Greetings! Shipping this thing to eks just fell into my lap. So far, I have struggled to just get it working with mysql and redis pods as the prereqs and migration job(s) seem to be kind of all over the place in the docs for k8s deployments. Is there a useful combination of the "Deploying to kubernetes" and the fleet helm chart? Or, do I just need to closely follow one deployment doc or the other? tl;dr what is the path of least resistance to k8s?

Hey GUys I am getting too many of these in my logs:

{"component":"http","err":"enroll failed: no matching secret found","hostIdentifier":"47425939-C218-2861-9772-88AEDD045E4F","level":"error","method":"POST","took":"1.490816ms","ts":"2023-04-26T07:20:07.291211088Z","uri":"/api/v1/osquery/enroll","user":"unauthenticated"}	fleet
26/4/2023, 12:50:07 PM	{"component":"http","err":"enroll failed: no matching secret found","hostIdentifier":"4C4C4544-0038-4210-805A-B9C04F4D3933","level":"error","method":"POST","took":"1.487987ms","ts":"2023-04-26T07:20:07.2820646Z","uri":"/api/v1/osquery/enroll","user":"unauthenticated"}	fleet

26/4/2023, 125007 PM {“component”“http”,“err”“: Authentication required”,“internal”:“authentication error: invalid device authentication token”,“level”“info”,“path”“/api/latest/fleet/device/c3587424-dd59-4f50-b9b2-059c63a0feb4/desktop”,“ts”“2023 04 26T0720:07.271347944Z”} Any idea why would that be? Just trying to cleanup old agent and push new which keeps failing to show up and run in windows

🏗️ New commits pushed to Fleet »

Hi! How are you?

Is it possible to convert all installed applications to applications managed by MDM after installing the Apple enrollment profile with MDM permissions?

If not, is it possible to remove a previously installed application by a user through MDM? Or is there any possibility to do it through fleet management?

Hi fleet team, it looks like fleet doesn't have a automation to clean up the stale data in distributed_query_campaign_targets, is there any reason?

👋 Hello, team!

🏗️ New commits pushed to Fleet »

heya! I’m having newly enrolled machines not detect the users on the host (seeing the “No users detected on this host”) error. •

fleet-osquery

1.8.0 •

osquery

5.8.2 • Ubuntu desktop 22.10 •

fleet

4.30.1 Weirdly, if i manually run

select * from users;

from the fleet console, it picks up users 🤷 any ideas?

Hi team - I saw some comments on this but wanted to confirm - are Fleet packages available for 32-bit systems? Specifically we're looking at older Windows systems.

set the channel topic: ☁️🚀 The latest version of Fleet is 4.31.0. More info: https://github.com/fleetdm/fleet/releases/tag/fleet-v4.31.0 Upgrade now: https://github.com/fleetdm/fleet/releases/latest

Hi everyone! 👋 I recently joined Fleet as Product Designer. I'm looking forward to being a part of this community and collaborating with all of you.

🏗️ New commits pushed to Fleet »

Hello! Here's what's new in Fleet version 4.31.0 🚀💻fleet • GitOps (API only) granular role added (Premium and Ultimate license required): Ideal for automated workflows as part of CI/CD actions that need some configuration/write access, without defaulting access to the highest access role of admin. • mTLS support in fleetd: Support for TLS client certificates in fleetd (Orbit) to ensure secure communication to Fleet. This additional layer of security helps prevent unauthorized access and enhances data privacy. • 🐞*Bugs squashed:* ◦ Team maintainer or admin unable to 'save' a new policy if they were an observer of another team ◦ Dashboard links to hosts filtered by platform did not carry over the 'team' filter ◦ Improved performance of the teams dropdown for organizations with a large/growing number of teams ◦ Maintain previous table state or filtered state when returning 'back' on the software tab in host details page and software details page. ◦ Improved experience of tabbed navigation through the setup flow ◦ Tooltip information related to software bundles was cut off ◦ Several situations where a 500 error was returned rather than the appropriate 401 or 403 ◦ Many more - check our release notes below for details! MDM updates: • Added the

fleetctl get mdm-commands

command to get a list of MDM commands that were executed. Added the

GET /api/latest/fleet/mdm/apple/commands

API endpoint. • Added Fleet UI flows for uploading, downloading, deleting, and viewing information about a Fleet MDM bootstrap package. • Added

apple_bm_enabled_and_configured

to app config responses. • Added support for the

mdm.macos_setup.macos_setup_assistant

key in the 'config' and 'team' YAML payloads supported by

fleetctl apply

. • Added the endpoints to set, get and delete the macOS setup assistant associated with a team or no team (

GET

,

POST

and

DELETE

methods on the

/api/latest/fleet/mdm/apple/enrollment_profile

path). • Added functionality to gate Apple MDM login behind SAML authentication. • Added new "verifying" status for MDM profiles. • Updated macOS settings status filters and aggregate counts to more accurately reflect the status of FileVault settings. Please read the release notes for more information as well as full details on all of the available MDM capabilities, and let us know if you have any questions! 🤙🏽

Upgrading our Fleet server won’t mess with our existing MDM solution, correct?

Follow up question… https://fleetdm.com/ implies the whole product is still open-source… the telemetry portion of fleet utilizes osquery, what does the MDM portion utilize? MicroMDM? NanoMDM? Or was it built completely “in-house”?

Hi Team! Question: When using the the Fleet Serve command with a config file, does it only read the config file once, or does it check in on it periodically to re-authenticate?

Hello, I am trying to set up a self-hosted instance of FleetDM and I was wondering what version of MySQL is supported at the moment? (or if it’s possible to use another database vendor like PostgreSQL)

🏗️ New commits pushed to Fleet »

Hello! To be able to use the bootstrap package, do you have to pay for the apple developer license to sign it? because it gives me the following error:

Error: Couldn't edit bootstrap_package. The bootstrap_package must be signed.

Hey, Hopefully, you are doing great. I am looking to use FleetMDM in my FYP project. I want to use this on the backend and design my own Frontend app and communicate both platforms with the APIS, So I am just looking for this to release APIS from FleetMDM what process do I have to follow, means what expertise I needed.

Thanks in advance for your precious help

Hello everyone. Sorry, I have one issue that I would like to discuss with you. I have installed the fleet desktop on my computer (v4.22.1). and sometimes Fleet Desktop icon will not appear on my desktop. I think when I restart my server the fleet agent gets some trouble connecting to the server again. Are there any configs that I need to check ??

Hello there! I recently update our Fleet Community to 4.31.0 version. Used binary from here https://github.com/fleetdm/fleet/releases Now I see really strange thing. It looks like there is no more “Advanced” button on Schedule page to create packs and customise query scheduling. Is it correct behaviour? I added screenshot with our Fleet Sandbox page, it has such button. But I also added screenshot from my own test Fleet, and there is no such button on Schedule page. Please, help me to clarify this moment.

Hello - whats is the default endpoint url that the fleetdm agents use to communicate with our internal server is it https://nameofyourserver.com/api/v1/hosts? Trying to put the https://nameofyourserver.com/login page behind an IP address range….. might also be better if I could get this automatically to route via OKTA once this hits the https://nameofyourserver.com/login or https://nameofyourserver.com

To use the helm chart in the repository, MySQL and Redis need to be setup separately?

Is there a SIMPLE example of setting up fleetdm using docker compose anywhere?

🏗️ New commits pushed to Fleet »

Best practice question. I have fleetDM deployed in a docker container on an EC2 instance. The docker launch sets a bunch of variables and flags and such. If I want to cleanly shutdown and restart “fleetDM” is

docker restart fleet

best practice, or is there some better way, say with ‘fleetctl’ to restart the server? I’m concerned that database connections and state are all shut down and brought back cleanly, with any pending cache flushed to disk. Thanks.