Add new `get mdm-apple-bm` command to `fleetctl`

[lukeheath]

Goal

As a Fleet admin, I want to be able to connect Fleet to my Apple Business Manager account so that I can automatically enroll new, macOS hosts to Fleet. This way, I can order a new MacBook that automatically appears in Fleet when it's unboxed.

Related

• Parent epic: #7515

• 8870

Requirements

• Fleet Premium only
• Fleet admin can use get mdm-apple-bm to check the status of Apple Business Manager integration.

Tasks

1

• [x] Add API endpoint to retrieve the Apple BM information
  • GET /mdm/apple_bm? Make sure we're aligned with the endpoints created by the generation ticket: https://github.com/fleetdm/fleet/issues/8724.
  • Authorize only global admin users
  • Supports only premium
  • Returns the data as json (apple_id, org_name, mdm_server_url, renew_date, default_team
  • Renew date should be part of the BM token's JSON (access_token_expiry)
  • Default team is the settings set for the global config (mdm.apple_bm_default_team)
  • The other fields are returned by this Apple API: https://developer.apple.com/documentation/devicemanagement/get_account_detail

2

• [x] Implement fleetctl get mdm-apple-bm command as spec'd in the "Apple Business Manager - See status" section of https://github.com/fleetdm/fleet/issues/7515
  • Retrieve the metadata to return from the API defined in 1.
  • Format the output as documented in #7515 (in particular, see the warning/error message depending on renewal date, and the error message if no Apple BM is configured).

3

• [x] Add docs to fleetctl documenting new command.
  • Reference "Help pages" in #7515
  • Done, but fleetctl get will not show the command at the moment as it is marked "hidden" (like the MDM-related config flats in fleet serve), until we're releasing the feature as a whole.

4

• [x] Document the new API endpoint
  • Should be in contributor docs because it is powering fleetctl, and fleetctl is the recommended use.

[mna]

Estimate: 5