#1178 Santa: remaining v1 sync settings (bundles, path regex, event detail URL, export) Issue created by javuto Part of Santa/Workshop parity, building on the Santa sync server from #1142 (

pkg/santa

,

osctrl-tls

sync endpoint, Santa page in the UI). Problem The v1 protocol has only four stages (preflight, eventupload, ruledownload, postflight), all of which osctrl implements.

metrics

,

commands

and signal upload are not part of v1. What is left is the v1 settings osctrl does not send yet. Scope Preflight settings per environment, with Settings tab controls: •

enable_bundles

, and handling

EventUploadResponse.event_upload_bundle_binaries

so bundle events can be uploaded and turned into rules. •

enable_all_event_upload

,

disable_unknown_event_upload

. •

allowed_path_regex

,

blocked_path_regex

(validate the regex server-side). •

event_detail_url

,

event_detail_text

, so the block dialog can link to the osctrl binary page (#1173) or an approval request (#1168). •

export_configuration

(signed POST for client telemetry export), only if a log sink can accept it. Acceptance • Each setting reaches clients at preflight with tests; invalid regexes are rejected. • Depends on: #1184 Protocol Third-party sync servers must use the stable v1 protos (

buf.build/gen/go/northpolesec/protos/protocolbuffers/go/sync

).

syncv2

is internal to North Pole Security and is being removed from the published protos (northpolesec/santa#1270). jmpsec/osctrl