Remove key from example declaration #47
Conversation
There was a problem hiding this comment.
Thanks for this contribution! LGTM.
ServerToken is set by the Fleet server (as explained by @sheagcraig).
|
Also @noahtalerman maybe we can delete this example DDM file (as proposed by @sheagcraig) given Fleet manages OS updates and prevents the user from updating such DDM profiles? |
|
Thanks @sheagcraig!
@lucasmrod that makes sense to me but I think we want an example declaration (DDM) profile in here. I think let's add the password policy DDM profiles and remove OS updates. Thoughts? |
|
Here's a sample we have in dogfood: https://github.com/fleetdm/fleet/blob/main/it-and-security/lib/configuration-profiles/ios-passcode-settings-ddm.json |
|
I've opened #50 as a follow up to this change. |
|
@sheagcraig \o/ |
The key ServerToken is misspelled in this example declaration. Also, it shouldn't be added manually. The MDM itself should be adding that in after hashing the contents to ensure that each change results in a different token.
This declaration also doesn't work as of today; fleetctl gitops will reject it because the macos_updates parameter is protected from DDM SUS profiles conflicting with it. I'm told that's a future feature, so maybe just comment this example file or remove it until then?
Thanks!