Fleet-hosted agents with easy Web UI deployment

[Patagonia121]

• customer-mozartia Gong snippet: https://us-65885.app.gong.io/call?id=6719433018862554186&highlights=%5B%7B%22type%22%3A%22SHARE%22%2C%22from%22%3A817%2C%22to%22%3A1077%7D%5D
  • @noahtalerman: mozartia promise.
  • @noahtalerman: mozartia requested this because they're asking their end users to go to Google Drive to download/install the Fleet agent (fleetd). When the end user downloads fleetd for Windows, they see these warnings which is a bad user experience:

• customer-pingali: Gong snippet: https://us-65885.app.gong.io/call?id=6868753973144545371&highlights=%5B%7B%22type%22%3A%22SHARE%22%2C%22from%22%3A1391%2C%22to%22%3A1680%7D%5D

• customer-emerson: Gong snippet: https://us-65885.app.gong.io/call?id=3568046363149764604&highlights=%5B%7B%22type%22%3A%22SHARE%22%2C%22from%22%3A1495%2C%22to%22%3A1807%7D%5D

  • @kc9wwh: Customer leases devices to SMB type clients.
    • Each client will be represented by a team in Fleet.
    • Clients will NOT ever login to Fleet, all management will be handled in via a customer platform leveraging API calls to Fleet.
    • As such, each client will need to be provided installers for their team across various OSes leading to a large amount of overhead for the customer.
    • Having the installer packages created within the UI and available via an API endpoint would resolve this issue for them.

• prospect-interkosmos: Gong snippet: https://us-65885.app.gong.io/call?id=8550678791468892545&highlights=%5B%7B%22type%22%3A%22SHARE%22%2C%22from%22%3A1095%2C%22to%22%3A1176%7D%5D

• prospect-ramzel: Gong snippet: https://us-65885.app.gong.io/call?id=2894557475667303322&highlights=%5B%7B%22type%22%3A%22SHARE%22%2C%22from%22%3A189%2C%22to%22%3A240%7D%5D

• prospect-seidel : requested this feature for quality of life & ease of use to generate installers without having to use fleetctl. The team deploying Fleet is separate from the team that will be using Fleet day-to-day, therefore making the deployment process easy is greatly beneficial. Slack thread

• @noahtalerman: User requested this because they want a convenient way to download the agent. They're used to this experience from other MDM solutions. As a Mac Admin I'm not used to having to do all these steps for creating a Windows agent. I have to install Wine as a dependency, install fleetctl, and run fleetctl package just to get one .msi.

  • @noahtalerman: In the interim the IT admin could add fleetd to an S3 bucket and point their end users to the S3 URL. This way, end users wouldn't see a scary message.
  • @noahtalerman: Eventually Fleet could provide a URL to point end users to. Maybe the end user logs in with their Identity provider and this tells Fleet what Fleet instance the agent should be configured to talk to.
    • @noahtalerman: Fleet could also support the other way to enroll on Windows which is logging in with your work email under the System Settings equivalent on Windows.

• @allenhouchins: Eventually Fleet could have a /enroll?team_id=1 URL to send end users. When an end user visits that page, they're asked to login to their IdP. At that point they can grab whatever resource they need to enroll (i.e. fleetd agent or configuration profile).

---

[noahtalerman]

Problem