Update profile delivery mechanism for Windows hosts

[georgekarrv]

Context

Current macOS logic works using algebra of sets to diff host_mdm_apple_profiles (current state) and mdm_apple_configuration_profiles (desired state) to calculate which profiles need to be installed/deleted on each host.

Delivery Changes

The diffing and assignment logic happens in two places, both need to be updated:

Cron job

There's a cron job that runs every 30 seconds and calls the ReconcileProfiles service method. This method needs to be updated to account for Windows hosts

https://github.com/fleetdm/fleet/blob/8950d46cbc9f746435fe1990a65733bd1b3253b5/server/service/apple_mdm.go#L2499

Notes:

• This method actually enqueues the command to deliver the profile (add that logic as part of this as well)
• Windows profiles are a bunch of <Replace> directives (example). We should wrap them in the proper SyncML body when enqueuing them.

Operations that trigger profile changes

Any operation that changes the team of a host, creates a host, etc. calls the BulkSetPendingMDMAppleHostProfiles function with different arguments depending on the context.

Update the function definition to account for windows profiles.

https://github.com/fleetdm/fleet/blob/8950d46cbc9f746435fe1990a65733bd1b3253b5/server/datastore/mysql/apple_mdm.go#L1252

Status changes

Status changes are specified in Figma

On each operation, we need to make sure we're updating the status column of the table that tracks the Windows profiles. Set it to:

• "pending" on BulkSetPendingMDMAppleHostProfiles and in the cron when we enqueue the command to deliver the profile
• "verifying" when we get a 200 response from the MDM protocol
• "verified" will be handled in https://github.com/fleetdm/fleet/issues/14426
• "failed" if the protocol responded with a 4xx or 5xx status code

[georgekarrv]

Hey team! Please add your planning poker estimate with Zenhub @gillespi314 @marcosd4h @mna @roperzh

[georgekarrv]

Idea: ReconcileProfiles create a new widows specific ReconcileProfiles function to keep them separate.

[fleet-release]

Windows profiles sync, Gleaming like a cloud city, Security enhanced.