Oliver Kieselbach
3a17ecfc47
all functions pointing now to AzureBlobStorageConnectionString
2026-02-10 23:55:13 +01:00
Oliver Kieselbach
97cdb90f0f
revert auth config change
2026-02-10 23:29:51 +01:00
Oliver Kieselbach
dc11280fa1
Merge branch 'main' of https://github.com/okieselbach/Autopilot-Monitor
2026-02-10 23:22:17 +01:00
Oliver Kieselbach
c2cfadd281
skip requesting cookie-session
2026-02-10 23:22:10 +01:00
Oliver Kieselbach
7f1637e40f
Update azure-static-web-apps-brave-grass-0070b5703.yml
...
allow manual trigger
2026-02-10 22:49:54 +01:00
Oliver Kieselbach
f09e9d1252
Update azure-static-web-apps-brave-grass-0070b5703.yml
...
move to vars
2026-02-10 22:39:53 +01:00
Oliver Kieselbach
8520287305
Update azure-static-web-apps-brave-grass-0070b5703.yml
...
added next urls
2026-02-10 22:29:52 +01:00
Oliver Kieselbach
b61c9ccc27
Merge branch 'main' of https://github.com/okieselbach/Autopilot-Monitor
2026-02-10 20:49:50 +01:00
Oliver Kieselbach
91cd9f8538
dependency fixes, react framework downgrade
2026-02-10 20:49:43 +01:00
Oliver Kieselbach
db6ea63489
Fix YAML formatting for Azure Static Web Apps workflow
...
fix api_location... must be "" as I'm using my own functions app
2026-02-10 20:17:21 +01:00
Oliver Kieselbach
ca11f2e505
Merge branch 'main' of https://github.com/okieselbach/Autopilot-Monitor
2026-02-10 20:13:56 +01:00
Oliver Kieselbach
8811b81c28
ci: add Azure Static Web Apps workflow file
...
on-behalf-of: @Azure opensource@microsoft.com
2026-02-10 20:13:51 +01:00
Oliver Kieselbach
2d82980702
config adjustments
2026-02-10 19:30:09 +01:00
Oliver Kieselbach
7bc96852d0
imelogtracker state fix
2026-02-10 17:58:54 +01:00
Oliver Kieselbach
95ba7603b5
fixed download progress tracking issues
2026-02-10 17:29:55 +01:00
Oliver Kieselbach
d1385321fd
fix orphaned data with DeleteSessionFunction
2026-02-10 16:42:42 +01:00
Oliver Kieselbach
eeafddd223
added tenant offboarding
...
fix for user login -> only progress portal
default theme -> light
2026-02-10 16:39:01 +01:00
Oliver Kieselbach
dadb897e8e
fixed app install summaries
2026-02-10 16:14:19 +01:00
Oliver Kieselbach
6c444c1c73
Analyze Rule phase_change fix
2026-02-10 15:35:02 +01:00
Oliver Kieselbach
2daeda2846
added GatherRules Guard Rails
2026-02-10 14:28:53 +01:00
Oliver Kieselbach
c33ac56c82
Autopilot v2 support and GatherRule Registry fix
2026-02-10 12:47:50 +01:00
Oliver Kieselbach
1939b52402
Updated rules to new events etc.
2026-02-10 12:01:44 +01:00
Oliver Kieselbach
080624cc5b
parsing signalr messages fix
2026-02-10 11:34:58 +01:00
Oliver Kieselbach
750a628c07
Session list status update fix
2026-02-10 10:57:23 +01:00
Oliver Kieselbach
3e3cc904f7
Agent re-architectured
...
- new IME log parser
- IME log replay option
- revised timeline and enrollment tracker
UI
- removed flight tracker
- fixed download tracker
- nice progress portal page
2026-02-10 02:37:31 +01:00
Oliver Kieselbach
7bb05ff4fe
Added Audit Page
2026-02-08 14:25:20 +01:00
Oliver Kieselbach
289e5ccda8
better maintanance funcion with catch-up
2026-02-08 13:58:47 +01:00
Oliver Kieselbach
e1e747d65b
more efficient delete via batching
2026-02-08 12:55:16 +01:00
Oliver Kieselbach
66d69f8074
better event counting... less table reads
2026-02-08 12:43:59 +01:00
Oliver Kieselbach
223b93450c
Progress tracker optimized
2026-02-08 12:05:58 +01:00
Oliver Kieselbach
5747d119c5
table write efficency during ingest
2026-02-08 11:26:50 +01:00
Oliver Kieselbach
8831bc33eb
payload content length fix
2026-02-07 22:31:04 +01:00
Oliver Kieselbach
2001dbaa29
prevent PII detail leaks
2026-02-07 22:25:06 +01:00
Oliver Kieselbach
3a46310cba
limit json body size to protect functions
2026-02-07 22:15:29 +01:00
Oliver Kieselbach
4b48664ee0
limit tenantconfig cache
2026-02-07 22:07:34 +01:00
Oliver Kieselbach
25715bbf3f
rework to avoid duplicate code in SignlR
2026-02-07 22:02:46 +01:00
Oliver Kieselbach
a7e12b3588
Middleware security fix
2026-02-07 21:56:13 +01:00
Oliver Kieselbach
89fb50368e
ConfigManagerCache fix
2026-02-07 21:41:25 +01:00
Oliver Kieselbach
ef2190c687
fixed galactic admin check in signalrgroup join/leave
2026-02-07 21:34:56 +01:00
Oliver Kieselbach
7fae27f0da
handle OData filer injection
2026-02-07 21:26:49 +01:00
Oliver Kieselbach
5f4519d635
DailyMaintananceFunction restructuring
2026-02-07 20:54:48 +01:00
Oliver Kieselbach
f358d8ebd9
Central table creation logic
...
app install metrics
platform stats
global gather and analyze rule editng
Dark mode (needs improvement)
UI enhancments
2026-02-07 19:23:20 +01:00
Oliver Kieselbach
994324f833
Central table creation logic
...
app install metrics
platform stats
global gather and analyze rule editng
Dark mode (needs improvement)
UI enhancments
2026-02-07 19:22:49 +01:00
Oliver Kieselbach
339cfda9ef
changed analyze rule execution logic
2026-02-06 19:21:15 +01:00
Oliver Kieselbach
6c72adb391
Add advanced monitoring, rule engine, and interactive session visualizations
...
Key Changes:
Web Portal:
Interactive performance metrics with 4-column responsive grid (CPU, Memory, Disk Queue, Disk Free)
Sparklines with hover tooltips using ResizeObserver for pixel-perfect rendering
Collapsible download progress tracking with ETA calculations
Event timeline severity filters (Debug, Info, Warning, Error, Critical)
Backend - Rule Engine:
Gather Rules: Remote-configurable data collection (Command/Registry/WMI)
Analyze Rules: Pattern-based event analysis for common failure scenarios
Built-in rules for Network, Identity, MDM, Apps, ESP diagnostics
Fix: Seed logic now updates existing rules when code definitions change
Agent - New Collectors:
Performance, Download Progress, Cert Validation, ESP UI State collectors
Gather Rule Executor with command allowlist enforcement
Remote Config Service for dynamic agent configuration
Session persistence across agent restarts
2026-02-06 18:46:58 +01:00
Oliver Kieselbach
665c9288fa
Add mass rollout simulator and tenant suspension features
...
- Agent: Add --simulator-mass-rollout mode for parallel device enrollment testing (5 devices across 3 tenants)
- Backend: Add tenant suspension/disable functionality with optional time-based auto-reactivation
- Backend: Add TenantAdminsService and new API endpoints for tenant configuration management
- Frontend: Extend admin configuration UI with tenant management features
2026-02-06 02:36:13 +01:00
Oliver Kieselbach
d7fdef39d6
agent session id persistence
2026-02-05 23:31:02 +01:00
Oliver Kieselbach
c2a7c28eec
more hardenings
2026-02-05 22:12:45 +01:00
Oliver Kieselbach
064319334d
Signing fix
2026-02-05 22:02:12 +01:00
Oliver Kieselbach
557dd22c53
Authentication & Galactic Admin: Implement JWT-based multi-tenant access control with cross-tenant support
...
Backend Changes:
- Fix user identification to use UPN (User Principal Name) claim as primary identifier instead of display name
- Add JWT authentication validation to all API endpoints with Authorization header support
- Implement Galactic Admin role with cross-tenant access permissions for sessions, events, and SignalR groups
- Add cross-tenant validation in GetSessionEventsFunction, SignalRAddToGroupFunction, and SignalRRemoveFromGroupFunction
- Enhance AuthenticationMiddleware to log actual user identifier (UPN) instead of display name
Admin Configuration:
- Add GetAdminConfigurationFunction and UpdateAdminConfigurationFunction for global settings
- Create AdminConfigurationService for managing platform-wide configuration
- Add AdminConfiguration model with global rate limiting and maintenance settings
- Restrict admin configuration access to Galactic Admins only
SignalR Real-time Updates:
- Implement "galactic-admins" SignalR group for cross-tenant session visibility
- RegisterSessionFunction now sends "newSession" events to both tenant-specific and galactic-admins groups
- IngestEventsFunction sends "newevents" only to tenant-specific groups (prevents flooding)
- Frontend listens to both "newSession" and "newevents" for real-time updates
- Galactic Admins see new sessions from all tenants without being flooded with event updates
Frontend Changes:
- Add Authorization headers with JWT tokens to all API fetch calls (sessions, events, metrics, configuration)
- Implement automatic joining/leaving of "galactic-admins" SignalR group based on Galactic Admin mode
- Handle both "newSession" and "newevents" SignalR events for complete session list updates
- Add authentication error handling with user notifications for token failures
Security Improvements:
- Validate tenant access for all cross-tenant operations
- Ensure users can only access their own tenant data unless they're Galactic Admins
- Log all cross-tenant access attempts with user identifiers for audit trail
2026-02-05 20:49:36 +01:00