fleetdm / fleet

Open-source platform for IT, security, and infrastructure teams. (Linux, macOS, Chrome, Windows, cloud, data center)
https://fleetdm.com
Other
3.05k stars 423 forks source link

Display human readable identifier for enrollment secrets in Fleet UI #20393

Open ddribeiro opened 3 months ago

ddribeiro commented 3 months ago

Problem

I want to be able to assign my Fleet enrollment secrets a human readable name so I can easily identify them. Currently, multiple enrollment secrets can be generated per team. Without a way to name or label the secrets, it is difficult to know which one is used for what since enrollment secrets are not human readable by nature.

If a single enrollment secret needs to be rotated, it would be much easier to identify which one if it had a name or label. Currently, customers might have to rotate all their enrollment secrets if they aren't sure which one is used for what.

What have you tried?

I went to the Fleet UI and tried to assign a name to my enrollment secrets, but there was no way to do this.

Potential solutions

Fleet admins should have the ability to apply "friendly" or "human readable" names to their enrollment secrets so those secrets can be easily identified.

When navigating to Hosts > Manage enroll secret > Add secret, a modal appears with the value of the secret. Having a "Name" text field here would allow a Fleet admin to name the secret to easily identify it going forward.

What is the expected workflow as a result of your proposal?

If an enrollment secret needs to be rotated, a Fleet admin would be able to log into the UI and easily identify which secret they should rotate instead of guessing and/or possibly having to rotate all their secrets.

JoStableford commented 3 months ago

Related to a Slack conversation