mirror of
https://github.com/fleetdm/fleet
synced 2026-04-21 21:47:20 +00:00
7450f0da7e
For #30095. #32482 is additional cleanup. Merging this to unblock orchestration Linux setup experience work. Code has already been reviewed prior to merging into the feature branch. --------- Co-authored-by: Konstantin Sykulev <konst@sykulev.com> Co-authored-by: Anthony Maxwell <133805840+Illbjorn@users.noreply.github.com>
78 lines
2.2 KiB
YAML
78 lines
2.2 KiB
YAML
name: Team1
|
|
team_settings:
|
|
path: ./team-settings.yml
|
|
agent_options:
|
|
path: ./agent-options.yml
|
|
controls:
|
|
path: ./controls.yml
|
|
labels:
|
|
- name: a
|
|
description: A cool global label
|
|
query: SELECT 1 FROM osquery_info
|
|
label_membership_type: dynamic
|
|
queries:
|
|
- path: ./top.queries.yml
|
|
- path: ./empty.yml
|
|
- name: osquery_info
|
|
query: SELECT * from osquery_info;
|
|
interval: 604800 # 1 week
|
|
platform: darwin,linux,windows,chrome
|
|
min_osquery_version: all
|
|
observer_can_run: false
|
|
automations_enabled: true
|
|
logging: snapshot
|
|
policies:
|
|
- path: ./policies/policies.yml
|
|
- path: ./policies/policies2.yml
|
|
- path: ./empty.yml
|
|
- name: 😊😊 Failing $POLICY
|
|
platform: linux
|
|
description: This policy should always fail.
|
|
resolution: There is no resolution for this policy.
|
|
query: SELECT 1 FROM osquery_info WHERE start_time < 0;
|
|
- path: ./team_install_software.policies.yml
|
|
- name: Slack on macOS is installed
|
|
platform: darwin
|
|
query: SELECT 1 FROM apps WHERE name = 'Slack.app';
|
|
install_software:
|
|
app_store_id: "123456"
|
|
- name: Script run policy
|
|
platform: linux
|
|
description: This should run a script on failure
|
|
query: SELECT * from osquery_info;
|
|
run_script:
|
|
path: ./lib/collect-fleetd-logs.sh
|
|
- path: ./policies/script-policy.yml
|
|
software:
|
|
app_store_apps:
|
|
- app_store_id: "123456"
|
|
packages:
|
|
- path: ./microsoft-teams.pkg.software.yml
|
|
labels_include_any:
|
|
- a
|
|
categories:
|
|
- Productivity
|
|
- Communication
|
|
- url: https://ftp.mozilla.org/pub/firefox/releases/129.0.2/mac/en-US/Firefox%20129.0.2.pkg
|
|
self_service: true
|
|
labels_exclude_any:
|
|
- a
|
|
fleet_maintained_apps:
|
|
- slug: slack/darwin
|
|
self_service: true
|
|
categories:
|
|
- Productivity
|
|
- Communication
|
|
- slug: box-drive/windows
|
|
install_script:
|
|
path: ./lib/install.sh
|
|
uninstall_script:
|
|
path: ./lib/uninstall-box.sh
|
|
post_install_script:
|
|
path: ./lib/post-install.sh
|
|
pre_install_query:
|
|
path: ./lib/preinstall-query.yml
|
|
self_service: true
|
|
categories:
|
|
- Productivity
|
|
- Developer tools
|