fleetdm / fleet

Open-source platform for IT, security, and infrastructure teams. (Linux, macOS, Chrome, Windows, cloud, data center)
https://fleetdm.com
Other
3.16k stars 432 forks source link

Move MDM `manage_windows_profiles` into its own cron job #22824

Open getvictor opened 1 month ago

getvictor commented 1 month ago

Currently, manage_windows_profiles sub-job is part of the mdm_apple_profile_manager cron job.

Issue 1. The cron is misnamed -- it has apple in the name. Bug? Issue 2. As we scale MDM and add features such as profile variable replacement, these cron jobs will sometimes take longer to run, causing delays in profile installation/removal.

The easiest immediate improvement is to put Windows profile management into its own mdm_windows_profile_manager cron job, so it can potentially run in parallel on a different Fleet server.

This is a small task that we will need to do eventually.

lukeheath commented 2 weeks ago

@getvictor Thanks for filing. I'm going to move this straight to the release board as it is a bug of sorts to have our windows profiles be delivered by an mdm_apple_profile_manager job. Please estimate on your own and work with @georgekarrv to prioritize against other items. Thanks!