Orchestration API #268

Closed
opened 2022-01-20 16:46:17 +00:00 by aday · 10 comments
Owner

As we've discussed how to improve the story for managed Workstation deployments, one proposal that's been raised is ensuring that we have an API for orchestration.

As we've discussed how to improve the story for managed Workstation deployments, one proposal that's been raised is ensuring that we have an API for orchestration.
Contributor

Can you elaborate on what you mean by orchestration? Running commands across multiple systems?

Can you elaborate on what you mean by orchestration? Running commands across multiple systems?
Author
Owner

Maybe @ngompa can provide some details of what he had in mind.

Maybe @ngompa can provide some details of what he had in mind.
Author
Owner

We discussed this at today's working group meeting, and it's clear that there's a few aspects to it.

There are two potential aspects to an orchestration API:

  1. Reporting - for things like compliance with security policies, status of software updates and versions, etc
  2. Performing actions on the system, like changing settings or configuration

An initial action towards 1 would be to package and include osquery.

The other bigger question is what any future orchestration API would talk to. Options might include Cockpit, Ansible, something from the IoT space, or Microsoft Intune.

We discussed this at today's working group meeting, and it's clear that there's a few aspects to it. There are two potential aspects to an orchestration API: 1. Reporting - for things like compliance with security policies, status of software updates and versions, etc 2. Performing actions on the system, like changing settings or configuration An initial action towards 1 would be to package and include osquery. The other bigger question is what any future orchestration API would talk to. Options might include Cockpit, Ansible, something from the IoT space, or Microsoft Intune.
Author
Owner

@ngompa said that he'd package osquery - setting pending-action for that.

@ngompa said that he'd package osquery - setting pending-action for that.
Author
Owner

Metadata Update from @aday:

  • Issue untagged with: meeting-request
  • Issue tagged with: pending-action
**Metadata Update from @aday**: - Issue **un**tagged with: meeting-request - Issue tagged with: pending-action
Owner

By the way, here are a couple of examples of OSQuery based systems:

By the way, here are a couple of examples of OSQuery based systems: * [Fleet](https://fleetdm.com/) * [Kolide](https://www.kolide.com/)
Owner

Honestly I have no idea what this would look like. @ngompa could you elaborate more here please?

Is osquery packaging still WIP?

Honestly I have no idea what this would look like. @ngompa could you elaborate more here please? Is osquery packaging still WIP?
Owner

Metadata Update from @catanzaro:

  • Issue assigned to ngompa
**Metadata Update from @catanzaro**: - Issue assigned to ngompa
Author
Owner

We discussed this ticket during today's meeting, and didn't feel that the working group can carry it forward. If someone wants to package osquery then they are free to do so.

We discussed this ticket during today's meeting, and didn't feel that the working group can carry it forward. If someone wants to package osquery then they are free to do so.
Author
Owner

Metadata Update from @aday:

  • Issue close_status updated to: Won't fix
  • Issue status updated to: Closed (was: Open)
**Metadata Update from @aday**: - Issue close_status updated to: Won't fix - Issue status updated to: Closed (was: Open)
Sign in to join this conversation.
No milestone
No project
No assignees
4 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
workstation/tickets#268
No description provided.