Release article: 4.25.0

[noahtalerman]

Fleet 4.25.0 is scheduled for release on 2022-12-22 (afternoon PST)

Goal

Prepare and publish the release article for Fleet 4.25.0 so that folks in the Fleet/osquery community can understand the latest improvements.

How?

• [x] @noahtalerman: Add features to "Primary improvements" section
• [x] @noahtalerman: Document the osquery extensions feature
  • UPDATE: Docs PR is here here: #9099
• [x] @lukeheath: Add draft CHANGELOG to "List of improvements" section
• [x] @chris-mcgillicuddy: Write and publish blogpost
• [x] @mike-j-thomas: Hand images for cover and primary improvements to @chris-mcgillicuddy

Primary improvements

• 7805 (Premium only)

• 6530

• 9011

List of other improvements

Fleet 4.25.0 (Dec 22, 2022)

• Added new activity that records create/edit/delete user roles.

• Log all successful logins as activity and all attempts with ip in stderr.

• Added API endpoint to generate DEP public and private keys (MDM feature). MDM features are not ready for production and are currently in development. These features are disabled by default.

• Added ability to mark policy as critical with Fleet Premium.

• Added ability to mark policies run automation for all already failing hosts.

• Added fleet serve configuration flags for Apple Push Notification service (APNs) and Simple Certificate Enrollment Protocol (SCEP) certificates and keys.

• Added fleet serve configuration flags for Apple Business Manager (BM).

• Added fleetctl trigger command to trigger an ad hoc run of all jobs in a specified cron schedule.

• Added the fleetctl get mdm_apple command to retrieve the Apple MDM configuration information.

• Added the fleetctl get mdm_apple_bm command to retrieve the Apple Business Manager configuration information.

• Added fleetctl command to generate APNs CSR and SCEP CA certificate and key pair.

• Add fleetctl command to generate DEP public and private keys.

• Windows installer now ensures that the installed osquery version gets removed before installing Orbit.

• Updated Go to 1.19.4.

• During deleting host flow, inform users how to prevent re-enrolling hosts.

• Added functionality to report if a carve failed along with its error message.

• Added the redis.username configuration option for setups that use Redis ACLs.

• Windows installer now ensures that no files are left on the filesystem when orbit uninstallation process is kicked off.

• Improve how we are logging failed detail queries and windows os version queries.

• Spiffier UI: Add scroll shadows to indicate horizontal scrolling to user.

• Add counts_update_at attribute to GET /hosts/summary/mdm response. update GET /labels/:id/hosts to filter by mdm_id and mdm_enrollment_status query params. add mobile_device_management_solution to response from GET /labels/:id/hosts when including mdm_id query param. add mdm information to UI for windows/all dashboard and host details.

• Fixed fleetctl query to use custom HTTP headers if configured.

• Fixed how we are querying and ingesting disk encryption in linux to workaround an osquery bug.

• Fixed buggy input field alignments.

• Fixed to multiselect styling.

• Fixed bug where manually triggering a cron run that preempts a regularly scheduled run causes an unexpected shift in the start time of the next interval.

• Fixed an issue where the height of the label for some input fields changed when an error message is displayed.

• Fixed the alignment of the "copy" and "show" button icons in the manage enroll secrets and get API token modals.

[noahtalerman]

Hey @chris-mcgillicuddy! Can you please draft the release blogpost for 4.25.0?

I forgot to file this issue earlier this week. This is a whoops from me.

[noahtalerman]

@mike-j-thomas when you get the chance, can you please provide Chris with screenshots for the blogpost?

@lukeheath when you get the chance, can you please update the issue description with the CHANGELOG?

Thanks!

[chris-mcgillicuddy]

@noahtalerman I can, but I'd like to publish this early next week per @jarodreyes' previous comment.

[noahtalerman]

I'd like to publish this early next week per @jarodreyes previous comment.

@chris-mcgillicuddy sound good!

[lukeheath]

Draft changelog incoming...

[lukeheath]

@chris-mcgillicuddy @noahtalerman Draft changelog added!

[mike-j-thomas]

@chris-mcgillicuddy, @noahtalerman, images attached.

MDM info for windows hosts:

Activity feed:

Critical policy:

[mike-j-thomas]

@chris-mcgillicuddy I also have a couple of animated gifs showing the different ways to mark policies as critical. These may be a little heavy, though (almost 2 Mb each). @eashaw, what do you think?

Edit: There's also the part where both of them playing together is making me dizzy 😵‍💫

[chris-mcgillicuddy]

@noahtalerman and @jarodreyes, Fleet 4.25.0 release article is ready for review:

https://docs.google.com/document/d/1DmsV08qVg4EbXaB-NMVm8irOUF5wpUnbsRstqnGYEgo/edit?usp=sharing

[chris-mcgillicuddy]

PR for the Fleet 4.25.0 release article has been created https://github.com/fleetdm/fleet/pull/9125.

[noahtalerman]

Hey @chris-mcgillicuddy @jarodreyes I think we should get the 4.25 article out this week. The upcoming release (4.26) is scheduled for next week.

What do you think?