ChromeOS Tables: Return client certificates

RachelElysia commented 1 year ago

This issue's remaining effort can be completed in ≤1 sprint. It will be valuable even if nothing else ships.

It is planned and ready to implement. It is on the proper kanban board.

Goal

User story
As a ChromeOS admin,
I want to see all client side certificates on my managed devices
so that I can ensure my devices have the correct certificates and mitigate any certificates I don't recognize.

Note: testing is tricky due to extension needing to be installed via enterprise policy (may also require actual ChromeOS device or VM for testing) -Device attestation -Unknown certs that we don’t expect to see

Notes on current state of work: https://docs.google.com/document/d/1xlOHyxWgxlpIVPaMLlXm41ZkkH1XIzmmVFeiZf7A5H0/edit?usp=sharing

Relevant Chrome API docs: https://developer.chrome.com/docs/extensions/reference/enterprise_platformKeys/#method-getCertificates

Changes

This issue's estimation includes completing:

[ ] Outdated documentation changes: Add the table to the fleetdm.com/tables.
[ ] QA complete?

ℹ️ Please read this issue carefully and understand it. Pay special attention to UI wireframes, especially "dev notes".

Context

Requestor(s): @zayhanlon

QA

Risk assessment

[ ] Requires load testing TODO

Risk level: Low / High TODO

Risk description: TODO

Automated:

Fleet: Cover / Will not cover
QAWolf: Cover / Will not cover

Manual testing steps

Step 1
Step 2
Step 3

Testing notes

Confirmation

[ ] Engineer (@____): Added comment to user story confirming succesful completion of QA.
[ ] QA (@____): Added comment to user story confirming succesful completion of QA.

RachelElysia commented 1 year ago

Link to work that barely scrapped the surface

https://github.com/fleetdm/fleet/pull/12398