mirror of
https://github.com/fleetdm/fleet
synced 2026-04-21 21:47:20 +00:00
d4f48b6f9c
<!-- Add the related story/sub-task/bug number, like Resolves #123, or remove if NA --> **Related issue:** The entire ACME feature branch merge # Checklist for submitter If some of the following don't apply, delete the relevant line. - [x] Changes file added for user-visible changes in `changes/`, `orbit/changes/` or `ee/fleetd-chrome/changes`. See [Changes files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files) for more information. - [x] Input data is properly validated, `SELECT *` is avoided, SQL injection is prevented (using placeholders for values in statements), JS inline code is prevented especially for url redirects, and untrusted data interpolated into shell scripts/commands is validated against shell metacharacters. - [x] Timeouts are implemented and retries are limited to avoid infinite loops ## Testing - [x] Added/updated automated tests - [x] Where appropriate, [automated tests simulate multiple hosts and test for host isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing) (updates to one hosts's records do not affect another) - [x] QA'd all new/changed functionality manually --------- Co-authored-by: Jordan Montgomery <elijah.jordan.montgomery@gmail.com> Co-authored-by: Martin Angers <martin.n.angers@gmail.com> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> Co-authored-by: Gabriel Hernandez <ghernandez345@gmail.com> Co-authored-by: Sarah Gillespie <73313222+gillespi314@users.noreply.github.com>
287 lines
No EOL
7.9 KiB
JSON
287 lines
No EOL
7.9 KiB
JSON
{
|
|
"update_interval": {
|
|
"osquery_detail": 3600000000000,
|
|
"osquery_policy": 3600000000000
|
|
},
|
|
"vulnerabilities": {
|
|
"databases_path": "/home/fleet",
|
|
"periodicity": 3600000000000,
|
|
"cpe_database_url": "",
|
|
"cpe_translations_url": "",
|
|
"cve_feed_prefix_url": "",
|
|
"current_instance_checks": "auto",
|
|
"disable_data_sync": false,
|
|
"recent_vulnerability_max_age": 2592000000000000,
|
|
"disable_win_os_vulnerabilities": false
|
|
},
|
|
"license": {
|
|
"tier": "premium",
|
|
"organization": "fleet",
|
|
"device_count": 1000000,
|
|
"expiration": "2031-10-16T00:00:00Z",
|
|
"note": "dogfood env license"
|
|
},
|
|
"logging": {
|
|
"debug": true,
|
|
"json": true,
|
|
"result": {
|
|
"plugin": "firehose",
|
|
"config": {
|
|
"region": "us-east-2",
|
|
"status_stream": "osquery_status",
|
|
"result_stream": "osquery_results",
|
|
"audit_stream": "fleet_audit"
|
|
}
|
|
},
|
|
"status": {
|
|
"plugin": "firehose",
|
|
"config": {
|
|
"region": "us-east-2",
|
|
"status_stream": "osquery_status",
|
|
"result_stream": "osquery_results",
|
|
"audit_stream": "fleet_audit"
|
|
}
|
|
},
|
|
"audit": {
|
|
"plugin": "firehose",
|
|
"config": {
|
|
"region": "us-east-2",
|
|
"status_stream": "osquery_status",
|
|
"result_stream": "osquery_results",
|
|
"audit_stream": "fleet_audit"
|
|
}
|
|
}
|
|
},
|
|
"email": {
|
|
"backend": "ses",
|
|
"config": {
|
|
"region": "",
|
|
"source_arn": "some-ses-arn"
|
|
}
|
|
},
|
|
"org_info": {
|
|
"org_name": "Fleet",
|
|
"org_logo_url": "http://some-org-logo-url.com",
|
|
"org_logo_url_light_background": "http://some-org-logo-url-light-background.com",
|
|
"contact_url": "https://fleetdm.com/company/contact"
|
|
},
|
|
"server_settings": {
|
|
"server_url": "https://dogfood.fleetdm.com",
|
|
"live_query_disabled": false,
|
|
"enable_analytics": true,
|
|
"debug_host_ids": [
|
|
1,
|
|
3
|
|
],
|
|
"deferred_save_host": false,
|
|
"query_reports_disabled": false,
|
|
"scripts_disabled": false,
|
|
"ai_features_disabled": false,
|
|
"query_report_cap": 1
|
|
},
|
|
"smtp_settings": {
|
|
"enable_smtp": false,
|
|
"configured": false,
|
|
"sender_address": "",
|
|
"server": "localhost",
|
|
"port": 587,
|
|
"authentication_type": "authtype_username_password",
|
|
"user_name": "",
|
|
"password": "",
|
|
"enable_ssl_tls": false,
|
|
"authentication_method": "authmethod_plain",
|
|
"domain": "",
|
|
"verify_ssl_certs": false,
|
|
"enable_start_tls": false
|
|
},
|
|
"host_expiry_settings": {
|
|
"host_expiry_enabled": false,
|
|
"host_expiry_window": 59995
|
|
},
|
|
"activity_expiry_settings": {
|
|
"activity_expiry_enabled": false,
|
|
"activity_expiry_window": 30
|
|
},
|
|
"features": {
|
|
"enable_host_users": true,
|
|
"enable_software_inventory": true,
|
|
"additional_queries": {
|
|
"time": "SELECT * FROM time",
|
|
"macs": "SELECT mac FROM interface_details"
|
|
},
|
|
"detail_query_overrides": {
|
|
"users": null,
|
|
"mdm": "SELECT enrolled, server_url, installed_from_dep, payload_identifier FROM mdm;"
|
|
}
|
|
},
|
|
"agent_options": {
|
|
"config": {
|
|
"options": {
|
|
"pack_delimiter": "/",
|
|
"logger_tls_period": 10,
|
|
"distributed_plugin": "tls",
|
|
"disable_distributed": false,
|
|
"logger_tls_endpoint": "/api/osquery/log",
|
|
"distributed_interval": 10,
|
|
"distributed_tls_max_attempts": 3
|
|
},
|
|
"decorators": {
|
|
"load": [
|
|
"SELECT uuid AS host_uuid FROM system_info;",
|
|
"SELECT hostname AS hostname FROM system_info;"
|
|
]
|
|
}
|
|
}
|
|
},
|
|
"sso_settings": {
|
|
"entity_id": "dogfood.fleetdm.com",
|
|
"issuer_uri": "https://some-sso-issuer-uri.com",
|
|
"metadata": "some-sso-metadata",
|
|
"metadata_url": "http://some-sso-metadata-url.com",
|
|
"idp_name": "some-idp-name",
|
|
"idp_image_url": "http://some-sso-idp-image-url.com",
|
|
"enable_sso": true,
|
|
"enable_sso_idp_login": false,
|
|
"enable_jit_provisioning": true,
|
|
"enable_jit_role_sync": false,
|
|
"sso_server_url": "https://sso.fleetdm.com"
|
|
},
|
|
"fleet_desktop": {
|
|
"transparency_url": "https://fleetdm.com/transparency",
|
|
"alternative_browser_host": "musica.alternativa"
|
|
},
|
|
"vulnerability_settings": {
|
|
"databases_path": ""
|
|
},
|
|
"webhook_settings": {
|
|
"activities_webhook": {
|
|
"enable_activities_webhook": true,
|
|
"destination_url": "https://some-activities-webhook-url.com"
|
|
},
|
|
"host_status_webhook": {
|
|
"enable_host_status_webhook": true,
|
|
"destination_url": "https://some-host-status-webhook-url.com",
|
|
"host_percentage": 20,
|
|
"days_count": 5
|
|
},
|
|
"failing_policies_webhook": {
|
|
"enable_failing_policies_webhook": true,
|
|
"destination_url": "https://some-failing-policies-webhook-url.com",
|
|
"policy_ids": [],
|
|
"host_batch_size": 2
|
|
},
|
|
"vulnerabilities_webhook": {
|
|
"enable_vulnerabilities_webhook": true,
|
|
"destination_url": "https://some-vulerabilities-webhook-url.com",
|
|
"host_batch_size": 3
|
|
},
|
|
"interval": "6h0m0s"
|
|
},
|
|
"integrations": {
|
|
"jira": [
|
|
{
|
|
"url": "https://some-jira-url.com",
|
|
"username": "some-jira-username",
|
|
"api_token": "some-jira-api-token",
|
|
"project_key": "some-jira-project-key"
|
|
}
|
|
],
|
|
"zendesk": [
|
|
{
|
|
"url": "https://some-zendesk-url.com",
|
|
"email": "some-zendesk-email@example.com",
|
|
"api_token": "some-zendesk-api-token",
|
|
"group_id": 123456789
|
|
}
|
|
],
|
|
"conditional_access_enabled": true,
|
|
"google_calendar": [
|
|
{
|
|
"domain": "fleetdm.com",
|
|
"api_key_json": {
|
|
"owl": "hoot"
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"mdm": {
|
|
"apple_server_url": "http://some-apple-server-url.com",
|
|
"apple_business_manager": [
|
|
{
|
|
"organization_name": "Fleet Device Management Inc.",
|
|
"macos_team": "💻 Workstations",
|
|
"ios_team": "📱🏢 Company-owned mobile devices",
|
|
"ipados_team": "📱🏢 Company-owned mobile devices"
|
|
}
|
|
],
|
|
"apple_bm_enabled_and_configured": true,
|
|
"apple_bm_terms_expired": false,
|
|
"enabled_and_configured": true,
|
|
"macos_updates": {
|
|
"minimum_version": "15.1",
|
|
"deadline": "2024-12-31",
|
|
"update_new_hosts": true
|
|
},
|
|
"ios_updates": {
|
|
"minimum_version": "18.1",
|
|
"deadline": "2025-12-31"
|
|
},
|
|
"ipados_updates": {
|
|
"minimum_version": "18.2",
|
|
"deadline": "2026-12-31"
|
|
},
|
|
"windows_updates": {
|
|
"deadline_days": 5,
|
|
"grace_period_days": 2
|
|
},
|
|
"macos_settings": {
|
|
"custom_settings": null
|
|
},
|
|
"macos_setup": {
|
|
"enable_end_user_authentication": true,
|
|
"macos_setup_assistant": "",
|
|
"enable_release_device_manually": false,
|
|
"script": "",
|
|
"software": []
|
|
},
|
|
"macos_migration": {
|
|
"enable": true,
|
|
"mode": "voluntary",
|
|
"webhook_url": "https://some-macos-migration-webhook-url.com"
|
|
},
|
|
"windows_migration_enabled": true,
|
|
"enable_turn_on_windows_mdm_manually": false,
|
|
"windows_entra_tenant_ids": [
|
|
"5b84b6dd-d257-415e-b8b4-0240666ba4d4",
|
|
"9d30f55f-d117-4574-acf0-ff593e3e06e3"
|
|
],
|
|
"apple_require_hardware_attestation": false,
|
|
"end_user_authentication": {
|
|
"entity_id": "some-mdm-entity-id.com",
|
|
"issuer_uri": "https://some-mdm-issuer-uri.com",
|
|
"metadata": "some-mdm-metadata",
|
|
"metadata_url": "http://some-mdm-metadata-url.com",
|
|
"idp_name": "some-other-idp-name"
|
|
},
|
|
"windows_enabled_and_configured": true,
|
|
"enable_disk_encryption": true,
|
|
"windows_settings": {
|
|
"custom_settings": []
|
|
},
|
|
"volume_purchasing_program": null,
|
|
"android_enabled_and_configured": true,
|
|
"android_settings": {
|
|
"custom_settings": []
|
|
}
|
|
},
|
|
"gitops": {
|
|
"gitops_mode_enabled": false,
|
|
"repository_url": "https://github.com/fleetdm/fleet/tree/main/it-and-security",
|
|
"exceptions": {
|
|
"labels": false,
|
|
"software": false,
|
|
"secrets": false
|
|
}
|
|
},
|
|
"scripts": []
|
|
} |