mirror of
https://github.com/fleetdm/fleet
synced 2026-04-21 21:47:20 +00:00
cfe9657f75
#19152 `fleetctl gitops --dry-run` now errors on duplicate (or conflicting) global/team enroll secrets. - One check is done on the backend to check against existing secrets - Another check is done in fleetctl to detect duplicate secrets coming in # Checklist for submitter - [x] Changes file added for user-visible changes in `changes/`, `orbit/changes/` or `ee/fleetd-chrome/changes`. See [Changes files](https://fleetdm.com/docs/contributing/committing-changes#changes-files) for more information. - [x] Added/updated tests - [x] Manual QA for all new/changed functionality
58 lines
2.3 KiB
Go
58 lines
2.3 KiB
Go
package service
|
|
|
|
import (
|
|
"github.com/fleetdm/fleet/v4/server/fleet"
|
|
"github.com/fleetdm/fleet/v4/server/version"
|
|
)
|
|
|
|
// ApplyAppConfig sends the application config to be applied to the Fleet instance.
|
|
func (c *Client) ApplyAppConfig(payload interface{}, opts fleet.ApplySpecOptions) error {
|
|
verb, path := "PATCH", "/api/latest/fleet/config"
|
|
var responseBody appConfigResponse
|
|
return c.authenticatedRequestWithQuery(payload, verb, path, &responseBody, opts.RawQuery())
|
|
}
|
|
|
|
// ApplyNoTeamProfiles sends the list of profiles to be applied for the hosts
|
|
// in no team.
|
|
func (c *Client) ApplyNoTeamProfiles(profiles []fleet.MDMProfileBatchPayload, opts fleet.ApplySpecOptions, assumeEnabled bool) error {
|
|
verb, path := "POST", "/api/latest/fleet/mdm/profiles/batch"
|
|
query := opts.RawQuery()
|
|
if assumeEnabled {
|
|
if query != "" {
|
|
query += "&"
|
|
}
|
|
query += "assume_enabled=true"
|
|
}
|
|
return c.authenticatedRequestWithQuery(map[string]interface{}{"profiles": profiles}, verb, path, nil, query)
|
|
}
|
|
|
|
// GetAppConfig fetches the application config from the server API
|
|
func (c *Client) GetAppConfig() (*fleet.EnrichedAppConfig, error) {
|
|
verb, path := "GET", "/api/latest/fleet/config"
|
|
var responseBody fleet.EnrichedAppConfig
|
|
err := c.authenticatedRequest(nil, verb, path, &responseBody)
|
|
return &responseBody, err
|
|
}
|
|
|
|
// GetEnrollSecretSpec fetches the enroll secrets stored on the server
|
|
func (c *Client) GetEnrollSecretSpec() (*fleet.EnrollSecretSpec, error) {
|
|
verb, path := "GET", "/api/latest/fleet/spec/enroll_secret"
|
|
var responseBody getEnrollSecretSpecResponse
|
|
err := c.authenticatedRequest(nil, verb, path, &responseBody)
|
|
return responseBody.Spec, err
|
|
}
|
|
|
|
// ApplyEnrollSecretSpec applies the enroll secrets.
|
|
func (c *Client) ApplyEnrollSecretSpec(spec *fleet.EnrollSecretSpec, opts fleet.ApplySpecOptions) error {
|
|
req := applyEnrollSecretSpecRequest{Spec: spec}
|
|
verb, path := "POST", "/api/latest/fleet/spec/enroll_secret"
|
|
var responseBody applyEnrollSecretSpecResponse
|
|
return c.authenticatedRequestWithQuery(req, verb, path, &responseBody, opts.RawQuery())
|
|
}
|
|
|
|
func (c *Client) Version() (*version.Info, error) {
|
|
verb, path := "GET", "/api/latest/fleet/version"
|
|
var responseBody versionResponse
|
|
err := c.authenticatedRequest(nil, verb, path, &responseBody)
|
|
return responseBody.Info, err
|
|
}
|