fleet/server/authz
Victor Lyuboslavsky fc33df1981
Basic Android MDM on/off functionality (#26309)
For #26218 

Basic Android MDM on/off backend functionality. Manually tested.

The following env vars must be set:
```
FLEET_DEV_ANDROID_ENABLED=1
FLEET_DEV_ANDROID_SERVICE_CREDENTIALS=$(cat credentials.json)
FLEET_DEV_ANDROID_PUBSUB_TOPIC=projects/your-project/topics/your-topic
```

I picked https://github.com/go-json-experiment/json as the JSON library,
which seems like the safest option.
- will become json/v2 at some point
- currently used in production by other companies, like Tailscale
- well-maintained
- Some context here: https://github.com/fleetdm/fleet/issues/25512

Plan for next work:
- refactoring from 1st PR
- add pubsub with device enroll -> spec proxy for fleetdm.com
- come back to this sub-task to add tests and finish TODOs

# Checklist for submitter

- [x] Added/updated automated tests
- [x] Manual QA for all new/changed functionality
2025-02-18 09:43:11 -06:00
..
authz.go Bump go to 1.19.1 (#7690) 2022-09-12 20:32:43 -03:00
errors.go Fixes to /fleet/queries/run endpoint (#14909) 2023-11-06 11:03:42 -06:00
policy.rego Basic Android MDM on/off functionality (#26309) 2025-02-18 09:43:11 -06:00
policy_test.go Allow gitops users to run MDM commands (#23308) 2024-10-30 11:00:06 -05:00
policy_test.rego Add authorization checks in service (#938) 2021-06-03 16:24:15 -07:00