empayre/fleet
14
0
Fork 0
mirror of https://github.com/empayre/fleet.git synced 2024-11-06 08:55:24 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Remove disable knex, install fleetctl, apply to workstations (#10757)

Browse Source
This commit is contained in:
Luke Heath 2023-03-27 09:53:05 -05:00 committed by GitHub
parent 22228d071d
commit 30aa31e763
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 7 additions and 64 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
.github/workflows/fleetctl-profiles.yml vendored
View File

@ -34,25 +34,17 @@ jobs:
apply-profiles:
timeout-minutes: 15
runs-on: ubuntu-latest
strategy:
matrix:
go-version: ['^1.19.4']
steps:
- name: Install Go
uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f # v2
with:
go-version: ${{ matrix.go-version }}
- name: Checkout Code
- name: Checkout code
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2
with:
repository: fleetdm/fleet
- name: Build Fleetctl
run: make fleetctl
- name: Install fleetctl
run: npm install -g fleetctl
- name: Configure Fleetctl
run: build/fleetctl config set --address $DOGFOOD_URL --token $DOGFOOD_API_TOKEN
- name: Configure fleetctl
run: fleetctl config set --address $DOGFOOD_URL --token $DOGFOOD_API_TOKEN
- name: Run fleetctl apply
run: |
@ -67,10 +59,10 @@ jobs:
kind: team
spec:
team:
name: 🧪 g-mdm lab
name: 💻 Workstations
mdm:
macos_settings:
custom_settings:
$profiles
" > team-workstations-config.yml
build/fleetctl apply -f team-workstations-config.yml
fleetctl apply -f team-workstations-config.yml

49
mdm_profiles/kernel_extensions.mobileconfig
View File

@ -1,49 +0,0 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>PayloadContent</key>
<array>
<dict>
<key>AllowNonAdminUserApprovals</key>
<false/>
<key>AllowUserOverrides</key>
<false/>
<key>AllowedKernelExtensions</key>
<dict/>
<key>AllowedTeamIdentifiers</key>
<array/>
<key>PayloadDescription</key>
<string>Configures Kernel Extension Policy settings</string>
<key>PayloadDisplayName</key>
<string>Kernel Extension Policy</string>
<key>PayloadIdentifier</key>
<string>com.github.erikberglund.ProfileCreator.75031211-FF2D-46A8-9AB8-2EADAECC1D75.com.apple.syspolicy.kernel-extension-policy.E2F5C072-5106-494B-B433-CE465D8B5B03</string>
<key>PayloadOrganization</key>
<string></string>
<key>PayloadType</key>
<string>com.apple.syspolicy.kernel-extension-policy</string>
<key>PayloadUUID</key>
<string>E2F5C072-5106-494B-B433-CE465D8B5B03</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
</array>
<key>PayloadDescription</key>
<string>Prevents the use of kernel extensions unless explicitly allowed</string>
<key>PayloadDisplayName</key>
<string>Turn off kernel extensions</string>
<key>PayloadIdentifier</key>
<string>com.github.erikberglund.ProfileCreator.75031211-FF2D-46A8-9AB8-2EADAECC1D75</string>
<key>PayloadOrganization</key>
<string>FleetDM</string>
<key>PayloadScope</key>
<string>System</string>
<key>PayloadType</key>
<string>Configuration</string>
<key>PayloadUUID</key>
<string>75031211-FF2D-46A8-9AB8-2EADAECC1D75</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
</plist>