-
Notifications
You must be signed in to change notification settings - Fork 14
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Update README and simplify files for first time Fleet users (#38)
- Simplify files - Update default.yml
- Loading branch information
1 parent
4bc658c
commit e4b2020
Showing
5 changed files
with
34 additions
and
130 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,58 +1,16 @@ | ||
| # For Fleet Free, this file updates queries, policies, controls, and agent options for all hosts. | ||
| # For Fleet Free, this file updates policies, queries, agent_options, and controls for all hosts. | ||
|
|
||
| # For Fleet Premium, the default.yml file updates queries and policies that run on all hosts ("All teams"). Controls and agent options are updated for hosts on "No team." | ||
| # For Fleet Premium, the default.yml file updates policies and queries that run on all hosts ("All teams"). Controls and agent options are updated for hosts on "No team." | ||
|
|
||
| controls: # Controls added to "No team" | ||
| macos_settings: | ||
| custom_settings: | ||
| - path: ./lib/macos-password.mobileconfig | ||
| # - path: ../lib/macos-os-updates.ddm.json (DDM coming soon) | ||
| windows_enabled_and_configured: true | ||
| windows_settings: | ||
| custom_settings: | ||
| - path: ./lib/windows-screenlock.xml | ||
| scripts: | ||
| - path: ./lib/collect-fleetd-logs.sh | ||
| queries: | ||
| - path: ./lib/collect-fleetd-update-channels.queries.yml | ||
| policies: | ||
| queries: | ||
| agent_options: | ||
| path: ./lib/agent-options.yml | ||
| controls: | ||
| org_settings: | ||
| server_settings: | ||
| debug_host_ids: | ||
| - 1 | ||
| - 3 | ||
| enable_analytics: true | ||
| live_query_disabled: false | ||
| query_reports_disabled: false | ||
| scripts_disabled: false | ||
| server_url: https://dogfood.fleetdm.com | ||
| server_url: $FLEET_URL | ||
| org_info: | ||
| contact_url: https://fleetdm.com/company/contact | ||
| org_logo_url: "" | ||
| org_logo_url_light_background: "" | ||
| org_name: Fleet Device Management | ||
| smtp_settings: | ||
| sso_settings: | ||
| enable_jit_provisioning: false | ||
| enable_jit_role_sync: false | ||
| enable_sso: true | ||
| enable_sso_idp_login: false | ||
| idp_name: Google Workspace | ||
| entity_id: dogfood.fleetdm.com | ||
| metadata: $FLEET_SSO_METADATA | ||
| integrations: | ||
| mdm: | ||
| apple_bm_default_team: | ||
| webhook_settings: | ||
| vulnerabilities_webhook: | ||
| enable_vulnerabilities_webhook: true | ||
| destination_url: https://example.tines.com/webhook | ||
| fleet_desktop: # Applies to Fleet Premium only | ||
| transparency_url: https://fleetdm.com/transparency | ||
| host_expiry_settings: # Applies to all teams | ||
| host_expiry_enabled: false | ||
| features: # Features added to all teams | ||
| secrets: # These secrets are used to enroll hosts to the "All teams" team | ||
| org_name: Fleet | ||
| secrets: | ||
| - secret: "$FLEET_GLOBAL_ENROLL_SECRET" |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,46 +1,23 @@ | ||
| # Only available in Fleet Premium. | ||
| # Teams are available in Fleet Premium. | ||
|
|
||
| #This file updates controls, queries, policies, and agent options for assigned to the "Workstations (canary)" team. | ||
| # This file updates controls, queries, policies, and agent options for assigned to the "Workstations (canary)" team. | ||
|
|
||
| # To create and update another team, create another file in the teams/ directory and copy and paste the contents from this file. | ||
| # To add another team, create a new file in the teams/ directory and copy and paste the contents from this file. | ||
|
|
||
| name: Workstations (canary) | ||
| controls: | ||
| enable_disk_encryption: true | ||
| macos_updates: | ||
| deadline: "2023-08-11" | ||
| minimum_version: "13.5" | ||
| windows_updates: | ||
| deadline_days: 5 | ||
| grace_period_days: 2 | ||
| macos_settings: | ||
| custom_settings: | ||
| # - path: ../lib/macos-os-updates.ddm.json (DDM coming soon) | ||
| - path: ../lib/macos-password.mobileconfig | ||
| windows_settings: | ||
| custom_settings: | ||
| - path: ../lib/windows-screenlock.xml | ||
| macos_setup: | ||
| # bootstrap_package: https://github.com/organinzation/repository/bootstrap-package.pkg (Example URL) | ||
| # enable_end_user_authentication: true | ||
| macos_setup_assistant: ../lib/automatic-enrollment.dep.json | ||
| scripts: | ||
| - path: ../lib/remove-zoom-artifacts.script.sh | ||
| - path: ../lib/set-timezone.script.sh | ||
| queries: | ||
| - path: ../lib/collect-usb-devices.queries.yml | ||
| - path: ../lib/collect-failed-login-attempts.queries.yml | ||
| - name: Collect fleetd update channels | ||
| description: "Collects the update channels for all fleetd components: osquery, Orbit, and Fleet Desktop. To see which version number each channel is on, ask in #help-engineering." | ||
| query: SELECT desktop_channel, orbit_channel, osqueryd_channel FROM orbit_info; | ||
| interval: 300 | ||
| observer_can_run: true | ||
| automations_enabled: false | ||
| policies: | ||
| - path: ../lib/macos-device-health.policies.yml | ||
| - path: ../lib/windows-device-health.policies.yml | ||
| - path: ../lib/linux-device-health.policies.yml | ||
| queries: | ||
| - path: ../lib/collect-usb-devices.queries.yml | ||
| - path: ../lib/collect-failed-login-attempts.queries.yml | ||
| agent_options: | ||
| path: ../lib/agent-options.yml | ||
| controls: | ||
| scripts: | ||
| - path: ../lib/remove-zoom-artifacts.script.sh | ||
| - path: ../lib/set-timezone.script.sh | ||
| team_settings: | ||
| secrets: | ||
| - secret: "$FLEET_WORKSTATIONS_CANARY_ENROLL_SECRET" |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,40 +1,23 @@ | ||
| # Only available in Fleet Premium. | ||
|
|
||
| #This file updates controls, queries, policies, and agent options for assigned to the "Workstations" team. | ||
| # This file updates policies, queries, agent options, and controls for assigned to the "Workstations" team. | ||
|
|
||
| # To create and update another team, create another file in the teams/ directory and copy and paste the contents from this file. | ||
| # To add another team, create a new file in the teams/ directory and copy and paste the contents from this file. | ||
|
|
||
| name: Workstations | ||
| controls: | ||
| enable_disk_encryption: true | ||
| macos_updates: | ||
| deadline: "2023-08-11" | ||
| minimum_version: "13.5" | ||
| windows_updates: | ||
| deadline_days: 5 | ||
| grace_period_days: 2 | ||
| macos_settings: | ||
| custom_settings: | ||
| # - path: ../lib/macos-os-updates.ddm.json (DDM coming soon) | ||
| - path: ../lib/macos-password.mobileconfig | ||
| windows_settings: | ||
| custom_settings: | ||
| - path: ../lib/windows-screenlock.xml | ||
| macos_setup: | ||
| # bootstrap_package: https://github.com/organinzation/repository/bootstrap-package.pkg (example URL) | ||
| # enable_end_user_authentication: true | ||
| macos_setup_assistant: ../lib/automatic-enrollment.dep.json | ||
| scripts: | ||
| - path: ../lib/remove-zoom-artifacts.script.sh | ||
| - path: ../lib/set-timezone.script.sh | ||
| queries: | ||
| - path: ../lib/collect-usb-devices.queries.yml | ||
| - path: ../lib/collect-failed-login-attempts.queries.yml | ||
| policies: | ||
| - path: ../lib/macos-device-health.policies.yml | ||
| - path: ../lib/windows-device-health.policies.yml | ||
| - path: ../lib/linux-device-health.policies.yml | ||
| queries: | ||
| - path: ../lib/collect-usb-devices.queries.yml | ||
| - path: ../lib/collect-failed-login-attempts.queries.yml | ||
| agent_options: | ||
| path: ../lib/agent-options.yml | ||
| controls: | ||
| scripts: | ||
| - path: ../lib/remove-zoom-artifacts.script.sh | ||
| - path: ../lib/set-timezone.script.sh | ||
| team_settings: | ||
| secrets: | ||
| - secret: "$FLEET_WORKSTATIONS_ENROLL_SECRET" |