riccardom
316f8a84cc
exclude MDM profile adminstrated keys data from debug bundle
2026-06-09 16:21:41 +02:00
riccardom
d5419355f6
nil,nil is no policy and no error. Allow it
2026-06-09 13:37:27 +02:00
riccardom
20fc908398
nil,nil is no policy and no error. Allow it
2026-06-09 13:29:37 +02:00
coderabbitai[bot]
963d8c8825
📝 Add docstrings to mdm_integration
...
Docstrings generation was requested by @riccardomanfrin.
* https://github.com/netbirdio/netbird/pull/6374#issuecomment-4658991606
The following files were modified:
* `client/cmd/debug.go`
* `client/cmd/root.go`
* `client/internal/profilemanager/config.go`
* `client/mdm/policy.go`
* `client/mdm/policy_darwin.go`
* `client/mdm/policy_mobile.go`
* `client/mdm/policy_other.go`
* `client/mdm/policy_windows.go`
* `client/mdm/ticker.go`
* `client/server/mdm.go`
* `client/server/server.go`
* `client/ui/client_ui.go`
* `docs/netbird-macos.sh`
2026-06-09 10:49:57 +00:00
riccardom
d7f00b3beb
Linting
2026-06-09 12:45:50 +02:00
riccardom
d806f25b33
CI fixes
...
- Add docstrings to `mdm_integration`
- refactor for cognitive complexity
- mod tidy
2026-06-09 12:15:49 +02:00
riccardom
46602e4176
[PROVISIONING] ADMX/ADML/PS/bash scripts/templates
2026-06-09 09:21:03 +02:00
riccardom
b09a07023a
Tests MDM config reload via ticker
2026-06-08 18:06:02 +02:00
riccardom
61b5b6b1a1
Introduces support for darwing plist loading
2026-06-08 18:06:02 +02:00
riccardom
b8818adc41
Adds dep for reading plist files
2026-06-08 18:06:02 +02:00
riccardom
83430c39e4
[UI] Fix for "hide" not working when propagating to parent with children
2026-06-08 18:06:02 +02:00
riccardom
47d438976e
Pins feat profile retrieval to notif event
2026-06-08 18:06:02 +02:00
riccardom
3bef0fec5b
[UI] Removes --disable-advanced-settings
2026-06-08 18:06:02 +02:00
riccardom
be3fe6edd6
[PROTO] Removes --disable-advanced-settings
2026-06-08 18:06:02 +02:00
riccardom
04998f6a1c
Removes --disable-advanced-settings
...
It was a typo in our meetings. the actual thing is --disable-update-settings
2026-06-08 18:06:02 +02:00
riccardom
e55b64f2f7
Fixup: MDM wins. always
2026-06-08 18:06:02 +02:00
riccardom
d6780522ea
[UI] Aligns to "enable/disable once on change only"
2026-06-08 18:06:02 +02:00
riccardom
01a4c245a7
Enforces disable networks
2026-06-08 18:06:02 +02:00
riccardom
6355a24deb
[UI] Fixup for profile enable/disable toggle
...
We need to align the initial state to evaluate the delta in case.
The initial state has to be "true" since the profile starts visible.
Then we receive MDM and transition the cache bool value to the actual
MDM imposed state
2026-06-08 18:06:02 +02:00
riccardom
3d4240b979
[UI] Fixup for preshared key
2026-06-08 18:06:02 +02:00
riccardom
2be7ef4929
[UI] Fixup advanced Settings
2026-06-08 18:06:02 +02:00
riccardom
6509174400
Evaluate disable-update-settings errors only when there's an actual override
2026-06-08 18:06:02 +02:00
riccardom
b200f47e6d
Adds Gate Login as well when --disable-update-settings=true is given to service
...
This commit tries to settle things with an old PR-4237 which had relaxed
the case where the SetConfig returned an `Unavailable` code error.
Under this circumnstance the PR allowed the upFunc to just emit a warning and
progress further with the login gRPC. Since the login call is consuming
the --management-url coming from the `up` command, it might be possible
to abuse the "Unavailable" code to inject a management URL that is different
from the configured one even though the --disable-update-settings is set
to true (?)
2026-06-08 18:06:02 +02:00
riccardom
1b477d39a8
Adds support for disabling of Profiles and UpdateSettings feature flags
2026-06-08 18:06:02 +02:00
riccardom
7570c5c911
Toggle gray in/out for Advanced Settings
2026-06-08 18:06:02 +02:00
riccardom
bf8c8b0ea3
Apply MDM locks
2026-06-08 18:06:02 +02:00
riccardom
362efb832c
Fixup presharedkey
2026-06-08 18:06:02 +02:00
riccardom
1543d43a20
Advanced Settings locking
2026-06-08 18:06:02 +02:00
riccardom
cee17ebc36
Lock toggle Settngs
2026-06-08 18:06:02 +02:00
riccardom
aab1a3e150
UI behavior conflicts relaxation
...
UI sends full config snapshot with all values. It doesn't
make sense to block it if the values are aligned with the
values constrained by the MDM policy. It's just simplier
to allow values that are compliant. (this goes for the CLI
as well at this point)
2026-06-08 18:06:02 +02:00
riccardom
1100cea6a4
Add events to resync UI to actual config
...
This also provide fixup for UI no aligning to changed config when coming from cli up with config flags.
2026-06-08 18:06:02 +02:00
riccardom
029e69279c
Publishes event for UI to sync upon MDM changes
2026-06-08 18:06:02 +02:00
riccardom
c759aed3a3
Adds also up/start after cancel
2026-06-08 18:06:02 +02:00
riccardom
c36bf3a171
Adds MDM 1m diff checker & reloader
2026-06-08 18:06:02 +02:00
riccardom
08966adf30
Adds debug config cobra command
...
This can be useful for troubleshooting and checking config
now that its resolution is not trivial
defaults > config > env cars > CLI/UI > MDM
2026-06-08 18:06:02 +02:00
riccardom
0db22debaf
Prefix every log with MDM
2026-06-08 14:37:10 +02:00
riccardom
0594f76655
Adds some log
2026-06-08 14:37:10 +02:00
riccardom
5271df5962
Align split tunnel code
2026-06-08 14:37:10 +02:00
riccardom
2d7949adfe
Cleanup setupKey to align to linear
2026-06-08 14:37:10 +02:00
riccardom
451fa5e142
Adds missing WGPort config
2026-06-08 14:37:10 +02:00
riccardom
22edfdd52b
Implements windows loading of MDM policy
2026-06-08 14:37:10 +02:00
riccardom
df9e216370
MDM Name scoping for clarity
2026-06-08 14:37:10 +02:00
riccardom
293a93910e
gRPC MDM changes
2026-06-08 14:37:10 +02:00
riccardom
66e807cc05
Adds initial 101 MDM policy business logic testing
2026-06-08 14:37:10 +02:00
riccardom
5255f5111b
Add ManagedFields to returned config over GetConfig
2026-06-08 14:37:10 +02:00
riccardom
978a392453
Return error if trying to modify any config that is gated by MDM
2026-06-08 14:37:10 +02:00
riccardom
78fe7fc510
Helpers business logic
2026-06-08 14:37:10 +02:00
riccardom
3ad961c9a7
Unit tests
2026-06-08 14:37:10 +02:00
riccardom
607cb56515
Applies MDM override
2026-06-08 14:37:10 +02:00
riccardom
ce0750b73a
Initial scaffolding
2026-06-08 14:37:10 +02:00
