kolide / fleet

A flexible control server for osquery fleets
https://kolide.com/fleet
MIT License
1.1k stars 260 forks source link

fleetctl: allow disabling packs via apply #2325

Closed nyanshak closed 4 years ago

nyanshak commented 4 years ago
nyanshak commented 4 years ago
fleetctl get packs
+--------------------+----------+-------------+----------+
|        NAME        | PLATFORM | DESCRIPTION | DISABLED |
+--------------------+----------+-------------+----------+
| example-pack       |          |             | true     |
+--------------------+----------+-------------+----------+

fleetctl get packs --yaml
---
kind: pack
spec:
  disabled: false
  id: 20
  name: example-pack
  queries:
    - description: ""
      interval: 30
      name: example-query
      query: example-query
  targets:
    labels:
      - All Hosts

fleetctl get pack osquery-monitoring --with-queries
# same output as previous command with the queries:
...
---
apiVersion: v1
kind: query
spec:
  description: example query
  name: example-query
  query: SELECT build_platform FROM osquery_info;