mirror of
https://github.com/fleetdm/fleet
synced 2026-05-23 08:58:41 +00:00
ab4c505f4b
#13832 For macOS hosts, fleetd now stores and retrieves enroll secret from macOS keychain. - this feature must use the official signed and notarized version of fleetd - for contributors, this feature can disabled with either: - fleetctl package flag: --disable-keystore - fleetd runtime flag: --disable-keystore This feature does not cover the MDM usecase where enroll secret is stored in the MDM profile. This usecase will hopefully be worked on next sprint with the MDM team. For Windows hosts, fleetd now stores and retrieves enroll secret from Windows Credential Manager. # Checklist for submitter If some of the following don't apply, delete the relevant line. <!-- Note that API documentation changes are now addressed by the product design team. --> - [x] Changes file added for user-visible changes in `changes/` or `orbit/changes/`. See [Changes files](https://fleetdm.com/docs/contributing/committing-changes#changes-files) for more information. - [x] Added/updated tests - [x] Manual QA for all new/changed functionality - For Orbit and Fleet Desktop changes: - [x] Manual QA must be performed in the three main OSs, macOS, Windows and Linux. - [x] Auto-update manual QA, from released version of component to new version (see [tools/tuf/test](../tools/tuf/test/README.md)).
29 lines
854 B
Go
29 lines
854 B
Go
//go:build !(darwin && cgo) && !windows
|
|
|
|
package keystore
|
|
|
|
import "errors"
|
|
|
|
func Supported() bool {
|
|
return false
|
|
}
|
|
|
|
func Name() string {
|
|
return "not implemented"
|
|
}
|
|
|
|
// AddSecret will add a secret to the keychain. This secret can be retrieved by this application without any user authorization.
|
|
func AddSecret(secret string) error {
|
|
return errors.New("not implemented")
|
|
}
|
|
|
|
// UpdateSecret will update a secret in the keychain. This secret can be retrieved by this application without any user authorization.
|
|
func UpdateSecret(secret string) error {
|
|
return errors.New("not implemented")
|
|
}
|
|
|
|
// GetSecret will retrieve a secret from the keychain. If the secret was added by user or another application,
|
|
// then this application needs to be authorized to retrieve the secret.
|
|
func GetSecret() (string, error) {
|
|
return "", errors.New("not implemented")
|
|
}
|