fleet/tools
Victor Lyuboslavsky a23d24bf96
Allow configuring webhook policy automations for "No team" (#32129)
Fixes #32060 

This PR adds:
- new default_team_config_json table
- caching of config from that table, including deep copy methods -- all
of this is not absolutely needed for this change since we are only using
`webhook_settings.failing_policies_webhook` here but added for
completeness/future
- teams/0 API updates
- GitOps updates
- generate gitops updates

Future PRs will add:
- ticket automation
- primo mode migration
- frontend changes
- documentation

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)

## Testing

- [x] Added/updated automated tests
- [x] QA'd all new/changed functionality manually

## Database migrations

- [x] Checked table schema to confirm autoupdate

## New Fleet configuration settings

- [x] Verified that the setting is exported via `fleetctl
generate-gitops`
- [x] Verified that the setting is cleared on the server if it is not
supplied in a YAML file (or that it is documented as being optional)

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

- New Features
- Configure failing-policy webhooks for “No team” via GitOps
(no-team.yml) and API, including enable/disable, destination URL, policy
IDs, and batch size; settings clear when omitted.
- GitOps and CLI now read/apply the real “No team” settings with dry-run
support.
- Policy automation evaluates hosts without a team and triggers “No
team” webhooks when applicable.
  - GET/PATCH team 0 returns/accepts a minimal, webhook-focused config.

- Chores
- Added persistence and caching for the default “No team” configuration.
  - Introduced a database table to store the default configuration.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->

---------

Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
2025-08-28 16:38:27 -05:00
..
android Hook up Android fleetdm.com/proxy (#29645) 2025-06-12 19:42:15 -05:00
api Update small utility (#31026) 2025-07-23 12:07:43 -06:00
apm-elastic Organize contributor docs and establish ADR process and template (#29101) 2025-05-17 15:03:52 -05:00
app Fix SSO paths to always use /v1/ instead of /latest/ (#5246) 2022-04-20 12:46:45 -04:00
app-sso-platform Add app_sso_platform table to orbit and use table in Entra ID query ingestion (#30140) 2025-06-20 17:01:38 -03:00
backup_db Add script that backs up and restores DB when switching branches (#31197) 2025-08-06 13:34:51 -04:00
bomutils-docker Pin debian version to bookworm for fleetdm/fleetctl (#31828) 2025-08-13 12:52:27 -05:00
bump-migration Implement a tool to automate bumping a DB migration's timestamp (#30513) 2025-07-02 11:41:54 -04:00
calendar Updating golangci-lint to 1.61.0 (#22973) 2024-10-18 12:38:26 -05:00
ci Merge Android datastore into main Fleet datastore (#32233) 2025-08-25 11:41:28 -04:00
cis Script for comparing two CIS PDF files (#15307) 2023-12-06 09:21:12 -05:00
cloner-check Allow configuring webhook policy automations for "No team" (#32129) 2025-08-28 16:38:27 -05:00
custom-package-parser Improve .pkg metadata extraction for names and bundle IDs, let custom package metadata extraction tool check an entire directory at a time (#29249) 2025-05-19 10:32:36 -05:00
dbutils Merge Android datastore into main Fleet datastore (#32233) 2025-08-25 11:41:28 -04:00
desktop Move external dependency fleetdm/kolide-kit to monorepo (#15861) 2024-01-02 18:22:52 -03:00
dialog Removed indicator for background LUKS validation (#28218) 2025-04-16 12:25:41 -04:00
fdm FDM updates: fdm serve, snapshot/restore improvements (#27890) 2025-04-07 09:10:15 -05:00
file-server Switching systray dependency to one without glibc requirements (#14197) 2023-11-02 14:40:21 -05:00
fleet-docker Update alpine to patch vulnerability with severity "HIGH" (#26593) 2025-02-25 18:33:24 -03:00
fleetctl-docker Pin debian version to bookworm for fleetdm/fleetctl (#31828) 2025-08-13 12:52:27 -05:00
fleetctl-npm Adding changes for Fleet v4.72.0 (#31273) (#31975) 2025-08-15 12:31:18 -05:00
fleetd-linux Added fleetd docker images to test/develop linux fleetd features (#25027) 2024-12-27 16:16:39 -03:00
github-manage Reduce filesize of two large gifs to fix failing step of website deploy workflow. (#31765) 2025-08-08 17:37:18 -05:00
github-releases Iterate status.md for reporting vulnerability updates (#29062) 2025-05-15 21:15:37 -03:00
inspect-cert chore: remove refs to deprecated io/ioutil (#14485) 2023-10-27 15:28:54 -03:00
jira-integration Updating golangci-lint to 1.61.0 (#22973) 2024-10-18 12:38:26 -05:00
kubequery Move kubequery dependency to monorepo (#16027) 2024-01-11 08:30:26 -03:00
loadtest Prevent IT admins from deleting a secret variable in use (#32161) 2025-08-22 11:22:37 -03:00
luks add kdialog for kubuntu key escrow (#24405) 2024-12-05 08:44:16 -07:00
mailpit Fix SMTP e-mail send when SMTP server has credentials (#10758) 2023-03-28 15:23:15 -03:00
makefile-support Add help system to Makefile + FDM command (#25028) 2025-02-28 07:42:32 -06:00
mdm Update Go to 1.24.6 (#31784) 2025-08-12 08:10:05 -03:00
msal Microsoft Compliance Partner backend changes (#29540) 2025-06-11 14:22:46 -03:00
mysql-replica-testing MySQL 8.0 Migration (#20225) 2024-07-22 16:27:36 -04:00
nvd/nvdvuln Switch vulns cron false positive clear to clear vulns based on when the vulns run started, rather than based on periodicity (#31364) 2025-07-29 10:14:14 -05:00
oncall Updated oncall.sh to filter our draft PRs. (#28204) 2025-04-15 10:44:26 -05:00
osquery Remove unneeded exposed ports on osquery-in-a-box minio to avoid host-port conflicts (#30416) 2025-06-29 12:40:17 -05:00
osquery-agent-options Generate new osquery 5.18.1 flags, catch up VEX report (#31648) 2025-08-08 10:49:23 -03:00
osquery-testing 15135 remove atom package (#15410) 2023-12-04 14:26:26 -05:00
percona/test MySQL 8.0 Migration (#20225) 2024-07-22 16:27:36 -04:00
redis-stress Add redis stress (#3363) 2022-01-20 16:18:17 -03:00
redis-tests Bump go to 1.19.1 (#7690) 2022-09-12 20:32:43 -03:00
release Add arm64 support for fleetd extensions and fixes on test scripts (#31084) 2025-07-21 15:47:59 -03:00
run-scripts Implement script execution on the fleetd agent (disabled by default) (#13569) 2023-08-30 14:02:44 -04:00
saml Replace home-made SAML implementation with https://github.com/crewjam/saml (#28486) 2025-07-07 15:13:46 -03:00
seed_data/queries New tool: software package uploader (#30417) 2025-07-01 10:35:56 -06:00
sentry-self-hosted Fix stack trace of captured errors in Sentry, capture errors in more code paths (#16966) 2024-02-22 15:10:28 -03:00
sign-fleetctl Specify binary-identifier when signing fleetctl for macOS (#30374) 2025-07-01 10:38:15 -04:00
smtp4dev 14729 smtp settings validation for TLS (#15029) 2023-11-21 11:48:21 -07:00
snapshot Update Go to 1.24.6 (#31784) 2025-08-12 08:10:05 -03:00
software Support auto-install in package uploader tool (#31117) 2025-07-22 06:36:41 -06:00
team-builder Add team builder script (#10086) 2023-05-03 09:55:14 -07:00
telemetry Scope pending host profile rebuilds (#23772) 2024-11-15 11:55:30 -05:00
terraform Update Go to 1.24.6 (#31784) 2025-08-12 08:10:05 -03:00
test-certs Add fake certificates for testing TLS issues (#20390) 2024-07-16 13:21:39 -03:00
test-orbit-mtls Fixing SSL certificates to make them valid. (#16359) 2024-01-31 12:00:59 -06:00
test_extensions/hello_world Add arm64 support for fleetd extensions and fixes on test scripts (#31084) 2025-07-21 15:47:59 -03:00
testdata Add fixtures for software and vulnerabilities end-to-end tests (#6337) 2022-06-23 10:01:37 -05:00
tuf Add permanent errors to Fleet Desktop for TPM-backed httpsig work (#31220) 2025-07-24 19:06:04 -03:00
vex-parser Iterate status.md for reporting vulnerability updates (#29062) 2025-05-15 21:15:37 -03:00
webhook Additional changes to happy path and cleanup cron job (#17757) 2024-03-26 13:39:37 -05:00
windows-mdm-enroll Implement Windows MDM programmatic unenrollment (notification + orbit trigger) (#12505) 2023-06-28 09:13:37 -04:00
wix-docker Pin debian version to bookworm for fleetdm/fleetctl (#31828) 2025-08-13 12:52:27 -05:00
zendesk-integration Updating golangci-lint to 1.61.0 (#22973) 2024-10-18 12:38:26 -05:00
branch_snapshot.sh Add script that backs up and restores DB when switching branches (#31197) 2025-08-06 13:34:51 -04:00