upgradeCIS-win11
diff --git a/changes/18881-queries-table-filter-bugs b/changes/18881-queries-table-filter-bugs
diff --git a/changes/18912-controls-language-and-cta-button-fix b/changes/18912-controls-language-and-cta-button-fix
diff --git a/changes/19001-builtin-label-names-selecting-targets b/changes/19001-builtin-label-names-selecting-targets
diff --git a/changes/19014-certs-endpoints b/changes/19014-certs-endpoints
diff --git a/changes/19052-activity-feed-webhooks b/changes/19052-activity-feed-webhooks
diff --git a/changes/19072-additional-stats b/changes/19072-additional-stats
diff --git a/changes/19152-gitops-duplicate-enroll-secret b/changes/19152-gitops-duplicate-enroll-secret
diff --git a/changes/19171-host-query-bug-fixes b/changes/19171-host-query-bug-fixes
diff --git a/changes/19179-bm b/changes/19179-bm
diff --git a/changes/19267-bugfix-ui-wipe-menu b/changes/19267-bugfix-ui-wipe-menu
diff --git a/changes/19272-live-query-lag b/changes/19272-live-query-lag
diff --git a/changes/19311-scep-renew b/changes/19311-scep-renew
diff --git a/changes/19464-private-key-errors b/changes/19464-private-key-errors
diff --git a/changes/add-tuxedo-os b/changes/add-tuxedo-os
diff --git a/changes/issue-18847-add-ui-activities-for-self-service b/changes/issue-18847-add-ui-activities-for-self-service
diff --git a/changes/jve-fix-lock-script-typo b/changes/jve-fix-lock-script-typo
diff --git a/changes/jve-pk-docs b/changes/jve-pk-docs
diff --git a/changes/post-apns-cert b/changes/post-apns-cert
diff --git a/changes/save-certs-encrypted b/changes/save-certs-encrypted
diff --git a/charts/fleet/Chart.yaml b/charts/fleet/Chart.yaml
@@ -8,7 +8,7 @@ version: v6.0.2
 home: https://github.com/fleetdm/fleet
 sources:
   - https://github.com/fleetdm/fleet.git
-appVersion: v4.50.2
+appVersion: v4.51.0
 dependencies:
   - name: mysql
     condition: mysql.enabled

diff --git a/charts/fleet/values.yaml b/charts/fleet/values.yaml
@@ -2,7 +2,7 @@
 # All settings related to how Fleet is deployed in Kubernetes
 hostName: fleet.localhost
 replicas: 3 # The number of Fleet instances to deploy
-imageTag: v4.50.2 # Version of Fleet to deploy
+imageTag: v4.51.0 # Version of Fleet to deploy
 podAnnotations: {} # Additional annotations to add to the Fleet pod
 serviceAccountAnnotations: {} # Additional annotations to add to the Fleet service account
 resources:

diff --git a/infrastructure/dogfood/terraform/aws/variables.tf b/infrastructure/dogfood/terraform/aws/variables.tf
@@ -56,7 +56,7 @@ variable "database_name" {
 
 variable "fleet_image" {
   description = "the name of the container image to run"
-  default     = "fleetdm/fleet:v4.50.2"
+  default     = "fleetdm/fleet:v4.51.0"
 }
 
 variable "software_inventory" {

diff --git a/infrastructure/dogfood/terraform/gcp/variables.tf b/infrastructure/dogfood/terraform/gcp/variables.tf
@@ -68,5 +68,5 @@ variable "redis_mem" {
 }
 
 variable "image" {
-  default = "fleet:v4.50.2"
+  default = "fleet:v4.51.0"
 }