fleet/server/mdm/apple
Magnus Jensen d4f48b6f9c
ACME MDM -> main (#42926)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** The entire ACME feature branch merge

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements), JS
inline code is prevented especially for url redirects, and untrusted
data interpolated into shell scripts/commands is validated against shell
metacharacters.
- [x] Timeouts are implemented and retries are limited to avoid infinite
loops

## Testing

- [x] Added/updated automated tests
- [x] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)

- [x] QA'd all new/changed functionality manually

---------

Co-authored-by: Jordan Montgomery <elijah.jordan.montgomery@gmail.com>
Co-authored-by: Martin Angers <martin.n.angers@gmail.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-authored-by: Gabriel Hernandez <ghernandez345@gmail.com>
Co-authored-by: Sarah Gillespie <73313222+gillespi314@users.noreply.github.com>
2026-04-02 15:56:31 -05:00
..
apple_apps Expose VPP metadata bearer token as public config, interact directly with Apple when set (#38817) 2026-01-27 16:50:40 -06:00
appmanifest Additional CA validation (#27169) 2025-03-19 08:27:55 -05:00
gdmf Update DEP enrollment flow to apply minimum macOS version check when specified (#40720) 2026-03-12 16:54:46 -05:00
mobileconfig Experimental fleet server config for custom updates & disk encryption settings (#34598) 2025-10-22 13:51:10 -04:00
rootcert Added Apple Root Cert for gdmf request. (#27483) 2025-03-24 19:26:36 -05:00
vpp Preserve request body when retrying AssociateAssets request (#40515) 2026-03-02 10:08:00 -03:00
apple_bm.go Next set of slog migration changes for MDM (#39981) 2026-02-19 11:40:52 -06:00
apple_mdm.go ACME MDM -> main (#42926) 2026-04-02 15:56:31 -05:00
apple_mdm_external_test.go Next set of slog migration changes for MDM (#39981) 2026-02-19 11:40:52 -06:00
apple_mdm_test.go Backend: Auto rotate recovery lock passwords (#42084) 2026-03-26 12:12:41 -06:00
AppleIphoneDeviceCA.cer implement OTA enrollment (#21942) 2024-09-10 16:52:17 -03:00
cert.go Add SCEP endpoint for host identity. (#30589) 2025-07-11 11:44:07 -03:00
commander.go Rotate recovery lock password (#41833) 2026-03-17 16:28:25 -06:00
commander_test.go Set recovery lock password - mdm commands (#41217) 2026-03-12 06:06:56 -06:00
deviceinfo.go Only allow FLEET_DEV_* env vars when --dev is passed, allow overriding configs one at a time in dev (#38652) 2026-01-27 14:32:56 -06:00
profile_matcher.go Fix attempt for TestFleetDesktopSettingsBrowserAlternativeHost flaky test (#40793) 2026-03-02 13:57:34 -03:00
profile_matcher_test.go Error on signed configuration profiles (#33341) 2025-09-25 14:50:48 +03:00
profile_processor.go Throttle CA access through MDM (#42114) 2026-03-23 09:04:55 -05:00
profile_processor_test.go speed up macOS profile delivery for initial enrollments (#41960) 2026-03-19 14:58:10 -05:00
profile_verifier.go Increased Apple retry from 1 to 3. (#42331) 2026-03-26 11:29:20 -05:00
profile_verifier_test.go Increased Apple retry from 1 to 3. (#42331) 2026-03-26 11:29:20 -05:00
util.go Clear Recovery Lock Password (#41526) 2026-03-16 18:07:40 -06:00
util_test.go Clear Recovery Lock Password (#41526) 2026-03-16 18:07:40 -06:00