fleet/server/mdm
Ian Littman 8509b18c46
🤖 Add fallback for FMA manifest URL pulls (#43312)
**Related issue:** Resolves #42754

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements), JS
inline code is prevented especially for url redirects, and untrusted
data interpolated into shell scripts/commands is validated against shell
metacharacters.

## Testing

- [x] Added/updated automated tests

- [x] QA'd all new/changed functionality manually

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **Bug Fixes**
* Improved app manifest retrieval with automatic fallback to hosted
copies when the primary source is unavailable, reducing sync failures.

* **Documentation**
* Clarified that Fleet will fall back to hosted manifest copies if the
new manifest site is inaccessible.

* **New Features**
* Streamlined maintained-app synchronization to use a simpler sync
entrypoint and unified primary/fallback fetch logic.

* **Tests**
* Added comprehensive tests for primary/fallback fetch flows, error
handling, large-response truncation, and environment-based overrides.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2026-04-09 17:36:18 -05:00
..
acme Add a couple OTEL spans for key ACME operations (#42978) 2026-04-03 11:04:18 -05:00
android Android Wi-Fi profile withheld until cert installed on device (#42877) 2026-04-07 16:26:09 -05:00
apple Show configuration profile name and more fine-grained status (#42126) 2026-04-09 12:46:11 -05:00
assets Updated SQL modes in tests to match production. (#31445) 2025-08-03 08:18:13 +02:00
crypto Update nanomdm dependency with latest bug fixes and improvements. (#23906) 2024-11-20 11:47:11 -06:00
cryptoutil Refactoring crypto code for future reuse. (#25148) 2025-01-07 16:14:12 -06:00
internal/commonmdm friday tidy up party (#18106) 2024-04-08 08:42:42 -03:00
lifecycle reset MDM enrollment if SCEP renewal but awaiting configuration (#41881) 2026-03-17 15:31:08 -05:00
linux Linux Encryption Docs (#23622) 2024-12-10 08:26:46 -07:00
maintainedapps 🤖 Add fallback for FMA manifest URL pulls (#43312) 2026-04-09 17:36:18 -05:00
microsoft SyncML <Delete> Windows profiles (#42206) 2026-03-26 18:25:54 -05:00
nanodep Rename Apple Business Manager in UI (#42584) 2026-04-08 11:14:19 -06:00
nanomdm Show configuration profile name and more fine-grained status (#42126) 2026-04-09 12:46:11 -05:00
profiles Added support for NDES CA for Windows hosts (#41356) 2026-03-12 15:36:44 -05:00
scep ACME MDM -> main (#42926) 2026-04-02 15:56:31 -05:00
testing_utils Update DEP enrollment flow to apply minimum macOS version check when specified (#40720) 2026-03-12 16:54:46 -05:00
mdm.go Increased Apple retry from 1 to 3. (#42331) 2026-03-26 11:29:20 -05:00
mdm_test.go Feature branch for Android config profiles (#32976) 2025-09-22 11:29:57 -04:00