In dogfood, collect expiration for MDM SCEP certificates (#17848)

- Add query that runs every 5 minutes to the workstations team
- Plan is to remove the query after the issue tracking renewing all SCEP
certs is closed: https://github.com/fleetdm/confidential/issues/4518
This commit is contained in:
Noah Talerman 2024-03-26 12:18:13 -04:00 committed by GitHub
parent 4271ca7fd6
commit 8f24649a08
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -61,3 +61,11 @@ queries:
- path: ../lib/collect-failed-login-attempts.queries.yml
- path: ../lib/collect-usb-devices.queries.yml
- path: ../lib/collect-vs-code-extensions.queries.yml
- name: Collect expiration date for MDM SCEP certificates
description: "For the following issue: https://github.com/fleetdm/confidential/issues/4518. Returns expiration date for macOS hosts's MDM SCEP certs."
query: "SELECT common_name, datetime(not_valid_after,'unixepoch') AS expires FROM certificates WHERE 'common_name' LIKE '%FleetDM Identity%';"
platform: darwin
interval: 300
automations_enabled: false
observer_can_run: true